What this website does with your data — and what it does not do

This policy describes what actually runs on www.for-motion.uk: analytics that starts only after you say yes, a handful of forms, a basket, and links to WhatsApp and to social networks. Services we do not use are not listed here, because there is nothing to say about them. As at 13 September 2026.

1. Who is responsible

For Motion — registered as FOR-MOTION.NL
sole trader under Dutch law (eenmanszaak), owner Henk Jan Renssen
Molenweg 12
8181 BJ Heerde
the Netherlands

Telephone: +31 85 212 97 54 (a Netherlands number)
Email: info@for-motion.nl

We are established in the Netherlands, so the EU General Data Protection Regulation applies to us as a Dutch business. Because this website offers goods to people in the United Kingdom, the UK GDPR and the Data Protection Act 2018 apply to what we do with your data as well. We have not appointed a data protection officer: the thresholds in Article 37 are not met. Article 27 UK GDPR asks a controller with no establishment in the United Kingdom to appoint a UK representative unless its processing is occasional and low-risk; we have not appointed one, and we process personal data of UK residents only to answer enquiries and to fulfil orders. For any question about your data, the contact details above reach the person responsible.

2. When you visit this website (server logs)

Your browser sends what is technically necessary to deliver a page: your IP address, the date and time, the address requested, the referring page, the browser type and the operating system. We use this to deliver the site, keep it secure and find faults. The lawful basis is our legitimate interest in a secure, working website (Article 6(1)(f)). These logs are not combined with any other source and are deleted after 30 days at the latest.

The website and its images are delivered through the content delivery network of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), which acts as our processor (Article 28). For data that reaches the United States, Cloudflare is certified under the EU-US Data Privacy Framework and its UK Extension, and the European Commission's standard contractual clauses with the UK Addendum apply in addition.

3. Cookies and similar technologies

Without your consent we store only what is strictly necessary to provide the service you asked for — the exemption in regulation 6(4) of the Privacy and Electronic Communications Regulations 2003:

Name	Purpose	Kept for
`consent`	Remembers your decision about analytics, so we do not ask again on every visit.	6 months
`locale`	Remembers the language you chose.	1 year
`market` and `market_choice`	Remember which country edition of this website you want to see.	up to 1 year
Shop session cookie	Keeps your basket and your sign-in together during your visit.	the session, or until you sign out
`_pk_id`, `_pk_ses` (Matomo)	Analytics — set only after you have consented.	13 months and 30 minutes

You can change your decision at any time: through "Cookie settings" at the foot of every page, or by deleting the cookies in your browser.

4. Analytics with Matomo — only after you consent

We use Matomo, open-source analytics software, on a server operated for us in the European Union (analytics.wijmakensites.com). No data goes to the makers of Matomo or to any third party outside the EU and the UK. It records the pages you view, how long you stay, the page that referred you, the approximate device, and a shortened IP address.

The Matomo script is loaded only after you have consented. If you decline, or make no choice, it is not loaded and no Matomo cookie is set. The lawful basis is your consent (Article 6(1)(a) UK GDPR; PECR regulation 6(1)), which you may withdraw at any time with effect for the future. The data is deleted after 13 months.

We do not use Google Analytics, Google Maps, Google Fonts, Google reviews, the Meta pixel or comparable tools on this website. Fonts and scripts are served from our own infrastructure.

5. When you send a form

This website has forms for a quote, for a call back, for a question to customer service, and for servicing, repairs and adaptations. They ask for:

your name (required) — so we can address you;
your email address (required) — so we can answer and send you the quote;
your telephone number (optional) — only if you would rather be rung;
your message (required) — what you want to know from us.

We use these details solely to answer your enquiry. The lawful basis is Article 6(1)(b) (steps you ask us to take before a contract) and otherwise our legitimate interest in answering the people who write to us (Article 6(1)(f)). Enquiries that do not become an order are deleted no later than two years after the last contact, unless a legal retention duty applies. An enquiry never leads to a marketing email.

6. When you order or open an account

For an order we process your order, invoice and delivery details (Article 6(1)(b)). Invoicing records are kept for seven years under Dutch tax law (Article 52 of the Algemene wet inzake rijksbelastingen); the lawful basis for that is Article 6(1)(c). A customer account is optional and you can have it deleted at any time. We pass your details to a carrier where that is needed for delivery, and to our accountant where that is needed for the books. We have no sales partners in the United Kingdom, so nobody there receives your data from us.

7. WhatsApp and social networks

The WhatsApp buttons on this website are ordinary links. No WhatsApp script is loaded and no cookie is set until you click. When you click, WhatsApp opens and from that moment WhatsApp Ireland Limited processes your data under its own terms; your telephone number becomes known to us. The same goes for the links to Facebook, Instagram, LinkedIn, YouTube, TikTok and X and for the link to the map of our premises: only your click makes the connection.

8. Where your data goes

Your data is processed in the Netherlands, with the exception of the delivery through Cloudflare described under 2. From the United Kingdom's point of view the European Economic Area is a country with an adequacy decision, so that transfer needs no further safeguard. We do not sell data, and we use no automated decision-making and no profiling within the meaning of Article 22.

9. Your rights

You have the right of access (Article 15), to rectification (Article 16), to erasure (Article 17), to restriction of processing (Article 18), to data portability (Article 20) and to object to processing based on a legitimate interest (Article 21). Consent you have given you may withdraw at any time with effect for the future (Article 7(3)). An informal email to info@for-motion.nl is enough; we answer within one month.

You also have the right to complain to a supervisory authority. In the United Kingdom that is the Information Commissioner's Office (ico.org.uk). Because we are established in the Netherlands you may equally complain to the Dutch authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).