nlen
Legal

Privacy policy

This policy sets out how SparkOne (sparkone.nl) handles the personal data of people who visit this site. SparkOne operates under the General Data Protection Regulation (GDPR), and keeps the amount of data it touches as small as the site allows.

Who is responsible

Jeroen Vonk
SparkOne
Email: [email protected]

What data is processed

Cloudflare — hosting and delivery

This site runs on Cloudflare Pages and is delivered through the Cloudflare CDN. Cloudflare processes your IP address as part of how the internet works at all: network traffic has to be routed somewhere. Cloudflare stores no personal analytics on behalf of SparkOne, and any aggregate statistics it does keep are anonymised and held for at most 24 hours. See theCloudflare privacy policy.

Google Fonts — typefaces

Typefaces are loaded through Google Fonts (fonts.googleapis.com and fonts.gstatic.com), which means Google receives your IP address. SparkOne has no control over what Google does with it; see theGoogle privacy policy. The plan is to self-host the typefaces in a future update, which removes this exchange of data entirely.

Signing up for the practice

If you sign up on the The practice page, I keep your email address and the moment you signed up. That sits in a database at Cloudflare, inside the EU. I use it once, to tell you when the practice opens, and for nothing else. The data is deleted by 1 October 2026 at the latest, whether or not the practice goes ahead. If it does go ahead, I ask for your consent again rather than reusing the sign-up you gave here. You can be removed sooner at any point: send a message to[email protected].

Cookies

SparkOne sets no cookies. There is no tracking, no profiling, no analytics cookie and no advertising cookie.

Legal basis

Processing IP addresses through Cloudflare rests on legitimate interest (GDPR art. 6(1)(f)): serving a site that works, loads quickly and stays secure is a legitimate aim, and there is no less intrusive way to reach it.

The sign-up for the practice rests on consent (GDPR art. 6(1)(a)): you enter your email address yourself, and you can withdraw that consent at any time.

Retention

  • Cloudflare: aggregate, anonymised statistics for at most 24 hours; no personal data kept on behalf of SparkOne.
  • Google Fonts: retention falls under Google's own privacy policy.
  • Practice sign-ups: deleted by 1 October 2026 at the latest, or sooner on request.

Your rights

Under the GDPR you have the following rights regarding your personal data:

  • Access: you can ask what data is held about you.
  • Rectification: you can have inaccurate data corrected.
  • Erasure: you can ask for your data to be deleted (the "right to be forgotten").
  • Restriction: you can have the processing limited in certain cases.
  • Portability: you can receive your data in a common format.
  • Objection: you can object to processing based on legitimate interest.

To exercise any of these, write to[email protected]. You will get an answer within four weeks.

Filing a complaint

If you believe your personal data is being processed in breach of the GDPR, you have the right to complain to a supervisory authority. In the Netherlands that is the Dutch Data Protection Authority; elsewhere in the EU, the authority in the country where you live.

Changes

This policy can be updated. The date at the top of the page shows when the current version was published, and anything substantial will be flagged on the site.