This Privacy Policy explains how WhatBroke (“we”, “our”) handles your personal data. WhatBroke is operated by Saritha Jain / NicheBytes from the Netherlands. We comply with the EU General Data Protection Regulation (GDPR) and applicable Dutch data protection law.
What we collect
When you submit the contact form on this site, we collect:
- Full name
- Email address
- Organisation (optional)
- Enquiry type — waitlist, speaking, hosting, sponsoring, or other
- The content of your message
We do not knowingly collect any other personal data through this site.
Why we collect it, and our lawful basis
- Responding to your enquiry — your name, email, organisation, and message are processed so we can reply to you. Lawful basis: our legitimate interest (Art. 6(1)(f) GDPR) in running the community and replying to people who reach out, and your consent (Art. 6(1)(a) GDPR) implied by submitting the form.
- Waitlist — if you select “Joining the waitlist”, we keep your email so we can notify you when a session is announced. Lawful basis: your consent.
- Analytics & marketing cookies — only if you grant consent via our cookie banner. See Cookies below.
How long we keep your data
- Contact form submissions: retained only as long as needed to respond and follow up — typically up to 12 months, then deleted.
- Waitlist email addresses: kept until you ask us to remove you, or until WhatBroke ceases operation.
- Cookies: see the Cookies section.
Who we share it with
We use the following processors. Each is contractually bound to process personal data only on our instructions.
- Formspree (formspree.io) processes our contact form submissions. See their privacy policy.
- Google (Google Tag Manager and any consent-gated analytics tags) processes anonymised analytics data only if you grant consent.
We do not sell your data, and we do not share it for marketing purposes outside the cases above.
Cookies
Our cookie banner asks for consent across three categories — functional, analytical, and marketing. Essential cookies (e.g. the cookie that remembers your consent choice itself) are always set; nothing else loads until you grant consent. You can change or withdraw your consent at any time using the Cookie Preferences link in the footer.
We use Google Consent Mode v2 — when you grant or deny consent, all Google services on the site respect that setting before loading.
Your rights under GDPR
You have the right to:
- Access the personal data we hold about you (Art. 15)
- Have your data corrected if inaccurate (Art. 16)
- Have your data deleted — the “right to be forgotten” (Art. 17)
- Restrict or object to our processing (Art. 18, 21)
- Receive your data in a portable format (Art. 20)
- Withdraw consent at any time (Art. 7(3))
To exercise these rights, contact us via the contact form and select “Something else”. We will respond within one month.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) — autoriteitpersoonsgegevens.nl.
Changes to this policy
We may update this policy from time to time. When we do, the “Last updated” date at the top of this page will change.
Contact
For privacy-related questions, please use the contact form.