Datenschutzerklärung
Last updated: May 2026
1. Who we are
Wishfy is a search visibility consultancy based in the Netherlands. We help businesses become findable across search engines and AI platforms. For any privacy-related questions, you can reach us at [email protected].
2. What data we collect
We collect very little data. Here is what we process:
- Contact form submissions — name, email address, company name, website URL, topic, and message.
- Language preference cookie (
wishfy_lang) — stores your chosen language so the site remembers it on your next visit. - Consent preference cookie (
wishfy_consent) — stores whether you accepted or declined the cookie notice. - Analytics cookies (with consent) — if you accept cookies, we use Google Analytics (GA4) and Microsoft Clarity to understand how the site is used. These services set cookies and may collect IP addresses, pages visited, and interaction data. They are only loaded after you give explicit consent.
3. Purpose and legal basis
| Data | Purpose | Legal Basis (GDPR Art. 6) |
|---|---|---|
| Contact form | Respond to your inquiry | Consent (form submission) and legitimate interest |
| Language cookie | Remember your language preference | Strictly necessary (no consent needed) |
| Consent cookie | Remember your consent choice | Strictly necessary (no consent needed) |
| Analytics (Google Analytics, Microsoft Clarity) | Understand how the site is used, improve UX | Consent (opt-in via cookie banner) |
4. Data processors
We work with the following third-party service providers to operate our website:
| Processor | Service | Location | Safeguards |
|---|---|---|---|
| Resend | Email delivery | USA | EU Standard Contractual Clauses |
| Vercel | Website hosting | USA | EU Standard Contractual Clauses |
| Cloudflare | CDN, DNS, and security | USA | EU Standard Contractual Clauses |
| Google Analytics (GA4) | Analytics | USA | EU Standard Contractual Clauses, IP anonymization enabled |
| Microsoft Clarity | Session recording and heatmaps | USA | EU Standard Contractual Clauses |
5. Cookies
Our site uses the following cookies:
| Cookie name | Purpose | Duration | Type |
|---|---|---|---|
wishfy_lang | Language preference | 1 year | Strictly necessary |
wishfy_consent | Consent preference | 1 year | Strictly necessary |
_ga, _ga_* | Google Analytics — distinguish users, track sessions | Up to 2 years | Analytics (consent required) |
_clck, _clsk | Microsoft Clarity — session recording and heatmaps | Up to 1 year | Analytics (consent required) |
Analytics cookies are only set after you explicitly accept via the cookie banner. If you decline, no analytics cookies are placed and no tracking scripts are loaded.
6. Data retention
- Contact form submissions: stored for 12 months, then permanently deleted.
- Analytics data: Google Analytics data is retained for 14 months. Microsoft Clarity data is retained for 30 days. Both are only collected with your consent.
- Cookies: expire after 1 year from creation.
7. Your rights under GDPR
As a data subject, you have the following rights:
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — ask us to correct any inaccurate data.
- Right to erasure — ask us to delete your personal data.
- Right to restriction — ask us to limit how we process your data.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interest.
- Right to withdraw consent — withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
- Right to lodge a complaint — you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
8. International transfers
Some of our data processors are located in the United States. To protect your data during these transfers, we rely on EU Standard Contractual Clauses (SCCs) as approved by the European Commission. These clauses ensure that your data receives the same level of protection as it would within the European Economic Area.
9. Children
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted personal data through our contact form, please email us at [email protected] and we will delete it promptly.
10. Changes to this policy
We may update this privacy policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and post a notice on our website. We encourage you to review this page periodically.
11. Contact
For all privacy-related inquiries, please email [email protected].