1. Who we are

VibeOps is operated by PGNetworks, based in the Gennep region, Netherlands. This site is published at pgnetworks.nl.

Questions about this policy: privacy@pgnetworks.nl.

This page is a content draft pending final legal review before this site leaves test/preview status — see the audit note this page was added from.

2. What we collect

This site is intentionally minimal. We do not run analytics, advertising, or tracking scripts. The only places personal data can reach us are:

• Contact form (/contact) — embedded via Microsoft Forms. When you submit it, the name, email address, and message content you enter are sent directly to Microsoft Forms and from there to us. We do not see or store this data on our own servers; it lives in Microsoft's Forms/365 environment under our account.
• Session cookie (grav-site-*) — set automatically by the website platform (Grav) for basic site function (e.g. CSRF protection on forms). It is not used for tracking or advertising and expires after 24 hours.
• Google Fonts — this site loads typefaces from fonts.googleapis.com / fonts.gstatic.com. Loading a font from Google's servers exposes your IP address and browser user-agent to Google as part of that request, per Google's own privacy policy. No font-related cookie is set by us.

We do not sell, rent, or trade personal data to third parties.

3. Why we process it

• Contact form submissions: to respond to your enquiry (legitimate interest / pre-contract steps at your request, GDPR Art. 6(1)(b)/(f)).
• Session cookie: strictly necessary for the site to function (GDPR Art. 6(1)(f), ePrivacy exemption for strictly necessary cookies — no consent banner required for this cookie alone).

4. Who else sees it

• Microsoft (Forms / Microsoft 365) processes contact-form submissions as our data processor. See Microsoft's own privacy documentation for how Forms handles submitted data.
• Google (Fonts) receives a font-loading request as described above; no separate Google account or analytics integration is used on this site.

We do not use any other third-party processors, ad networks, or analytics platforms.

5. How long we keep it

• Contact form submissions are retained for as long as needed to handle your enquiry and any resulting business relationship, then deleted or archived per standard business retention practice.
• The session cookie expires automatically after 24 hours and is not persisted beyond that.

6. Your rights

Under the GDPR you have the right to:

• Request access to the personal data we hold about you
• Request correction or deletion of that data
• Restrict or object to our processing of it
• Request a portable copy of data you provided directly
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) if you believe your data has been mishandled

To exercise any of these rights, contact us at privacy@pgnetworks.nl.

7. Security

This site is served exclusively over HTTPS with HSTS enabled, and applies a restrictive Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, and Referrer-Policy to reduce exposure to common web attacks. The contact form includes hidden honeypot fields to filter automated spam submissions before they reach a human.

8. Changes to this policy

We may update this policy as the site and its data flows change. The "last updated" date at the top of this page reflects the most recent revision.