Privacy Notice
Transparent, zero-fluff data handling for BeZeally clients and candidates.
Last updated: 11 September 2026
BeZeally is operated by OverwhelmedHQ (KvK 42134075), which is responsible for the information described below. Questions or removal requests go to andre@bezeally.com.
Essential Cookies & Zero Tracking
We use strictly necessary session data only, and only where it is required for authentication and security. That session lives in your own browser and is not a tracking cookie.
We do not use third-party analytics cookies, advertising pixels, tracking cookies, or non-essential tracking scripts. There is no optional tracking here, so there is nothing to opt out of and no consent banner to click.
Document Storage & 48-Hour Auto-Purge
Job Descriptions, CVs, and documents uploaded via "/hiring-brief" or "/cv-review" (PDF or DOCX files under 5MB) are stored in private, access-controlled storage and encrypted at rest. They are not reachable without a temporary, expiring link.
All uploaded files and form submission data are permanently deleted from our storage system automatically after 48 hours. Email alert download links sent to administration expire automatically after 48 hours, and dashboard links last no more than an hour.
Personal Data Usage
Information provided in form fields (name, email address, company name, and project notes) is used exclusively to respond to your specific hiring brief or CV review request. We do not sell, share, or trade your personal data with third parties, and we do not send marketing to people who did not ask for it.
We also record a one-way scrambled fingerprint of your network address. It cannot be turned back into your address and is used only to stop one sender flooding the forms.
Data Erasure & Contact
You have the right to request immediate manual deletion of your contact records or submitted files ahead of the automated 48-hour purge timer. Contact andre@bezeally.com for any privacy requests.
You can also ask for a copy of what we hold or ask us to correct it, and we will act within 30 days. If you are not satisfied with how we handle a request, you may complain to your national data protection authority (in the Netherlands, the Autoriteit Persoonsgegevens).
Who else can see it
Our hosting and database provider stores the data, and our email provider delivers the notification to us. Both act on our instructions only. A short activity record of dashboard access and deletions is kept for security, and it holds no submission content and no file content.