Privacy statement

Last updated: 12 October 2026

Who am I?

This website belongs to Kelson (kelson365.com), Rotterdam, the Netherlands. I am responsible for processing personal data through this website. Questions about privacy? Email info@kelson365.com.

What data do I process?

This website has no contact form and uses no cookies, analytics or tracking tools. I only process data you send me yourself by email or WhatsApp: your name, your contact details and the content of your message.

If we work together, I also process the data needed for the assignment and invoicing, such as your company name, address and the texts and photos you provide.

Light or dark mode: the website follows your device setting. If you choose light or dark yourself with the button next to NL/EN, your browser remembers that choice on your own device (in localStorage, under the name "thema"). This is not a cookie: the choice is not sent to me or anyone else. You can clear it in your browser settings.

Help assistant (AI)

At the bottom right of every page is the "Question?" button. It lets you ask an AI assistant that only knows the content of this website. The answers are generated automatically and may contain mistakes; for an appointment or proposal, simply contact me.

What happens with your question: the text of your question (and the earlier messages in the same conversation) is sent to a small service at chatbot.kelson365.com, where an AI model from Cloudflare (Workers AI) processes it to produce an answer. I do not store conversations and do not read along; only technical errors are logged, without the content of your question. The conversation lives only in your browser's memory and disappears when you close or refresh the page.

Do not share personal data, passwords or confidential business information in the assistant. If you want to discuss something, email or message me.

Support portal

Customers I work with can submit questions and issues via support.kelson365.com. The portal is only accessible to email addresses I have added in advance.

Logging in: you log in through Cloudflare Access, with a one-time code by email or with your Microsoft work account. Cloudflare sets one functional cookie for this, holding your login session (valid for up to 24 hours). The portal does not work without that cookie; no other cookies or trackers are used. Your language and light/dark preference is stored by your browser on your own device.

Which data: your name, email address and organisation, the tickets you create (subject, description, replies, status and attachments) and a log of changes per ticket. Please do not share passwords or secret keys in a ticket.

Where it is stored: tickets are stored in a database at Cloudflare (D1) and attachments in private storage at Cloudflare (R2) under the European Union jurisdiction. Only your organisation and I can see your tickets. Email notifications about your ticket are sent via Resend (Resend, Inc., United States); for this, Resend receives your email address and the content of the notification. Cloudflare and Resend are bound by a data processing agreement with the EU standard contractual clauses.

Chat with us: in the portal you can ask questions to an AI assistant that knows your own tickets and the knowledge base. Your questions and the answers are kept with your account and processed by an AI model from Cloudflare (Workers AI) to produce an answer; I can read the conversations to help you better. Conversations are deleted after 90 days, unless you turned them into a ticket. You can also delete a conversation yourself. Do not share passwords or secret keys in the chat.

How long: I keep tickets and attachments for as long as we work together and for up to 2 years after the last ticket, unless they are part of my business records. You can delete your own attachments in the portal, and you can always ask me to delete a ticket sooner.

Why do I process it?

To answer your question, prepare a proposal and, if we work together, carry out the assignment, handle your support requests and invoice the work. The legal basis is your own request, the performance of a contract or a legal obligation (such as the duty to keep business records).

How long do I keep data?

No longer than necessary for the purpose for which I received it. Data that is part of my business records is kept for 7 years, as required by Dutch law.

Who helps me with this?

Hosting and security: this website runs on GitHub Pages (GitHub, Inc., United States). Traffic to the website passes through Cloudflare (Cloudflare, Inc., United States), which secures the connection and makes the website load faster. GitHub and Cloudflare may process technical data such as your IP address to deliver and secure the website.

Email: messages you email me are received by my email provider.

WhatsApp: if you contact me via WhatsApp, WhatsApp (Meta) processes your data under its own terms.

Fonts: the fonts are hosted on this website itself. No external fonts or scripts are loaded.

I never sell your data and only share it when needed for the purposes above or when required by law.

Security

The website uses a secure connection (HTTPS) and loads no third-party code. The support portal sits behind a login screen, verifies who you are on every request and keeps customers' data strictly separated. I handle the data you send me with care.

Your rights

You have the right to access, correct or delete your data, to restrict processing, to object and to data portability. Send your request to info@kelson365.com.

Not happy with how I handle your data? You can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Changes

I may update this privacy statement. The date at the top shows when it was last changed.