Privacy statement
Last updated: August 2026
ITKaro sells independence and care. That starts with your own data. This site uses no cookies, no trackers and no third-party analytics. There is no cookie banner because there is nothing to accept. Below is exactly what happens to what you send through the contact form.
Who is responsible
ITKaro, sole proprietorship of Jacob Poot.
Dutch Chamber of Commerce (KvK) 87602075 · VAT NL004448441B78
Email: jacob.poot@itkaro.com
What I process, and why
If you fill in the contact form, I process the details you provide yourself:
- Name and email address — so I can reply to you.
- Company (optional) — for context to your question.
- Your message — the content I respond to.
When you submit, your IP address and the time are also briefly processed, solely to prevent spam and misuse of the form. This is not used to track you and is not kept in any profile.
Legal basis
I process this data on the basis of your consent (given via the checkbox on the form) and to take steps at your request towards possible cooperation (pre-contractual). You can withdraw your consent at any time — an email is enough.
Who receives your data
No one else. I do not sell or share your data. Your message arrives in my own Microsoft 365 environment and is handled there. There is no external form or marketing platform in between. The site runs on a server at fly.io (Amsterdam region), which only forwards the message and stores nothing itself.
Where your data is held
The email and its processing stay within my Microsoft 365 environment in the EU. No transfer outside the EEA takes place for this purpose.
How long I keep it
I keep your message for as long as needed to handle your question and any follow-up properly, and delete it afterwards. If it does not lead to contact or cooperation, I delete it no later than 12 months after the last contact.
Your rights
You have the right to access, rectify or erase your data, to object, and to withdraw your consent. Email jacob.poot@itkaro.com and I will respond as soon as I can. If you disagree with something, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Security
Traffic to the site is encrypted (HTTPS), no more is asked than necessary, and the form is protected against misuse. Spotted something odd? Let me know.
How I measure site usage — cookieless
I want to know how the site is used (how many visitors, which pages, where they arrive from), without tracking you. So I measure without cookies and without any third parties: nothing is stored on your device and nothing goes to Google or any other platform. The measurement runs on my own server. Per visit I only record: the page, the site you arrived from (domain name only), whether you're on mobile or desktop, and an encrypted, daily-rotating code to count visitors. Your IP address is used only briefly and in encrypted form and is not stored. Because no cookies or device storage are involved, no cookie notice is required.
Newsletter
If you sign up for the monthly digest, I store your email address and language choice, with the moments of signing up, confirming and, if applicable, unsubscribing. That is the entire record; nothing is linked to it and the address is not shared with anyone. Sign-up uses a confirmation email (double opt-in) and every digest contains an unsubscribe link. Unsubscribing stops the emails immediately; the log keeps the unsubscription as proof.