Last updated: 16 October 2026
Webright is a web design agency based in the Netherlands. We are responsible for the processing of personal data as described in this privacy policy.
We only collect personal data when you provide it voluntarily through our contact form or the site scan, or automatically through cookies you have consented to.
| Data | Purpose | Retention period |
|---|---|---|
| Name | Identification and communication | 12 months |
| Company name | Tailored quote | 12 months |
| Email address | Sending the design proposal | 12 months |
| Phone number | Contacting you in case of questions | 12 months |
| Website URL | Analysis of the current situation | 12 months |
| Goal, inspiration, wishes | Tailoring the proposal to your needs | 12 months |
When you enter an address in the site scan, you allow us to look at that site once. We read the site's robots.txt first and respect it: if it forbids the scan, or can't be read, we don't scan. If it allows it, we fetch the page you entered, Google PageSpeed Insights measures the site, and Anthropic (Claude) writes a short summary of the public text on that page.
As soon as you click scan, we send the address of the site (without anything after a question mark) and the time as a notification to our own inbox ([email protected]), even if you don't leave your details afterwards. That way your request doesn't get lost. Your IP address is not included. We keep that notification for 12 months. The scan's log also names the site, and is cleared with every new version of the service.
| Cookie/service | Type | Purpose |
|---|---|---|
| Google Analytics 4 | Analytical | Analysing website usage (anonymised) |
| Microsoft Clarity | Analytical | Session recordings and heatmaps: where people click and scroll |
| Meta pixel | Marketing | Measuring whether our ads on Facebook and Instagram lead to a visit or an enquiry |
| Google Tag Manager | Functional | Management of tracking tags |
| cookie-consent (localStorage) | Essential | Remembering your cookie preferences |
To see where visitors get stuck, we use Microsoft Clarity. It records, anonymised, how people interact with a page: where the mouse goes, where they click and scroll, and where someone leaves a form.
Anything you type into a form is masked: names, email addresses, phone numbers and messages cannot be read in a recording. Session recordings only start after you have given permission. If you decline, nothing is recorded and the Clarity software is not loaded.
We advertise on Facebook and Instagram. With the Meta pixel we measure whether someone visits the site and sends an enquiry after seeing an ad. Meta then receives the address of the page, technical details of your browser and, for an enquiry, the fact that one was sent. What you type into a form is never sent to Meta.
The pixel only loads if you consent to marketing. If you decline, or withdraw your consent via "Cookie preferences", the pixel is not loaded or stops measuring.
We process your data on the basis of:
We share your data only with the following parties, exclusively for the purposes stated:
| Party | Purpose | Location |
|---|---|---|
| Web3Forms | Processing of form submissions | US (Privacy Shield) |
| Brevo SAS | Confirmation email after a form or site scan, and the notification of a site scan to our own inbox | France (EU) |
| Google (PageSpeed Insights) | Measuring the site you enter in the site scan | US |
| Anthropic (Claude) | Short summary of the public text of the scanned site | US |
| Google LLC | Analytics and Tag Manager | US (EU-US Data Privacy Framework) |
| Microsoft Ireland Operations Ltd. | Session recordings and heatmaps (Clarity) | EU, with processing in the US (EU-US Data Privacy Framework) |
| Meta Platforms Ireland Ltd. | Measuring ads on Facebook and Instagram (Meta pixel) | Ireland (EU), with transfers to the US (EU-US Data Privacy Framework) |
| Cloudflare | CDN and security services | US/EU |
| Hetzner | Web hosting | Germany (EU) |
We never sell your data to third parties.
Under the General Data Protection Regulation (GDPR), you have the following rights:
Contact us at [email protected] to exercise any of these rights. We will respond within 30 days.
We take appropriate technical and organisational measures to protect your data:
If you have a complaint about how we handle your data, you can contact us at [email protected]. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):
This privacy policy may be amended. The most recent version is always available on this page. In the event of significant changes, we will inform you via the website.