Your data. Clearly explained.

Who is responsible

Vorlyo is a trading name of JKF Commerce, based in Amsterdam and registered with the Dutch Chamber of Commerce under number 92785379. For questions about this website and your personal data, email info@vorlyo.com.

Which data we use

When you contact us, we process the information you provide: name, email address, optional phone number, contact preference and enquiry. You may also share information about your business, website, timing or budget.

For an application, we also process the selected role, preferred start date and hours, motivation, any portfolio or LinkedIn link and the CV you upload. Referral interest uses the same contact details, but does not require a CV. Do not provide sensitive personal data that is unnecessary for assessing your response.

The site also processes technical data for operation and security, including IP address, browser information and spam checks. An enquiry may include the landing page, referring website and campaign parameters to understand its source.

Why we process data

We use your enquiry to answer your question, prepare a proposal and carry out any agreed work. This involves steps you request before an agreement or performance of that agreement.

We use application data to assess suitability for an employment role or referral relationship, communicate about the process and prepare an employment or referral agreement where interest is mutual. The public form does not itself enter into an agreement.

For security, preventing abuse and organising follow-up, we process data based on our legitimate interests, balanced against your privacy. Administrative records may be needed for legal obligations. Optional analytics and marketing measurement rely on your consent.

When you use Vorlyo AI

When you send a chat message, we send it and previous messages in that conversation through our server to OpenAI to generate a response and project summary. The conversation remains available in your browser while you use it. Do not share passwords, sensitive personal data or confidential customer information.

We use the OpenAI API with response storage disabled. This does not mean OpenAI retains no safety logs: its retention policies and data terms apply. API content is not used to train its models by default.

Sending a chat message does not submit an enquiry to our team. You review the summary and then submit the contact form yourself. AI does not enter into an agreement or make binding decisions about your project. We record technical usage and costs to limit abuse and unexpected spending.

Who receives data

We use Cloudflare for the website, database, private file storage and spam protection, OpenAI for chat and Amazon SES for email. Enquiries and applications are stored in our administration; internal notifications may appear in the Vorlyo dashboard, internal mailbox and on registered work devices. A CV remains in private storage, is not forwarded as an email attachment and is not made publicly available. If you contact us through WhatsApp, WhatsApp/Meta terms also apply.

With consent, conversion data may be sent to Google Analytics, Meta and TikTok. Depending on the measurement, this may include campaign information, technical data and hashed contact details. Hashing does not automatically make data anonymous.

Service providers may process data outside the European Economic Area. Applicable safeguards depend on the provider and relevant agreements. Contact us for information about the arrangements applying to your data.

How long data is kept

We retain enquiries that do not lead to further work for no more than 12 months. Applications without follow-up are marked on receipt for deletion after 12 months; the review covers the private file and internal mailbox copy. Where a collaboration begins, retention depends on the records and legal obligations. You can request earlier deletion.

Cookie and theme preferences remain locally in your browser until you change or delete them. Temporary information for carrying over a project idea and the source of your visit uses session storage. Closing a tab does not delete an enquiry already submitted or logs held by service providers.

Your choices and rights

You can request access to, correction of or deletion of your personal data. Depending on the circumstances, you can also object, request restricted processing or ask for data portability. You can withdraw consent; this does not affect the lawfulness of earlier processing.

Email your request to info@vorlyo.com. We may ask for information to verify your identity carefully. We generally respond within one month. You can also lodge a complaint with the Dutch Data Protection Authority.