Trust & Security

How we handle security, privacy and your data

This page is maintained by ConversionWorks to answer common security and privacy questions about our website and the engagements we run for clients. It describes practices that are in place today and is not an independent certification.

Last updated: June 2026

Shared responsibility

ConversionWorks is responsible for how we collect, process and protect data that you submit through this website and through client engagements. Our hosting and backend providers are responsible for the underlying platform security of their services. Customers and visitors remain responsible for the accuracy of the information they submit and for protecting their own accounts and devices.

Data we collect on this site

The contact form on this site collects your name, email address, optional company name and the message you send us, together with the language you submitted in and your browser user agent. We use this information only to respond to your request and to follow up on the opportunity you describe.

We do not sell personal data and we do not use the messages you send us to train third-party AI models.

Access controls

Contact submissions are stored in a managed database with row-level security enabled. Read access is restricted to our server-side application using privileged credentials; the public API cannot read submitted messages. Access to the underlying backend is limited to ConversionWorks team members who need it to operate the service.

Encryption

Traffic between your browser and this site is served over HTTPS. Data stored in our managed backend is encrypted at rest by the hosting provider. Specific cryptographic configurations are managed by the underlying platform and may change as that platform evolves.

Email and confirmation messages

When you submit the contact form we send a confirmation email to the address you provided and an internal notification to our team inbox. Confirmation emails are sent via our email delivery provider; please contact us if you would prefer not to receive an automated confirmation.

Subprocessors and integrations

We use a small set of vetted providers to operate this website, including a managed backend platform for database and authentication, a transactional email provider for confirmation messages, and standard web analytics on aggregated traffic data. We do not embed third-party tracking pixels that build cross-site advertising profiles.

Retention and deletion

We retain contact submissions for as long as is reasonably needed to handle your request and to maintain a record of the conversation for legitimate business purposes. You can request deletion of your submission at any time by emailing us at the address below; we will confirm once the data has been removed.

Privacy requests

If you would like to access, correct or delete personal data we hold about you, send your request to accounts@conversionworks.nl. We aim to respond within one working week.

Security contact and vulnerability reporting

If you believe you have found a security issue affecting this website or our services, please email accounts@conversionworks.nl with details and, where possible, steps to reproduce. Please give us a reasonable opportunity to investigate and remediate before any public disclosure. We appreciate responsible reports.

Compliance

ConversionWorks is established in the Netherlands and operates under Dutch and EU law, including the GDPR. This page describes current operational practices and is not a claim of certification against any specific standard such as ISO 27001, SOC 2 or HIPAA. If your organization needs a formal questionnaire completed or a data processing agreement, please reach out.

Changes to this page

We update this page as our practices evolve. Material changes will be reflected in the "last updated" date above.