Legal document

Privacy Policy

Manuless is committed to handling personal data with care. This policy explains which data we collect, why we collect it, how long we retain it and what rights you have.

Version 1.0 Established: 26 June 2026 Legal basis: GDPR Art. 13
Article 1

Who we are

Manuless is a sole proprietorship of Cejay van Wel, established in the Netherlands. Manuless delivers AI process automation to freelancers and SMEs in the form of workflows in n8n and Make.com. The party responsible for the processing of personal data in connection with this website is:

Manuless, Cejay van Wel
Email: [email protected]
Website: manuless.com

Manuless acts solely as controller for data collected through its own website (contact form, video call bookings, email communication and invoicing). Manuless does not process personal data of the end clients of its clients. The workflows Manuless delivers are deployed entirely within the client's own environment. The client is and remains the controller for that processing.


Article 2

What data we collect and why

Manuless collects only data that is necessary for the purposes described below.

Processing activity Data Purpose Legal basis
Contact form Name, email address, message Responding to your enquiry or question Legitimate interest (Art. 6(1)(f) GDPR)
Video call booking Name, email address, preferred date and time Scheduling an intake call via Proton Meet Performance of contract (Art. 6(1)(b) GDPR)
Email communication Name, email address, project content Execution of the engagement and mutual communication Performance of contract (Art. 6(1)(b) GDPR)
Client CRM Name, company name, email address, phone number, project information Client management, project registration and follow-up Performance of contract (Art. 6(1)(b) GDPR)
Invoicing and administration Name, address, company name, Chamber of Commerce number, VAT number, IBAN, invoice details Issuing and sending invoices; compliance with statutory bookkeeping obligations Legal obligation (Art. 6(1)(c) GDPR)

Manuless does not share your personal data with third parties, unless this is necessary for the delivery of the service (see Article 3) or where a legal obligation requires it.


Article 3

Sub-processors and third parties

To deliver our services, we use the following third-party tools. These parties process personal data exclusively on behalf of Manuless and on the basis of a data processing agreement or adequacy decision.

Service Provider Purpose Data processed
HubSpot CRM HubSpot Inc. (US, EU adequacy arrangements / SCCs) Client management and project registration Name, email address, phone number, company name, project notes
Proton Calendar Proton AG (Switzerland, end-to-end encrypted) Scheduling video call appointments Name, email address, date and time of the appointment
Proton Meet Proton AG (Switzerland, end-to-end encrypted) Conducting video calls for intakes and project consultations Name, email address; audio and video data during the call (not stored)
Google Fonts (CDN) Google LLC (US) Loading web fonts for the website Visitor IP address (temporary, no cookies placed)
Cloudflare Pages Cloudflare Inc. (US, EU adequacy arrangements / SCCs) Hosting and serving manuless.com; processing contact form requests via a server-side function; bot verification via Cloudflare Turnstile IP address (server and access logs, rate limiting, Turnstile verification); form content temporarily in memory during processing
Resend Resend Inc. (US, EU adequacy arrangements / SCCs) Sending contact form submissions as email to Manuless Name, company name, email address, phone number, message

Important: Manuless does not process personal data of the end clients of its clients. The workflows Manuless designs and delivers are placed entirely within the client's technical environment. The client is and remains the owner of the workflow, the systems and the data processed within them.


Article 4

Retention periods

Manuless does not retain personal data longer than necessary for the purpose for which it was collected, unless a statutory retention obligation requires a longer period.

Data category Retention period Reason
Contact form (no engagement) 6 months Follow-up on enquiry; deleted thereafter
Video call booking (no engagement) 6 months Appointment management; deleted thereafter
Client data (active engagement) Duration of engagement + 1 year Project continuity and aftercare
Invoicing and accounting data 7 years Statutory retention obligation (Dutch Tax Authority)
Email communication (project-related) Duration of engagement + 1 year Project documentation and potential dispute resolution

Article 5

Your rights

Under the GDPR you have the following rights regarding your personal data. You can exercise these rights by sending an email to [email protected]. Manuless responds within four weeks.

Right of access You can request which data we hold about you.
Right to rectification You can have inaccurate data corrected.
Right to erasure You can request that your data be deleted, unless a statutory retention obligation applies.
Right to restriction You can have processing temporarily restricted during an objection or correction request.
Right to data portability You can request your data in a commonly used format.
Right to object You can object to processing based on legitimate interest.

Article 6

Security

Manuless takes appropriate technical and organisational measures to protect personal data against loss, unauthorised access or unlawful processing. Concretely this includes:

  • Communication via encrypted connections (HTTPS, end-to-end encrypted email via Proton)
  • Access security with strong authentication for all systems used
  • Minimal data storage: only what is strictly necessary for the delivery of the service
  • No passwords or sensitive data shared via unsecured channels

In the event of a data breach that may affect your rights and freedoms, Manuless will report this to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within 72 hours and will inform you as soon as possible.


Article 7

Changes to this policy

Manuless may update this privacy policy if changes to our services or applicable law require it. The most current version is always available at manuless.com/en/privacy-policy. In the event of significant changes, we will notify you by email if we hold your contact details.

The date of the most recent version is shown at the top of this document.


Article 8

Contact and complaints

Do you have questions about this privacy policy, would you like to exercise a right, or do you have a complaint about the way Manuless handles your data? Please get in touch:

Manuless, Cejay van Wel
Email: [email protected]

Not satisfied with our response? You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):
www.autoriteitpersoonsgegevens.nl