legal

Privacy Policy

Last updated: 5 October 2026

Unpaved.Design B.V. ("we", "us", "unpaved.design"), based in Amsterdam at Moestuinlaan 34, registered with the Dutch Chamber of Commerce (KvK) under number 42050088, values the protection of your personal data. This privacy policy explains what data we collect through unpaved.design, why, and what rights you have.

Who is responsible

Unpaved.Design B.V.
Moestuinlaan 34
Amsterdam, the Netherlands
KvK: 42050088
Email: privacy@unpaved.design

What data we collect

Visitor data (server logs)

To keep this website secure and running well, we use Cloudflare as our hosting provider and content delivery network (CDN). Cloudflare automatically processes technical data from every visitor, such as IP address, browser type, and time of visit. We do not use this data for profiling or marketing; it exists solely to keep the website available, fast, and secure. The legal basis for this processing is our legitimate interest (Article 6(1)(f) GDPR) in a well-functioning, secure website.

Visitor statistics

We use Cloudflare Web Analytics to understand how the website is used, for example how many visits there are, which pages are viewed, which websites visitors arrive from, and how fast pages load. This works through a small script that places no cookies, stores nothing in your browser, and does not use fingerprinting. Visitors are not tracked across visits or websites; we only see aggregated figures that cannot be traced back to you as a person. The legal basis for this processing is our legitimate interest (Article 6(1)(f) GDPR) in understanding the use and performance of our website.

Contact

If you contact us by email (for example via info@unpaved.design), we process the data you provide, such as your name, email address, and the content of your message. We use this data solely to answer your question or get in touch with you regarding your request. The legal basis for this processing is our legitimate interest in maintaining contact with (prospective) clients, or taking pre-contractual steps at your request (Article 6(1)(b) and (f) GDPR).

Cookies and similar technologies

This website does not place any cookies. It does not store any other data in your browser either, such as local storage.

Our visitor statistics (Cloudflare Web Analytics) work without cookies, so we do not ask for consent via a cookie banner. Should this website start using marketing cookies or other tracking in the future, we will update this policy and, where required, ask for your consent first.

Sharing with third parties

We only share data with parties that are necessary for our services to function:

We do not sell data to third parties and do not use data for advertising purposes.

Processing outside the EU/EEA

Infomaniak Network SA is based in Switzerland and processes email data on Swiss infrastructure. Switzerland is not part of the EU/EEA, but the European Commission has issued an adequacy decision for Switzerland: the country is considered to offer a level of protection equivalent to the GDPR. No additional safeguards (such as standard contractual clauses) are therefore required for this transfer.

Cloudflare, Inc. is based in the United States. For transfers of data to the US, Cloudflare relies on appropriate safeguards, such as the EU-US Data Privacy Framework and/or the European Standard Contractual Clauses, as set out in the data processing agreement we have entered into with Cloudflare.

Retention period

We do not keep data longer than necessary for the purposes for which it was collected. Server logs at Cloudflare are retained in line with their own, short-term retention periods. We keep email correspondence for as long as relevant to the business relationship or a legal retention obligation.

Your rights

You have the right to:

To exercise any of the above rights, please contact us via privacy@unpaved.design.

Changes

We may update this privacy policy from time to time. The most current version is always available on this page.