Privacy notice Website Without PHP (United States)
Website Without PHP is a service of Monkey Vision B.V.
This notice explains what personal data we handle through websitewithoutphp.com, why, how long we keep it and which rights you have, including under US state privacy laws.
1. Who we are
Website Without PHP is a service of Monkey Vision B.V. Monkey Vision B.V. is the controller for the processing described here.
Monkey Vision B.V. Bijleveldsingel 68c, 6524 AE Nijmegen, the Netherlands Dutch Chamber of Commerce (KvK) number 71714960 info@monkeyvision.nl, +31 24 202 2068
Monkey Vision B.V. is based in the Netherlands and has no establishment in the United States.
You can contact us about privacy at the address and number above.
2. When this notice applies
We help businesses with emergency recovery after PHP problems, PHP updates, migration, front-end rebuilds and maintenance. This notice covers data of people who visit our website, contact us, use the Exposure Check or ask for a quote or an engagement. Most of them are business contacts.
When we work on a client’s website, the client is responsible for the data of its own visitors and customers. We then act on the client’s instructions under a data processing agreement.
3. What data we use and why
| Purpose | Data | Basis |
|---|---|---|
| Asking for a quote or urgent help through the form | Name, job title, company, email address, phone number, the domain and what you tell us about the problem | Steps at your request before entering a contract |
| Contacting us by email or phone | Your name, contact details and what you tell us | Our legitimate interest in answering your question |
| Quotes, engagements and invoices | Name, job title, company, contact details, quote and invoice data | Performing a contract and our legal duty to keep accounts |
| The free Exposure Check | The domain you enter and the result (180 days, without IP address) and your IP address (briefly, see section 4) | Our legitimate interest in running and protecting the tool |
| Website security and faults | IP address, time, page requested, browser details in technical logs | Our legitimate interest in keeping the site secure and available |
| Website statistics, if we switch them on | Data about your visit, such as pages viewed, device and browser | Your consent |
What happens to your enquiry: we keep your enquiry for 14 days in Cloudflare (KV storage) and email it to two Monkey Vision staff members. After that it sits in an internal list (a spreadsheet in our office software) until the link with our quoting tool is in place. The retention period for leads in section 5 applies to that list. We use your IP address only briefly, to limit abuse (rate limit). We delete it after 10 minutes.
We do not make decisions about you that are taken only by a computer and that have a significant effect on you.
4. The Exposure Check
The Exposure Check tests whether a domain uses an outdated PHP version. We handle the domain you enter and your IP address. You do not need to log in.
We keep the domain you enter, the result and the time for 180 days, to see which sites we check and to improve the tool. We do not link this to you: we do not store your IP address with it. We use your IP address only briefly against abuse (10 minutes).
Protection against spam and bots
On our forms we use Cloudflare Turnstile to stop spam and abuse by bots. To do this, Turnstile processes technical data about your browser and device, such as your IP address and browser characteristics. We rely on our legitimate interest in keeping the forms secure. Turnstile is needed to submit the form you fill in, and is not used for statistics or marketing. Cloudflare processes this data under its own data processing terms.
5. How long we keep data
| Data | Retention |
|---|---|
| Enquiry through the form, in Cloudflare (KV storage) | 14 days |
| IP address against abuse (rate limit) | 10 minutes |
| Enquiries (leads) and quotes that were not accepted, also in the internal list | 1 year after the last contact |
| Client contact details | For as long as we work together, plus 2 years |
| Invoices and other tax records | 7 years, because the law requires it |
| Technical logs | At least 90 days and at most 12 months |
| Website statistics, if we switch them on | 14 months |
6. Who we share data with
We never sell your data. We share it only when our work needs it, and only with parties that handle it with care:
- Cloudflare, which hosts this website. Cloudflare provides the hosting, the network and the handling of the form.
- Providers of email, of office software, of our quoting and customer records, and of website statistics. We agree security and confidentiality terms with them.
- Our accountant.
- Staff and freelancers who work with us on an engagement, under confidentiality.
- Authorities, when the law requires us to.
Your enquiry goes by email to two Monkey Vision staff members. After that it sits in an internal list in our office software, until the link with our quoting tool is in place.
7. Where your data is handled
We are based in the Netherlands. Your data is handled in the European Economic Area, and in the United States by Cloudflare, which hosts this website. Cloudflare is on the list of the EU-US Data Privacy Framework. You can ask us for an overview of the safeguards.
8. Security and access details
We protect your data with suitable measures, such as encrypted connections and access only for people who need it for their work. If something does go wrong with personal data, we follow our data breach procedure. We report it where we must, to the authorities and to you.
Never send passwords or SSH access through the form or by email. We only ask for client access details through a secure vault.
9. Cookies and statistics
We use analytics cookies or similar technologies only if you consent. The details are in our cookie policy: cookie policy.
At the moment we use no statistics and no cookies, except what the form needs (Cloudflare Turnstile, see section 4). If we switch statistics on, the following applies:
For website statistics we use Google Analytics 4, only if you consent. Without your consent we do not load any Google scripts and nothing is sent to Google. We record and store your choice with the CookieFirst cookie banner. Google LLC is a US company listed under the EU-US Data Privacy Framework. Data retention is set to 14 months. If we later link the statistics to advertising, we will ask for separate consent (marketing category) and update this notice. You can withdraw your consent at any time through the cookie settings on the website.
10. Chat and AI
There is no chat and no AI feature on this website. If that changes, we will update this notice.
11. Your rights
Where the law gives you these rights, you can:
- access your data;
- have inaccurate data corrected;
- have your data erased;
- have the use of your data restricted;
- receive your data in a common format or have it transferred;
- object to use of your data based on our legitimate interest;
- withdraw your consent, for everything we asked consent for.
Send your request to info@monkeyvision.nl. We answer within one month. Sometimes we ask you to prove who you are, so that we do not give data to the wrong person.
If you are not happy with how we handle your data, please tell us first. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the attorney general or privacy regulator of your US state, where that applies.
12. US state privacy rights
This section is for people in the United States. We do not say here that the California Consumer Privacy Act (CCPA, as amended by the CPRA) or any other state law applies to us. We have not established whether we meet the thresholds. We give you these choices anyway.
- We do not sell personal information. We do not share personal information for cross-context behavioral advertising. This is how those terms are used in the CCPA, the CPRA and similar state laws.
- We do not use or disclose sensitive personal information to target advertising to you.
- We do not knowingly collect personal information from children under 16.
You can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct personal information that is wrong;
- delete your personal information;
- stop any sale or sharing of it (we do not do this, so there is nothing to stop);
- limit the use of sensitive personal information (we do not use it beyond what the services need).
How to make a request: email info@monkeyvision.nl, or call +31 24 202 2068. Say which right you want to use and which email address you used with us. We may ask for a few details to check it is you, and we only ask for what we need for that. We answer within 45 days. If we need more time, we tell you why and may take up to 45 more days.
You can ask someone to make a request for you. We then ask for proof that you gave that person permission.
If you use a right, we do not treat you worse for it. If we turn down a request, we explain why. Where your state offers an appeal, you can appeal by replying to our answer, and we tell you how to contact your state’s attorney general if you stay unhappy.
Global Privacy Control: we use no advertising or sale/sharing at this time; if that changes, we will honor GPC signals.
13. Changes
We change this notice when our way of working changes. The date at the top shows which version applies.