Privacy Policy

Last updated: 18 May 2026

This document is authoritative in English. Translations are provided for convenience.

1. Data controller

Kriya Materials B.V.
Daelderweg 14, 6361 HK Nuth, The Netherlands
KvK (Chamber of Commerce): 14091624
Email: privacy@kriya-materials.com

Hereafter “Kriya”, “we”, or “us”. We are the data controller for the processing of personal data described in this privacy notice, as required under Articles 13 and 14 of the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

2. Personal data we collect

a) Intake form

When you submit an enquiry through our intake form, we collect:

  • Name, email address, company name, job title, country
  • Application area, message content, and technical requirements

b) AI assistant

If you use our AI assistant, we process:

  • Conversation content (session-scoped; not linked to a personal profile)
  • Personally identifiable information (PII) is automatically redacted from logs

c) Analytics

We use PostHog (hosted in the EU) and Google Analytics 4 for website analytics. Both are activated only after you give explicit cookie consent via the banner. They collect:

  • Page views, referrer URL, device type, browser type, approximate location (country/city via anonymised IP)
  • Tool usage events (which tools are used, presets selected, calculations performed)
  • Google Analytics 4 sets first-party cookies (_ga, _ga_*) with IP anonymisation enabled; PostHog uses first-party cookies for session continuity
  • If you decline consent, Google Analytics is not loaded at all and PostHog runs in memory-only mode (no cookies, no personal data collected)

d) Marketing consent

We only send marketing communications with your explicit, opt-in consent. Consent checkboxes are never pre-ticked. You may withdraw consent at any time.

3. Legal basis for processing (GDPR Art. 6)

Processing activityLawful basis
Responding to intake form enquiriesLegitimate interest (Art. 6(1)(f)) — processing business enquiries
AI assistant conversation processingLegitimate interest (Art. 6(1)(f)) — providing technical support
Analytics (cookie-free mode)Legitimate interest (Art. 6(1)(f)) — website improvement (no personal data processed)
Marketing communicationsConsent (Art. 6(1)(a)) — opt-in only, withdrawable at any time
Fulfilling sample requests and ordersContract performance (Art. 6(1)(b))

4. Data processors and recipients

We share personal data only with the following processors, each operating under a data processing agreement:

ProcessorPurposeLocationSafeguard
PostHogProduct analytics (opt-in only)EU (Frankfurt)EU-hosted; loaded only after explicit consent
Google Analytics 4Website traffic measurement (opt-in only)USIP anonymisation; EU-US Data Privacy Framework + Google DPT
AnthropicAI assistant API processingUSZero-retention API; no data kept beyond active session
NetlifyWebsite hosting + edge delivery + form submissionsUS / Global edgeStandard Contractual Clauses (SCCs); EU-US Data Privacy Framework
HostingpeopleEmail forwarding for info@kriya-materials.comEU (Netherlands)EU servers; standard DPA

We do not sell your personal data. We do not share data with third parties for advertising purposes.

5. International data transfers

Anthropic processes AI assistant conversations in the United States with zero data retention beyond the active session. Netlify (US) hosts the website and processes form submissions under Standard Contractual Clauses (SCCs) as approved by the European Commission. Google Analytics 4 anonymises IP addresses and is operated under Google's Data Processing Terms with EU-US Data Privacy Framework certification. All other processors are EU-based or covered by an adequacy decision.

6. Data retention

Data categoryRetention period
Intake form submissions24 months from submission, unless you request earlier deletion
AI assistant conversation logs30 days (PII redacted)
Analytics dataAggregated only; no personal data stored
Marketing consent recordsUntil consent is withdrawn, plus 12 months for audit purposes

7. Your rights (GDPR Art. 15–22)

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15) — obtain a copy of the personal data we hold about you
  • Right to rectification (Art. 16) — correct inaccurate or incomplete data
  • Right to erasure (Art. 17) — request deletion of your data (“right to be forgotten”)
  • Right to restriction (Art. 18) — restrict processing in certain circumstances
  • Right to data portability (Art. 20) — receive your data in a structured, machine-readable format
  • Right to object (Art. 21) — object to processing based on legitimate interest
  • Right to withdraw consent (Art. 7(3)) — withdraw marketing consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at:
privacy@kriya-materials.com or info@kriya-materials.com

We will respond to your request within 30 days. If we need more time, we will inform you within the initial 30-day period.

8. Automated decision-making

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you (GDPR Art. 22).

9. Supervisory authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
Bezuidenhoutseweg 30, 2594 AV Den Haag
autoriteitpersoonsgegevens.nl

You may also lodge a complaint with the supervisory authority of your habitual residence or place of work.

10. Changes to this policy

We may update this privacy notice to reflect changes in our processing activities or legal requirements. Material changes will be indicated by updating the “Last updated” date above. We encourage you to review this policy periodically.

11. Contact

For privacy-related enquiries:
Kriya Materials B.V.
Attn: Privacy Officer
Daelderweg 14, 6361 HK Nuth, The Netherlands
privacy@kriya-materials.com