Terms of Use

Last updated: 20 April 2026

1. Purpose & Policy Statement

The purpose of this policy is to establish a standardised and controlled process for managing personal data to ensure consistency, compliance, and audit readiness. InnoFluidics is committed to a "minimalist" data approach, collecting only the information necessary to respond to business enquiries. This policy ensures the safeguarding of personal information and maintains customer trust.

2. Scope

This policy applies to all controlled data processing activities related to the company website (www.innofluidics.com) and direct electronic communication for InnoFluidics and InnoFluidics Diagnostics. In this document, "users" refers to any individual visiting the company website or contacting the organisation via electronic means.

3. Policy Summary

The architecture of the company website and the data collection setup are intentionally minimal. The platform does not use cookies, does not track users across the web, and does not share visit data with anyone for advertising or analytics purposes. We collect personal information only when users deliberately send it to us — through our contact form or by emailing us directly — and we use it only to respond to the user.

If any part of this policy is unclear, enquiries may be sent to info@innofluidics.com for further explanation.

4. Joint Controllership

This website is operated jointly by the following entities, who act as joint controllers under GDPR Article 26:

• InnoFluidics B.V. (Chamber of Commerce: KvK 85677930), registered at De Zaale 11, 5612 AJ Eindhoven, The Netherlands.

• InnoFluidics Diagnostics B.V. (Chamber of Commerce: 1007.747.747), registered at Agoralaan, Gebouw Abis, 3590 Diepenbeek, Belgium.

  
  

Users may address any privacy enquiry to either entity; it will be handled by the same founder team. We have not appointed a formal Data Protection Officer (DPO) because our size and the nature of the data we process do not legally require one.

Contact for privacy matters: info@innofluidics.com

5. Data Collection Scenarios & Legal Basis

Our data processing is restricted to three specific situations:

• When users submit a contact form. We collect the user's name, work email, company, role, message content, and enquiry type. We use this exclusively to respond to or follow up on business conversations. The legal basis is our legitimate interest in responding to the user's enquiry (GDPR Article 6(1)(f)).

• When users email us directly. Information included in emails is retained as long as needed to handle the enquiry and maintain a business record.

• When users browse the website. The Framer platform records aggregated, anonymised visitor statistics (page views, country of origin, referring source). This data is cookieless, is not tied to an identifiable user, and is not shared with advertising networks.

  
  

We do not collect special categories of personal data (health, ethnicity, religious beliefs, political opinions, etc.). If provided in free-text, it will be handled with standard care and used only to respond to the enquiry.

6. Prohibited Data Practices & Exclusions

To ensure total transparency, we explicitly define the practices we do not engage in, as our standards differ from common website practices:

• We do not use advertising cookies, tracking pixels, or fingerprinting technologies of any kind.

• We do not use Google Analytics, Meta Pixel, LinkedIn Insight Tag, or any other third-party tracking script.

• We do not use session-recording tools (Hotjar, FullStory, Microsoft Clarity, etc.).

• We do not run behavioural retargeting campaigns based on a user's visit.

• We do not sell, rent, or trade personal data to any party, under any circumstances.

• We do not use email marketing platforms (Mailchimp, HubSpot, etc.) and we do not add users to any mailing list unless they explicitly ask us to.

  
  

7. Cookie Usage & Consent Management

The company website does not use cookies or similar tracking technologies, beyond the strictly necessary session data required by the website platform (Framer) to operate the site correctly. Because no non-essential cookies are set, no cookie banner or consent prompt is shown.

If this changes in the future — for example, if we add a new tool that requires cookies — we will implement a GDPR-compliant consent banner before the tool becomes active, and we will update this policy accordingly.

8. Third-Party Service Providers & Data Processors

We use a small number of service providers to run our website and our business. Each has a contractual obligation to protect user data:

• Framer (website platform and native form handler). When users submit our contact form, their submission is stored on Framer's infrastructure and emailed to us. Framer processes this data as our data processor under the terms of its Data Processing Agreement.

• Microsoft 365 (email and document storage). Data stored in EU datacentres.

  
  

We do not use any other processors for website-related personal data. User information is never transferred outside this short list without prior notification.

If, in the course of a business relationship, users share confidential information with us under a Non-Disclosure Agreement (NDA) or similar contract, that information is handled under the terms of that contract, which take precedence over this Privacy Policy for the information covered.

9. Data Retention Periods

InnoFluidics adheres to the following retention schedules for personal data:

• Contact form submissions and email enquiries: Retained for up to 24 months from the user's last interaction with us, unless a business relationship continues, in which case we retain them for the duration of that relationship plus 7 years (the period required by Dutch and Belgian commercial record-keeping law).

• Framer analytics data: Retained in aggregated, anonymised form only, for up to 13 months.

  
  

Users can request earlier deletion at any time (see Section 10).

10. Data Subject Rights

Under the GDPR, users possess specific rights regarding the personal data maintained by the organisation:

• Access: Users may request a copy of the personal data held about them.

• Rectification: Users have the right to request the correction of inaccurate personal data.

• Erasure: Users may request the deletion of their data, provided there is no conflicting legal requirement for retention.

• Restriction: Users may request the cessation of data processing in specific instances.

• Objection: Users may object to data processing activities that are based on the company's legitimate interests.

• Portability: Users have the right to receive their data in a structured, machine-readable format.

  
  

To exercise any of these rights, users should contact info@innofluidics.com. In accordance with regulatory requirements, a response will be provided within one month.

Furthermore, if users believe their personal data has been handled improperly, they have the right to lodge a complaint with the relevant supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), and in Belgium, it is the Gegevensbeschermingsautoriteit (gegevensbeschermingsautoriteit.be).

11. Data Security & Protection Measures

The simple architecture of the company website is itself a security feature: the fewer places user data is stored, the fewer places it can leak from. Data is held only by Framer (form submissions) and Microsoft 365 (emails), both of which maintain industry-standard security certifications (ISO 27001, SOC 2, or equivalent). Internal access within our company is limited to the team members who need it. Our systems use multi-factor authentication and encrypted storage.

No system is absolutely secure. If a breach occurs that affects users' personal data, we will notify them and the relevant supervisory authority within 72 hours of becoming aware of it, as required by GDPR.

12. Protection of Children's Privacy

The company's website and services are specifically directed toward business professionals within the life sciences industry. InnoFluidics does not knowingly collect personal data from any individual under the age of 16. If it is believed that a child has submitted personal information to the company, users are encouraged to notify us via the official contact channels so the data can be promptly deleted.

13. Policy Updates & Amendments

The company may update this Privacy Policy periodically to reflect shifts in organisational practices or changes in applicable law. The "Last updated" date at the top of this page will consistently indicate the current version. In the event of material changes to data handling, a prominent notice will be displayed on the website homepage for a minimum of 30 days.

14. Contact Information

For any enquiries regarding this policy or the management of personal data, users may contact the company at info@innofluidics.com.