Privacy & data policy

Last updated: 26 July 2026

This policy describes what we actually collect. The eligibility assessment is a rules-based determination against published IND criteria, and those criteria are age-tiered, nationality-dependent and salary-based — so the questionnaire genuinely needs personal details. We collect what the determination requires and nothing beyond it.

Data we collect, and why

  • Date of birth — the highly skilled migrant salary threshold differs for applicants under 30 and 30 or over, so your exact age on the relevant date changes the answer. Collected to determine which published threshold applies to you.
  • Nationality (and second nationality) — determines whether you need a permit at all, whether an entry visa (MVV) or TB test applies, and which document legalisation route you face. Collected for eligibility determination.
  • Country of residence and document-issuing country — determines the application route and legalisation path. Collected for eligibility determination.
  • Education history — qualification level, field of study, institution, duration and awarding country. Used to assess degree recognition risk and credential evaluation needs.
  • Employment details — current and target job titles, occupation, years of experience, and your current or prospective employer's name. Used both for eligibility determination (recognised sponsor status, intra-company transfer routes) and for market analysis.
  • Current salary and currency — converted to euros using European Central Bank reference rates and compared against the applicable published threshold and typical Dutch market pay. Used for eligibility determination and market analysis.
  • Language levels, family situation and relocation timing — used for market analysis and to produce a realistic personal roadmap.
  • Account data: your email address and authentication credentials, used to sign you in and to show your saved reports.
  • Payment data: handled by our payment provider. We receive and store only a transaction reference, amount and status — never your card number.
  • Contact form submissions: the name, email address, country, optional payment reference and message you send us, stored so we can respond, together with a hashed (never raw) version of your IP address used only to block spam. Never used for marketing.
  • Technical data: minimal server, email delivery and security logs.

Data we still do not ask for

We do not ask for and do not want: passport or ID numbers, BSN, V-number, home address, health or medical records, religion or ethnicity, financial account details, or CV and document uploads. If you send such data anyway, we will delete it.

Why (legal basis)

Performance of a contract (running your eligibility determination and delivering your report), legitimate interests (security, fraud and spam prevention, and service improvement in aggregated form), and legal obligations (tax records for payments).

AI processing

Your anonymous answers are sent to an AI provider to generate your report. They are not used to train third-party models under our configuration, and they contain no identifiers.

Where your assessment data is stored, and for how long

Your questionnaire answers and every report generated from them are stored against your account, so you can re-read past reports without paying again. All assessment data — your answers and the reports generated from them — is automatically and permanently deleted 365 days after the date of the assessment. A daily job enforces this; nothing is kept beyond that period, and you can ask us to delete it sooner at any time. Contact form messages are kept for 24 months. Payment records are kept for as long as Dutch tax law requires (currently seven years). Anonymous, aggregated statistics that cannot identify you may be retained indefinitely.

We do not use your data

ClearToNL does not use any user's data for anything other than producing that user's own report. We do not sell it, rent it, share it with employers, sponsors or recruiters, do not use it for advertising or profiling, and do not use it to train AI models.

Deleting your data

You can request deletion of your account, your questionnaire answers and your saved reports at any time by emailing ClearToNL@outlook.com from the address on your account. We action deletion requests within 30 days. Payment and tax records we are legally required to keep are retained for the statutory period and nothing more.

Your rights

Under the GDPR you may request access, correction, deletion, restriction, portability, or object to processing, and you may lodge a complaint with your national data protection authority (in the Netherlands: Autoriteit Persoonsgegevens). Contact ClearToNL@outlook.com.

Cookies

We use only strictly necessary cookies for session and security. No advertising or cross-site tracking cookies.

Controller

ClearToNL, Netherlands. Contact ClearToNL@outlook.com.