Privacy & cookies: Your data. Clearly explained.
What you share, how we use it and the choices you have. This notice covers the Vorlyo website, our AI assistant and your contact with us.
Who is responsible
Vorlyo is a trading name of JKF Commerce, based in Amsterdam and registered with the Dutch Chamber of Commerce under number 92785379. For questions about this website and your personal data, email info@vorlyo.com.
Which data we use
When you contact us, we process the information you provide: name, email address, optional phone number, contact preference and enquiry. You may also share information about your business, website, timing or budget.
For an application, we also process the selected role, preferred start date and hours, motivation, any portfolio or LinkedIn link and the CV you upload. Referral interest uses the same contact details, but does not require a CV. Do not provide sensitive personal data that is unnecessary for assessing your response.
The site also processes technical data for operation and security, including IP address, browser information and spam checks. An enquiry may include the landing page, referring website and campaign parameters to understand its source.
Why we process data
We use your enquiry to answer your question, prepare a proposal and carry out any agreed work. This involves steps you request before an agreement or performance of that agreement.
We use application data to assess suitability for an employment role or referral relationship, communicate about the process and prepare an employment or referral agreement where interest is mutual. The public form does not itself enter into an agreement.
For security, preventing abuse and organising follow-up, we process data based on our legitimate interests, balanced against your privacy. Administrative records may be needed for legal obligations. Optional analytics and marketing measurement rely on your consent.
When you chat with Vorlyo
When you send a message in the intake (on the homepage and in Start your intake), we send it and previous messages in that conversation through our server to an AI service provider to generate a response and a summary of your request. The conversation remains available in your browser while you use it. Do not share passwords, sensitive personal data or confidential customer information.
We use the AI service with response storage disabled. The provider may still keep limited safety logs; its own retention periods and data terms apply. API content is not used to train its models by default.
Sending a chat message does not submit an enquiry to our team. You review the summary and then submit the contact form yourself. AI does not enter into an agreement or make binding decisions about your request. We record technical usage and costs to limit abuse and unexpected spending.
We use AI for the chat at the bottom right of the site. Your messages go through our server to an AI service provider, which processes them only to generate a reply. We only keep a chat conversation when you leave your details yourself: it is then stored with your enquiry for 90 days and deleted automatically afterwards.
When you request a free website check
For the website check we store your website address, your email address, the measurements and the report. We do not store your IP address; we only keep an irreversible code to limit abuse. Our server fetches the public pages of your website and has an AI service provider write the explanation of the measurements. Only the measurements and text of your public pages are shared, not your email address.
We email you the report. With your request you agree that we may contact you about the results and about a new website or software; we store that consent with its time. If you no longer want to be contacted or want us to delete your request, email us.
When you subscribe to the newsletter
For the newsletter we store your email address, the language of the site, the page where you signed up and the moments you signed up, confirmed and, if applicable, unsubscribed. We do not store your IP address; to limit abuse we briefly count sign-ups using an irreversible code.
We use double opt-in: after signing up you receive an email with a confirmation link that is valid for seven days. You only receive the newsletter after that click. The legal basis is your consent, and we use your data only for the newsletter.
Every newsletter has an unsubscribe link; one click is enough. Unsubscribed means unsubscribed: you will not receive the newsletter again unless you sign up and confirm again. After you unsubscribe we keep your address and the moments to be able to show that you unsubscribed. If you want us to delete that as well, email us.
Who receives data
We use Cloudflare for the website, database, private file storage and spam protection, an AI service provider for the intake, the website chat and the free website check, and Amazon SES for email. Enquiries and applications are stored in our administration; internal notifications may appear in the Vorlyo dashboard, internal mailbox and on registered work devices. A CV remains in private storage, is not forwarded as an email attachment and is not made publicly available. If you contact us through WhatsApp, WhatsApp/Meta terms also apply.
With consent, conversion data may be sent to Google Analytics, Meta and TikTok. Depending on the measurement, this may include campaign information, technical data and hashed contact details. Hashing does not automatically make data anonymous.
Service providers may process data outside the European Economic Area. Applicable safeguards depend on the provider and relevant agreements. Contact us for information about the arrangements applying to your data.
How long data is kept
We retain enquiries that do not lead to further work for no more than 12 months. Applications without follow-up are marked on receipt for deletion after 12 months; the review covers the private file and internal mailbox copy. Where a collaboration begins, retention depends on the records and legal obligations. You can request earlier deletion.
Cookie and theme preferences remain locally in your browser until you change or delete them. Temporary information for carrying over your request and the source of your visit uses session storage. Closing a tab does not delete an enquiry already submitted or logs held by service providers.
Your choices and rights
You can request access to, correction of or deletion of your personal data. Depending on the circumstances, you can also object, request restricted processing or ask for data portability. You can withdraw consent; this does not affect the lawfulness of earlier processing.
Email your request to info@vorlyo.com. We may ask for information to verify your identity carefully. We generally respond within one month. You can also lodge a complaint with the Dutch Data Protection Authority.