Last updated: 15 August 2026.

Rinsly takes the protection of your personal data seriously. This privacy policy explains which data we process when you visit our website or contact us, and also when we have measured your company’s website without you having contacted us (see section 7), for what purpose and on what legal basis, and what rights you have.

1. Controller

Rinsly (Yaron Schaeffer), Kazernestraat 6, 3441 BB Woerden, the Netherlands. Chamber of Commerce (KvK) 85578835. Email: contact@rinsly.com. Rinsly is the controller for the processing of personal data through this website.

2. Data we process

• Contact details you provide yourself through the contact form or by email: your name, email address and the content of your message.
• Technical data recorded automatically when you visit the site: your IP address, browser type and technical log and usage data.
• Website-check data when you use our free website check: the web address you submit, the generated report and an encrypted (hashed) derivative of your IP address. We use that derivative solely to prevent abuse (a daily maximum of checks) and delete it within 24 hours; the report is kept for 90 days. We do not store your full IP address.

3. Purposes and legal bases

We process your data only for the following purposes:

• Answering your question or preparing a quote. Basis: performance of, or steps prior to, a contract (art. 6(1)(b) GDPR).
• Securing, maintaining and improving the website, including limiting abuse of the free website check. Basis: our legitimate interest in a secure, well-functioning website (art. 6(1)(f) GDPR).
• Complying with legal obligations, such as tax retention rules. Basis: a legal obligation (art. 6(1)(c) GDPR).

4. Cookies

This website places only functional and strictly necessary cookies required for the site to work and to be secure. No consent is required for these. Should analytics or tracking cookies be introduced in the future, we will ask for your consent first.

5. Retention

We do not keep your data longer than necessary for the purposes above. We keep contact details for as long as needed to handle your enquiry and for a reasonable period afterwards; data subject to a legal retention obligation is kept for the statutory term. Technical logs are kept for a limited period.

6. Processors and third parties

For hosting and running the website we use Cloudflare, Inc., which processes personal data as our processor on our instructions. For the assessments we generate when measuring business websites (see section 7) we also use Anthropic, PBC, which processes the measured data and screenshots as our processor to generate that assessment. We do not sell your data and do not share it with third parties except where necessary for the purposes above or where legally required.

7. Businesses whose website we measured

Rinsly measures websites at scale to see how far they sit from current web practice. In doing so we visit publicly accessible websites and record: the web address and company name, the measurement results (five grades and the findings behind them), a screenshot of the public page, and the contact details the business itself has published on that website or in a public register. Where those contact details belong to an individual (a sole trader or freelancer, for instance) they are personal data and this section applies.

We did not obtain this data from you; we collected it ourselves from public sources. That is why we inform you here actively, rather than only on request.

• Purpose: to assess whether the business would benefit from a new or better-maintained website, and to approach it about that, by us or by one of our partners.
• Legal basis: our legitimate interest, and that of our partners, in business acquisition (art. 6(1)(f) GDPR). We limit ourselves to business contact details and business communication, and process no special categories of personal data.
• Automated assessment: the measurement results and a screenshot of the website are processed by Anthropic, PBC (the provider of the Claude model) to generate the assessment. This is not automated decision-making with legal effects on you: the assessment only determines whether and how we, or our partners, get in touch, not whether you receive a service or on what terms.
• Sharing with partners: we may make such an assessment (a “lead”) available to a design studio we work with. That partner may use the data only to approach the business about a website, may not resell or further distribute it, and is an independent controller for its own use.
• Retention: we keep an assessment for as long as it is current enough to be useful, and in any event no longer than twelve months after the measurement, unless the business becomes a client.

You may object to this at any time, and it costs you no more than an email to contact@rinsly.com. On objection we remove the business from our data, stop approaching it, stop making it available to partners, and pass the objection on to any partner that had already received the assessment. The rights in section 9 (access, rectification, erasure) apply in full.

8. Transfers outside the EEA

Cloudflare, Inc. and Anthropic, PBC are based in the United States. Where personal data is processed outside the European Economic Area, this takes place under appropriate safeguards such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses (SCCs).

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, objection to processing and data portability. Send your request to contact@rinsly.com; we will respond within the statutory period. If you disagree with how we handle your data, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

10. Security

We take appropriate technical and organisational measures to protect your personal data, including encrypted connections (TLS), access control and continuous point-in-time database recovery via Cloudflare Time Travel. A backup of media files is not currently automated.

11. Changes

We may update this privacy policy from time to time. The current version is always available on this page, with the date of the last change shown at the top.