Privacy notice

Last updated: September 17, 2026

This notice explains how Noventis Web handles your information when we email your business about a website or another service we offer. It applies to the emails we send to small businesses in the United States and to the pages we link to from those emails.

Who is responsible

The controller of your data is Noventis Web V.O.F., a general partnership registered in the Netherlands (Chamber of Commerce/KvK no. 42001062), Otterkoog 113, 1822 BX Alkmaar, the Netherlands. Because we are established in the Netherlands, the EU General Data Protection Regulation (GDPR) applies to what we do with your data.

What we use your data for

We use your business contact details for one purpose: to contact your business about a website or service we offer. By email, that means at most three emails. After the third one, we stop. If you reply, we use your reply to answer you.

Where your data comes from

We don't buy lists. Every email says which public source your business came from:

Trucking companies, movers, auto transporters and passenger carriers: the FMCSA company census, the public U.S. federal carrier registry published by the U.S. Department of Transportation.
Child care centers in Texas: the public child care licensing data of the Texas Health and Human Services Commission (Texas HHS).
Licensed contractors and beauty professionals in Florida: the licensee records of the Florida Department of Business and Professional Regulation (DBPR), which are public records under s. 455.229(1) and chapter 119 of the Florida Statutes, obtained through a public-records request.
Auto detailing businesses: public business listings on Google Maps.

What data we use

Business name and, where the register lists one, the legal name or the license holder's name.
The business email address and phone number in that listing.
Business address, city and state.
Details from the same register entry, such as the USDOT number and fleet size (carriers), the license or operation number, capacity, ages served and opening hours (child care centers), or the license type (Florida).
What happens with our emails: which emails we sent, when, from which of our mailboxes, your replies, and whether you unsubscribed or asked us to remove something.

If we built a preview page for your business, some of these details appear on it. We don't use sensitive data, and we don't make decisions about you based solely on automated processing.

Our legal basis

We rely on our legitimate interest (Article 6(1)(f) GDPR) in offering our services to businesses. The GDPR recognizes that direct marketing can be a legitimate interest (Recital 47). We weighed that interest against yours:

we only use business details that are already public, in a government register or a public business listing;
the contact is limited to at most three emails about something relevant to the business;
every email says who we are, where your details came from, and how to stop further emails in one step;
we don't sell your data, and we keep it no longer than described below.

Who receives your data

We use a small number of service providers who process data on our behalf:

Mailforge: the mailboxes we send our emails from and receive your replies in.
Vercel: hosting of getnoventis.com, the unsubscribe page and the preview pages.
Supabase: the database behind our customer records, including the unsubscribe list.
Hetzner: the server that runs our email software.

Some of these providers may process data outside the European Economic Area. Where that happens, it happens under the transfer safeguards that provider applies under the GDPR. You can ask us which safeguard applies to which provider.

How long we keep it

Unsubscribe list: if you unsubscribe or object, we keep your email address, the date and how you unsubscribed on our suppression list. We need it so we never email you again.
Everything else, including any preview page we built for your business, is deleted no later than 12 months after our last email to you, unless you become a customer. In that case, we keep what we need for that customer relationship.

Did we build a preview page for your business and would you rather not have it online? Reply "remove" to our email and we'll take it down within one business day.

Your rights

You have the right to access the data we hold about you, to have it corrected, to have it deleted and to have its use restricted.

You have the right to object, at any time and free of charge, to our use of your data for direct marketing (Article 21 GDPR). If you object, we stop: reply "unsubscribe" to any of our emails or use the unsubscribe link in it, and you won't hear from us again.

You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

How to contact us

Reply to any email you received from us, or write to Noventis Web V.O.F., Otterkoog 113, 1822 BX Alkmaar, the Netherlands. Tell us which email address or business your request is about, so we can find your data.