Privacy policy

What this notice covers

This notice explains how Drummer handles personal information when you visit our website, request a demo or communicate with us. Drummer is responsible for deciding how information collected through these interactions is used.

When a customer connects its CRM or provides recordings to the Drummer service, that customer determines the purposes of processing. The relevant customer agreement and data processing agreement govern Drummer’s processing on its behalf. This website notice does not replace those agreements.

Information we collect

• Demo bookings: you book a demo through Google Calendar, which gives us your first and last name, your email address, the time you choose and any answers you give there, or you email us. We then process what you choose to share, such as your company, team size and CRM.
• Correspondence: messages and information you share when speaking with our team.
• Technical information: hosting and delivery providers may process your IP address, browser information, request timestamps and diagnostic information to deliver and protect the website.

Please only share information needed for your enquiry. Do not submit customer recordings, confidential CRM records or sensitive personal information by email or through the booking page.

Why we use it

We use enquiry information to respond, arrange a demo and discuss the service you requested. The legal basis is taking steps at your request before entering a contract, or our legitimate interest in responding to business enquiries where appropriate.

We rely on our legitimate interests in operating a secure, reliable website for proportionate technical diagnostics and abuse prevention. Legal obligations may require us to retain particular records.

A demo request is not permission for unrelated marketing. Where consent is required for marketing, it must be obtained separately.

Who may receive information

Information may be processed by service providers supporting hosting, data storage, communications and website operations, and by team members who need it to handle your request. Information may also be disclosed where legally required or necessary to establish or defend legal claims.

For product use, CRM connections and AI processing depend on your agreed setup. Ask for the applicable data processing agreement and subprocessor details before connecting business data.

Where processing involves a transfer outside the European Economic Area, the applicable transfer mechanism and safeguards must be identified in the relevant processing documentation. This notice does not promise EU-only hosting or processing.

How long information is kept

Retention depends on the purpose: enquiries need to be kept only as long as needed to manage the conversation and related business or legal requirements.

Product data retention, deletion and any backup retention are governed by the customer’s agreement. Contact us to ask about the retention period applicable to your information or to request deletion.

Cookies and external services

This website hosts its own fonts and images. It does not load Google Fonts or an external asset delivery service.

On the production website we use PostHog, hosted in the EU, in cookieless mode: it sets no cookies and uses no local or session storage. Your IP address and user agent are hashed with a salt that is deleted daily, and neither is stored. We respect Do Not Track.

Your choice of light or dark theme is stored in your browser’s localStorage, and your English or Dutch preference may be stored in a lang cookie. Both are strictly functional. The demo booking loads Google Calendar only after you click to open it; from then on, Google’s privacy policy applies.

Optional analytics or advertising cookies, if introduced, require the appropriate notice and consent where required by law. Browser controls let you restrict cookies and storage, but some functionality may be affected.

Your data protection rights

Subject to the conditions in applicable law, you can request access, correction, deletion, restriction or portability of your personal information. You can object to processing based on legitimate interests, and withdraw consent without affecting the lawfulness of earlier processing.

We may need to verify your identity before acting on a request. GDPR requests are generally due a response within one month, with lawful extensions for complex requests. You may lodge a complaint with your local data protection authority.

If your information was provided by a Drummer customer, contact that organisation first. It is responsible for handling rights requests concerning the data it controls.

Changes and related information

This notice may be updated as the website and service evolve. The date above identifies the latest version. Material changes should be communicated where required by law.

Read our security information for the questions to consider before sharing CRM data or recordings with Drummer.