Privacy policy
An account of what the website uses, why it uses it and the choices available to you.
Last updated 1 October 2026
About this policy
This policy explains how Furtherline handles personal information when you visit furtherline.com, prepare a brief or contact us about engineering work. Personal information identifies you or can be connected to you.
Links to other websites lead to services with their own privacy practices. This policy covers Furtherline’s website and our handling of information you share with us.
Information you provide
An enquiry includes your name, email address, product website where requested and the description you choose to send. A partnership application also includes the product stage and challenge you select. We keep its reference, page context and correspondence needed to understand your request and respond. Please do not include passwords, access credentials or sensitive personal information.
The scaling brief works in your browser. Creating, editing, copying or downloading it does not send its answers to Furtherline. Answers are sent only when you submit the enquiry form. Leaving or reloading the brief page discards unsent answers.
An enquiry does not subscribe you to a mailing list. We use your contact details to discuss the request and manage any resulting business relationship.
If you request an emailed growth guide, we use your email address only to send that copy through Amazon Web Services Simple Email Service. You are not added to a mailing list. The delivery request and email address expire from our active delivery records after seven days; deletion by the storage service can take additional time. A one-day hashed address record and an hourly counter prevent repeat requests and abuse. Our email provider retains delivery information under its service terms.
Technical information and website measurement
Website requests contain technical information such as an IP address, requested page, browser information and request time. Hosting services use request and error information to serve pages, investigate faults and protect the website.
With analytics permission, we record page visits and interactions such as using a contact link or completing a brief. Events use a random session reference and predefined page and event labels. Names, email addresses and form answers are excluded. Recognised campaign, traffic-source and ad-creative labels are retained only with marketing permission. With that permission, an advertising click identifier may also be kept for the browser-tab session and attached separately to a submitted enquiry for up to 90 days, to connect the ad with a later business outcome. Click identifiers are excluded from our general interaction events and reports.
We retain enquiry progress and business outcomes to manage relationships and understand work generated through the website. Where you have allowed analytics, we can associate the visit with the enquiry. Optional measurement remains off when you decline it.
Why we use information
We use enquiry information to answer you and, where applicable, take steps you request before entering a contract or deliver agreed services. We rely on legitimate interests for ordinary business correspondence, relationship administration and protecting the website. Records required by law are handled on that basis.
Optional analytics and advertising measurement rely on consent. Withdraw it through Cookie settings to stop future optional collection. Withdrawal does not change the lawfulness of earlier processing. Global Privacy Control keeps marketing permission off.
The brief organises your answers. It does not make an automated decision about accepting you as a customer. Partnership decisions are made by people.
Who receives information
Amazon Web Services provides website hosting and delivery. Cloudflare manages our domain’s DNS. People working for Furtherline and providers handling storage, correspondence or business administration receive information as needed for that work. Professional advisers or public authorities may receive information where necessary for a legal obligation or claim.
Google Analytics, provided by Google, receives website measurement information after you allow analytics. We use Google Tag Manager to load the tags only after you allow an optional category. We do not send your form answers or contact details to Google Analytics. Google signals, user-provided data collection and ads personalisation are disabled. No Google Ads tags are enabled.
With marketing permission, the X Pixel receives page-visit and accepted-application events to measure our X advertising. X receives technical information such as your IP address, browser information, page address and advertising identifiers. An accepted application includes its random reference for deduplication. We do not supply your name, email address, form answers or payment information to the pixel. Applications remain available when you decline marketing. Qualified-client and payment outcomes are not sent through this browser pixel.
Enquiries and first-party measurement records are stored by Amazon Web Services in Frankfurt, Germany. Amazon Simple Email Service sends enquiry notifications from the same AWS region. Website delivery uses Amazon CloudFront, whose global edge network may process request information outside the European Economic Area. Google Analytics and Google Tag Manager process permitted measurement information through Google infrastructure, which may be outside the European Economic Area. Cloudflare provides DNS services. Correspondence is handled through Google Workspace, whose provider operations may process information outside the European Economic Area. With marketing permission, X receives website advertising measurement through the X website pixel, including technical request information and a random reference for accepted applications. X provider operations may process information outside the European Economic Area.
How Google uses information from sites that use its services
International processing
Website delivery and provider operations can involve processing outside the European Economic Area. Where transfers require safeguards, we use an applicable adequacy decision or another lawful mechanism, such as the European Commission’s standard contractual clauses. You can request information about applicable safeguards using the contact details below.
Security and retention
We use access controls and technical measures appropriate to the information we handle. No online service can promise absolute security. Contact us if you believe information sent to Furtherline has been exposed or used improperly.
We keep enquiries and correspondence while needed to respond, discuss the requested work and manage any resulting relationship. We determine this by whether a conversation or relationship is active, whether outstanding questions or claims remain, and whether legal record-keeping duties apply. Information no longer needed for these purposes is deleted or anonymised.
Your browser’s saved consent choice is valid for 180 days. The optional session reference lasts for the browser session and is cleared on analytics withdrawal. Our raw optional interaction records expire after 90 days. Enquiry and business records are separate from these interaction records.
Raw optional first-party interaction records expire after 90 days. Google Analytics user and event retention is two months, without resetting on new activity. Aggregated standard reports are not subject to this retention setting.
Your rights
Under applicable data-protection law, you may request access, correction, deletion, restriction or a portable copy of your information. You may object to processing based on legitimate interests and withdraw consent where processing relies on it. Rights depend on the circumstances, including duties to retain certain records.
Use the contact details below to make a request. We may need to verify your identity. You can also complain to the Dutch data-protection authority, the Autoriteit Persoonsgegevens, or your local supervisory authority.
Children
Furtherline provides engineering services to businesses. This website is not directed at children, and we do not knowingly seek their personal information. If a child has sent us information, contact us so we can address it.
Cookies and similar technologies
Our cookie policy explains browser storage, optional measurement and how to change your choices. You can read the website and prepare a brief without accepting analytics or marketing.
Changes to this policy
We update this page when our services or information practices change. The date above identifies the latest revision. Where required, we will bring material changes to your attention and seek a new choice before changing consent-based processing.
Contact us
Furtherline is responsible for the personal information described in these policies. For privacy requests, legal questions or concerns about this website, contact us using the details below.
Vincent van Goghweg 18, 1506JC Zaandam, The Netherlands