Privacy policy

Last updated: 6 November 2026

This policy explains what happens to your personal data when you visit wpshapers.com or send us a message through the contact form.

Who is responsible

WP Shapers is a trade name of REGIDA SOLUTIONS (KVK: 74540378), based in Leiden, the Netherlands. We are the controller of the personal data described here. For any privacy question or request, email info@wpshapers.com.

What we collect through the contact form

• Your name and email address
• Your company name, if you give it
• Your message, and any personal data you choose to include in it

Please don’t include sensitive information in your message.

Why we use it

• To reply to your enquiry and discuss a possible project. We rely on the steps needed before entering into a contract (GDPR Article 6(1)(b)) or, for general questions, our legitimate interest in answering people who contact us (Article 6(1)(f)).
• To protect the form from spam and abuse. We rely on our legitimate interest in keeping the form secure and usable (Article 6(1)(f)).

We don’t sell your data or use it for advertising. We won’t add you to a mailing list because you contacted us.

Spam protection

The contact form uses Cloudflare Turnstile, which loads as you approach the form. It processes technical signals such as your IP address, TLS fingerprint and browser user agent to tell people from bots. Cloudflare acts as our processor for this, and as an independent controller when it uses these signals to improve its bot detection. See the Turnstile privacy addendum.

We also use your IP address briefly to limit how many messages can be sent per minute. We don’t save it with your submission.

Who receives your data

• Cloudflare hosts this website and the form, stores submissions and provides spam protection. See Cloudflare’s privacy policy.
• Zoho delivers form submissions by email through ZeptoMail and hosts our mailbox. See Zoho’s privacy policy.

We may also share data when the law requires it.

Where your data is stored

We store form submissions in a Cloudflare database restricted to the European Union, and we use Zoho’s EU services. These providers operate internationally, so some processing may take place outside the European Economic Area. Where that happens, it is covered by a safeguard the GDPR recognises, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

How long we keep it

• Form submissions are automatically deleted from the website database after 90 days.
• Emails in our mailbox are kept for as long as we need them to handle your enquiry, and deleted once they’re no longer needed if no project follows.
• Correspondence that becomes part of our business records is kept for as long as the law requires. Dutch tax law generally requires seven years.

Cookies and analytics

We don’t use analytics or advertising cookies, and our fonts are hosted on our own site. Turnstile’s signals are strictly necessary for protecting the form. See Cloudflare’s cookie policy for details of any cookies it sets.

Your rights

You can ask us for access to your personal data, and ask us to correct it, delete it, restrict how we use it or give you a copy in a portable format. You can also object to processing based on our legitimate interests. To do any of this, email info@wpshapers.com.

You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Changes to this policy

If this policy changes, we’ll publish the new version here and update the date at the top.