Privacy notice

Updated 21 September 2026

Masthold is the controller for the website and business-contact information described below. Contact omer@masthold.ai about your personal data.

For data processed on a customer's behalf, that customer is the controller and Masthold is its processor. Address requests about that data to the customer.

What we collect and why

• Enquiries, access requests and meetings: work contact details, company, role, messages and booking details. We use these to answer requests, arrange access and meetings, and maintain business relationships, based on our legitimate interests in those activities.
• Customer administration: contact details, support correspondence and invoice information. We use these to manage customer relationships and support, based on legitimate interests, and meet legal accounting obligations.
• Website security: IP addresses, browser and verification signals, and request records. Our legitimate interest is operating the website and preventing spam and abuse.

Information comes from you or a colleague at your company. Required form fields are needed to handle your request; other fields are optional.

Sharing and international transfers

We share relevant information with technology providers for website hosting and storage, email delivery, business records, scheduling and spam prevention. They receive the contact, correspondence, booking or technical data needed for their service. We also disclose information when required by law.

Where a form uses Cloudflare Turnstile, it receives technical signals to prevent abuse and also uses them to improve bot detection. See the Turnstile Privacy Addendum.

Providers operate inside and outside the European Economic Area, including the United States. Transfers outside the EEA rely on applicable adequacy decisions or safeguards such as EU standard contractual clauses. You can request recipient details and a copy of the relevant safeguards at omer@masthold.ai.

How long we keep information

• Enquiries and contacts: until the enquiry, agreed follow-up or business relationship ends, unless a specific legal or contractual recordkeeping need applies.
• Access requests: until withdrawn or closed, unless the record becomes part of a customer relationship or legal retention applies.
• Customer and billing records: for the relationship and outstanding matters; accounting and dispute records follow the applicable statutory periods or proceedings.
• Security records: until the investigation or repeated-abuse risk they address ends, unless legal preservation is required.

Service-provider copies follow these purposes and their applicable backup deletion cycles.

Your rights

Subject to the applicable conditions, you can request access, correction, deletion, restriction or a portable copy of your data. You can object to processing based on legitimate interests.

Send requests to omer@masthold.ai. We may verify your identity and respond without undue delay, normally within one month. If a permitted extension is needed, we explain it within that month.

You can complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority, or the relevant authority where you live or work.