Privacy Policy

Dora B.V. runs this website. You can reach us at [email protected].

Address: Waldorpstraat 5, 2521 CA The Hague, The Netherlands

Registration: KvK: in progress, VAT: in progress

This policy covers this marketing website only. The Dora CRM application at https://app.doracrm.com is a separate service and is not covered by this page.

We collect very little:

• Messages you send us. When you use the contact form, we receive the name, email address, company (if you give one), subject and message you enter, and our email provider delivers them to [email protected]. If you email us directly, we receive what you choose to send from your email account.
• A spam check on the contact page. To keep automated spam out of the contact form, the contact page uses Cloudflare Turnstile. It looks at technical signals such as your IP address and browser details to tell people from bots, usually without asking you to do anything.
• Technical logs. Like most websites, the server that delivers this site may record technical details such as your IP address, the pages requested, the date and time, and your browser type. We use them to keep the site secure and running.
• Your theme choice. If you use the light and dark switch, your choice is saved in your browser's local storage so the site can remember it. It stays on your device and is never sent to us.
• Website statistics, only if you accept. We use Google Analytics to see how the site is used, for example which pages are visited, how visitors find us, and roughly where they are and what device and browser they use. It records this under a random identifier. It does not give us your name or email address.
• Your analytics choice. We remember whether you accepted or declined in your browser's local storage, so we do not have to ask again on every visit. It stays on your device and is never sent to us.

This site does not use advertising cookies or trackers. If you accept analytics, Google Analytics sets two cookies in your browser, _ga and a second one whose name starts with _ga_, which expire after up to two years. They recognise returning visitors and group page views into visits. If you decline, no analytics cookies are set and nothing is sent to Google. Fonts, images and scripts are served from the site itself, except the Google Analytics script, which is only loaded after you accept.

You can change your choice at any time with Cookie settings in the footer of every page. If you withdraw your consent, measurement stops and the analytics cookies are removed from your browser.

One page is different: the contact page loads Cloudflare Turnstile from Cloudflare's servers to protect the form against spam (see above). Turnstile is used only for that check, not for advertising or analytics.

We use the messages you send us to answer your questions and to follow up about Dora CRM. We use technical logs to run and protect the site. We do not sell your personal data.

If you accept analytics, we use the statistics to understand how the site is used and to improve it. We do not use them to identify you, and we do not use them for advertising.

Where data protection law asks for a legal basis, we rely on our legitimate interest in running this site and answering enquiries, and on taking steps at your request before a contract.

We use the spam check only to keep automated messages out of the contact form. This is part of our legitimate interest in running the site securely.

For analytics we rely on your consent. You can withdraw it at any time, which does not affect anything done before you withdrew it.

We do not share your messages with anyone else, except with service providers who help us run the site and our email, such as hosting and email providers, and only to the extent they need it to do that job, or where the law requires it.

Messages from the contact form are delivered to us by our email provider, Brevo. The spam check is run by Cloudflare, which processes the signals on our behalf, and on its own behalf to improve its bot detection, as described in Cloudflare's Turnstile Privacy Addendum. Cloudflare may process them outside the European Economic Area, including in the United States, under safeguards such as the EU-US Data Privacy Framework or standard contractual clauses.

If you accept analytics, Google processes the statistics on our behalf as our service provider. Google may process this data outside the European Economic Area, including in the United States, under safeguards such as the EU-US Data Privacy Framework or standard contractual clauses. We do not use Google's advertising features.

We keep emails for as long as we need to deal with your enquiry and any follow-up, and then delete them or keep only what the law requires. Server logs are kept for a limited time.

Analytics data is kept in Google Analytics for up to 14 months and is then deleted automatically.

Depending on where you live, you may have the right to ask for a copy of your personal data, to have it corrected or deleted, and to object to or restrict how we use it. To use these rights, email [email protected]. You can also complain to your local data protection authority.

We may update this policy from time to time. The date at the top shows when it last changed.

If anything here is unclear, write to [email protected] and we will be happy to explain.