Privacy statement
Last updated: 19 August 2026
Who we are
WaveGuard, registered at [registered address], the Netherlands. Chamber of Commerce number: [KvK number]. VAT number: [VAT number]. Email: info@waveguard.nl.
WaveGuard is the controller for the personal data collected through this website. If you have a question about this statement or about your data, email info@waveguard.nl.
What data we process
We only process data you provide yourself, plus technical data generated by every website visit:
- Contact form: your name, email address and the content of your message.
- Waitlist: your email address.
- Order: your name, email address, shipping address and payment details. Payment details are processed directly by Stripe; we never see or store your card number.
- Server logs: your IP address, browser type and time of visit, recorded automatically by our hosting provider.
Why we process it
Each purpose has a legal basis under Article 6 GDPR:
- Contact form: to answer your question. Basis: legitimate interest (Art. 6(1)(f) GDPR).
- Waitlist: to email you when WaveGuard becomes available. Basis: your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time via the unsubscribe link in every email.
- Order: to fulfil and deliver your order. Basis: performance of the contract (Art. 6(1)(b) GDPR).
- Invoices and bookkeeping: to meet our statutory retention obligations. Basis: legal obligation (Art. 6(1)(c) GDPR).
- Server logs: to keep the site secure and available and to prevent abuse. Basis: legitimate interest.
Who we share data with
We never sell your data. We do use service providers that process data on our behalf, under data processing agreements:
- Resend — email delivery (contact form, waitlist, confirmations). Resend is based in the United States.
- Stripe — payments and payment data. Stripe processes payments for European customers through Stripe Payments Europe Ltd. in Ireland.
- Our hosting provider — website hosting and server logs.
Transfers outside the European Economic Area
Sending email involves a transfer of data to a provider in the United States. That transfer relies on the European Commission's Standard Contractual Clauses and/or certification under the EU-US Data Privacy Framework. Email info@waveguard.nl if you would like to see a copy of the safeguards in place.
How long we keep data
- Contact messages: up to 12 months after your question is resolved.
- Waitlist: until you unsubscribe, or at most 24 months after signup if WaveGuard has not launched by then.
- Order and invoice data: 7 years, due to statutory tax retention rules.
- Server logs: no longer than 30 days.
Cookies
This website sets no tracking, analytics or advertising cookies. We use no Google Analytics, no advertising pixels and no third-party scripts. Fonts are served from our own server, not from an external provider. That is why this site has no cookie banner and never asks you for cookie consent.
When you check out you are redirected to Stripe's payment page. Stripe sets its own cookies there to process the payment securely; those live on Stripe's domain, not on ours.
Your rights
You have the right to access, rectify or erase your data. You can also object to processing, request restriction, receive your data in a portable format, and withdraw consent you have given. Send your request to info@waveguard.nl; we respond within one month.
We do not make decisions based on automated processing or profiling.
Filing a complaint
If you disagree with how we handle your data, please tell us first. You also always have the right to lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch supervisory authority, at autoriteitpersoonsgegevens.nl.
Changes
We may update this privacy statement when our services or the law require it. The date at the top of this page shows when it was last revised.