Privacy & cookies · Version 2026.09
Less data. Clear purpose. No quiet surveillance.
This statement explains how Neverytime B.V. processes personal data through this website and during an initial business conversation. It is written for visitors, prospective clients, clients, suppliers and people who report a vulnerability.
01
Who is responsible
Neverytime B.V. is the controller for the processing described here. We are registered at Cornelis Jolstraat 20 A, 2584 ER ’s-Gravenhage, the Netherlands, under KVK number 84008059. You can reach us at bart@neverytime.nl or +31 6 2738 1295.
OPTIONAL
The interactive encounter
Basic pointer interaction uses movement, depth and deliberate touches to animate an artwork. A short spatial trail lives in browser memory and fades within seconds. It is not transmitted to our server.
Camera and facial mesh
Camera processing is off by default. If you separately agree and grant browser permission, video frames are processed on your device to estimate a facial mesh and visible eyelid and mouth movements. Only the mesh is displayed. Displaying a mesh does not remove the underlying video processing or make it automatically anonymous.
The purpose is to let those visible movements alter the artwork. We do not use this feature for identification, hidden-emotion or mental-health inference, recruitment, employment decisions or advertising profiles. We rely on your voluntary consent for this optional local processing. Refusing has no effect on access to the rest of the website.
The feature does not record or upload camera frames, landmarks or expression coefficients. The model and runtime files are served from this website, not a third-party inference service. Camera processing stops when you select Stop camera, close its controls, leave the encounter, hide the page or navigate away. Temporary geometry and coefficients are cleared. Browser permissions can also be revoked in your browser settings. Please use the camera only when others are not in view.
Optional local learning
A separate control enables movement prediction and learning from your explicit ratings of the artwork. It uses recent movement aggregates and feedback, not camera data or time-on-site rewards. Weights and preferences remain in this page’s memory, are not uploaded, and clear on reset or reload. They do not form a persistent visitor identity.
This describes the implemented feature, not a claim that a facial mesh is exempt from data-protection law. Questions and withdrawal requests can be directed to the contact above. The website remains usable without camera processing or local learning.
02
What we process, and why
Direct inquiries
When you use the contact form, we process your name, work email, organisation, selected topic, message, submission time and a random reference number. We use this only to assess and answer your inquiry, take requested steps before a possible agreement, protect the form from abuse and keep an accountable correspondence record. The legal bases are your request for pre-contractual steps and our legitimate interest in secure, orderly business communication.
Email, telephone and engagements
If you contact us directly or become a client or supplier, we may process contact, correspondence, contract, invoicing, project and compliance information needed to communicate, perform an agreement, meet legal duties and establish or defend legal claims.
What not to send
Do not submit passwords, secret keys, full vulnerability evidence, health information, government identifiers or other highly sensitive data through the general form. Use the coordinated disclosure route for security reports and agree on a protected transfer method first.
04
Retention and security
An inquiry that does not become an engagement is normally deleted within six months after the conversation ends. Contract and invoice records are retained for the period required by Dutch tax and civil law. Security reports may be retained longer when necessary to document remediation, protect systems or handle claims. Backups may expire on a delayed cycle.
We apply proportionate technical and organisational measures, access limitation and data minimisation. No internet transmission or storage system can be guaranteed absolutely secure. If a breach creates a legally reportable risk, we follow the applicable notification duties.
05
Your privacy rights
Depending on the circumstances, you may request access, rectification, erasure, restriction, portability or object to processing based on legitimate interests. Where processing depends on consent, you may withdraw it without affecting earlier lawful processing. Email bart@neverytime.nl. We may ask for proportionate proof of identity and normally respond within one month.
You may also complain to the Dutch Data Protection Authority, Autoriteit Persoonsgegevens. We would appreciate the opportunity to resolve your concern directly first.
07
Changes
We update this statement when our processing or the law materially changes. The version date at the top identifies the current text. Material changes will not be applied retroactively where that would undermine your rights.