Privacy, clearly explained.

Who we are

5DAYS is an independent creative and technology studio based in the Netherlands. We are responsible for the personal data described on this page. For any privacy question, write to hello@5days.io.

What we collect, and why

• When you email us or book a week. Booking a sprint opens your own email app with a prepared message. We receive what you send: your name, email address, company and whatever you write. We use it to answer you, plan the sprint and, if we work together, for the project and our administration.
• When you use the AI-readiness check. The website address you enter is sent to our server, which reads that public website and shows you the result. We don't store the address or the result. To show a picture of that website, your browser loads it in a frame or asks Microlink for a screenshot of the address.
• When you visit the website. Like every website, our hosting provider receives technical data such as your IP address and browser type, to deliver the pages and keep the service secure. We don't use this to identify you.

What we don't do

• We don't use cookies. See our cookie page.
• We don't use analytics, advertising pixels or tracking scripts.
• We don't sell your data or share it for marketing.

Legal basis

We process your messages to respond to your request and to prepare or perform an agreement with you. Technical data is processed on the basis of our legitimate interest in running a secure website. Where the law requires us to keep records, such as invoices, we do so to meet that legal obligation.

Who else is involved

• Vercel hosts this website and processes the technical data of each visit.
• Google Workspace handles our email, so your messages are stored there.
• Fontshare (Indian Type Foundry) serves two of the fonts on this site. To load them, your browser connects to Fontshare's servers, which see your IP address.
• Cal.eu runs the booking calendar on our call page. If you book a call, Cal.eu receives the name, email and notes you enter, and shares them with us to plan the call.
• Microlink makes a screenshot of a website you scan with the AI-readiness check. It receives the address you entered and, like any server, your IP address.

Some of these providers are based outside the European Union. Where that is the case, the transfer is covered by the safeguards the GDPR requires, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

How long we keep it

• Emails about a request that doesn't lead to a project: up to two years, unless you ask us to delete them sooner.
• Project and invoice records: seven years, as required by Dutch tax law.
• Technical visit data: only as long as our hosting provider keeps its logs, usually a few days to a few weeks.

Your rights

You can ask us to see, correct or delete your personal data, to limit or object to how we use it, or to receive it in a portable format. Email hello@5days.io and we answer within one month. If you're not happy with how we handle your data, you can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Changes

If we change how we handle data, for example by adding analytics, we update this page and the date at the top first.