Privacy policy

This policy explains what personal data we collect on journeybuilders.eu, why we collect it, who processes it for us, and what rights you have. It is written for the General Data Protection Regulation (GDPR).

Who is responsible for your data

Journey Builders BV is the controller for the personal data described in this policy.

• Journey Builders BV
• Chamber of Commerce (KvK) number 28113352
• Waldeck Pyrmontlaan 5, 2341VA Oegstgeest, the Netherlands
• info@journeybuilders.eu

What this policy covers

This policy covers the website journeybuilders.eu and the forms and tags on it.

Our apps run inside your own Salesforce org. What each app stores is described on its app page. The Master Subscription Agreement governs how we handle data when you use an app.

When you send us a form

The site has two forms: the request-information form and the early-access form for JB Quicksend.

Both forms post to Salesforce using Web-to-Lead, a standard Salesforce feature that turns a web form submission into a Lead record. The Lead is stored in our own Salesforce org.

The request-information form asks for your company, name, work email, the app you are interested in, and what you need from us. It also has a message field and an optional question: how did you hear about us?

The early-access form asks for your company, name, work email, country, whether you use FinDock today, and what you would use the app for.

Fields marked as required are needed to answer your request. Without them we can’t reply.

With the form, we also record how your visit reached us, so we know which of our posts, campaigns, and pages lead to requests:

• which form you used;
• the campaign details in the link you followed to our site, if it had any (the utm_ values, such as utm_source=linkedin);
• the Google Ads click ID (gclid), if you came from one of our Google ads;
• the page where you arrived through that link.

If you accepted cookies, your browser keeps these campaign details in its session storage (under jb-attr) until you close the tab. That way they still reach the form when you open it on a later page. If you declined or made no choice, we only record them when the form is on the page you arrived on.

We use this data to answer your request, to arrange a demo or a pricing conversation, and to see which of our marketing brings in requests. If you join the early-access list, we email you about early access to JB Quicksend and its launch, which is what you signed up for. We send other updates only if you ask for them.

The legal basis is our legitimate interest in responding to people who contact us and in knowing which of our marketing works. Where a request leads to a contract, the basis is the steps needed before entering into it. We do not send these details or your form answers to Google, LinkedIn, or anyone else.

Spam protection with Google reCAPTCHA

Both forms use Google reCAPTCHA to keep automated spam out. reCAPTCHA loads only when you click into a form. Google then collects information about your device and how you use the page, such as your IP address, browser, and mouse movements, to judge whether you are a person. Google may set a cookie for this.

The legal basis is our legitimate interest in protecting our forms and our Salesforce org from spam. Google also uses this data for its own purposes, under the Google Privacy Policy and Terms of Service.

When you browse the site

Our hosting provider, TransIP B.V. in the Netherlands, keeps server logs. A log line contains the IP address of your device and the page requested. It also records the date, time, browser, and operating system your device reports.

We use these logs to keep the site running and to investigate errors and abuse. The legal basis is our legitimate interest in operating a secure website.

Analytics and advertising tags

We use Google Tag Manager to load measurement and advertising tags on the site. Google Tag Manager is a Google service that loads other tags from one container. It loads three tags:

• Google Analytics measures how the site is used: which pages people visit, how they arrived, and whether they send a form or click through to AppExchange. Google Analytics does not record the details you type into a form.
• Google Ads records visits so that we can show our ads to people who visited the site.
• The LinkedIn Insight Tag tells us whether visits come from our LinkedIn posts and campaigns. It also lets us show our ads on LinkedIn to people who visited our site.

None of these tags load until you accept in the cookie banner. If you decline, or make no choice, the tags stay off and no analytics or advertising data is collected.

The legal basis for these tags is your consent. You can withdraw it at any time; see Cookies below.

You can turn off personalised Google ads at adssettings.google.com, and LinkedIn ads based on other sites in your LinkedIn ad settings.

Cookies

A cookie is a small text file a website stores in your browser.

The site itself sets no cookies. It remembers your banner choice in your browser’s local storage under the name jb-consent, so we do not ask again on every page. Clearing your browser’s site data makes the banner appear again.

The tags loaded through Google Tag Manager set their own cookies, but only after you accept them in the banner. These cookies tell a tag whether it has seen your browser before. The lifetimes below are the ones Google and LinkedIn document for their tags; see Google’s list of cookies and LinkedIn’s cookie table.

You can change your choice at any time under Cookie settings in the footer. If you decline after accepting, we remove the analytics and advertising cookies and stored data under journeybuilders.eu, and reload the page without the tags. Cookies stored under google.com and linkedin.com can only be removed in your browser settings.

Who receives your data

These companies process personal data on our behalf, on our instructions, under a data processing agreement:

• Salesforce: stores the Leads created by the request-information and early-access forms.
• Google: provides Google Tag Manager and Google Analytics.
• TransIP B.V. (the Netherlands): hosts the site and keeps the server logs.

These companies also use the data for their own purposes, under their own privacy policies:

• Google, for Google Ads and reCAPTCHA (Google Privacy Policy).
• LinkedIn, for the Insight Tag. LinkedIn and we are joint controllers for the data the tag collects on our site. LinkedIn handles requests about that data (LinkedIn Privacy Policy).

We do not sell personal data, and we do not share it with anyone else unless the law requires us to.

Transfers outside the European Economic Area

Some of these providers process data in the United States. Where that happens, we rely on the safeguards the GDPR allows: the European Commission’s standard contractual clauses or an adequacy decision that covers the provider. You can ask us for a copy of these safeguards at info@journeybuilders.eu.

How long we keep your data

We keep personal data only as long as we need it for the purpose we collected it for.

• Form submissions: we keep the Lead while we are in contact with you about your request. If no contract follows, we delete it once the request is closed.
• Server logs: our hosting provider deletes logs after a fixed period.
• Google Analytics: we keep visit data for at most 14 months.
• Google Ads: a visit stays on an advertising list for the membership period set on that list, after which Google removes it.
• LinkedIn: LinkedIn keeps Insight Tag data for at most 180 days.

Your rights

Under the GDPR you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct data that is wrong or incomplete;
• delete your data;
• limit how we use your data;
• give you your data in a machine-readable format so you can take it elsewhere;
• object to how we use your data where we rely on our legitimate interest;
• stop using your data for direct marketing, at any time.

Your right to object. Where we rely on our legitimate interest (form attribution, spam protection, and server logs), you can object at any time. We then stop, unless we have compelling reasons that outweigh your interests.

Where we rely on consent, you can withdraw it at any time. This does not affect processing that took place before you withdrew.

We do not make decisions about you by automated means.

To exercise any of these rights, email info@journeybuilders.eu. We will reply within one month. We may ask you to confirm your identity before we act on a request.

If you think we have handled your data wrongly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.

How we protect your data

Only the members of Journey Builders who need it for their work can access our accounts. That covers our Salesforce org, Google Tag Manager, Google Analytics, Google Ads, and LinkedIn Campaign Manager. The site is served over HTTPS.

Changes to this policy

We update this policy when the site or the tools behind it change. The effective date at the top tells you when the current version took effect. Substantive changes are listed here.

• 16 October 2026: names the tags Google Tag Manager loads (Google Analytics, Google Ads, and the LinkedIn Insight Tag), their cookies, and who receives the data. Adds the campaign details we record with a form, the “How did you hear about us?” question, Google reCAPTCHA on both forms, and your right to object. Removes the newsletter, which the site no longer offers.
• 4 September 2026: rewritten for the new site. It describes the current forms, newsletter, and tags: Salesforce Web-to-Lead, Mailchimp, Google Tag Manager, and the LinkedIn Insight Tag. It replaces the version of 21 July 2019.

Contact

Questions about this policy or about your personal data go to info@journeybuilders.eu. You can also write to Journey Builders BV, Waldeck Pyrmontlaan 5, 2341VA Oegstgeest, the Netherlands.