Webclouds takes your privacy seriously. This policy explains what personal data we collect, why we collect it, who we share it with and how you stay in control. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the Dutch Implementation Act (UAVG).
1. Who's responsible
Webclouds, based in the Netherlands, is the data controller for personal data processed through this website and our services. You can reach us at hello@webclouds.nl.
2. What data we collect
We process the following categories of personal data:
- Data you give us directly through our contact forms or by email — name, company name, email address, phone number, budget, preferred launch date and a description of your request.
- Account data when you sign into our client portal — name, email, role and login history, managed via our authentication provider.
- Project content you share with us during delivery — copy, imagery, brand documents, credentials for domain management (when relevant) and any other files you upload.
- Billing data — billing address, Chamber of Commerce number, VAT number and payment status. Card data is handled directly by our payment provider; we never store card numbers ourselves.
- Technical data collected automatically — IP address, browser type, device type, pages visited, time of visit and the referring source. We collect this largely in anonymised form.
3. Why we process your data
We only process personal data for clearly defined purposes, on the following legal bases under article 6 GDPR:
- Performance of a contract — to prepare your quote, deliver the project, hand it over and invoice for it.
- Legitimate interest — to follow up on your enquiry, improve our site and services, prevent abuse and keep our records.
- Legal obligation — including the Dutch tax retention duty of 7 years for administrative records.
- Consent — for non-essential cookies and any newsletter sign-up. You can withdraw consent at any time.
4. How long we keep data
We don't keep data longer than necessary for the purpose it was collected for:
- Enquiry forms and correspondence that don't lead to a project: up to 12 months after the last contact.
- Project files and client data: up to 24 months after project delivery, unless we agree otherwise.
- Invoices, contracts and administrative records: 7 years, in line with the Dutch tax retention duty.
- Analytics data: up to 14 months.
5. Who we share data with
We don't sell personal data. We do work with processors that help us run our services. We have a data processing agreement with each of them. Our main processors are:
- Hosting and infrastructure — Vercel (US, under SCCs) for this website and the client portal, and Supabase (EU) for our database and file storage.
- Authentication — Clerk for managing client portal accounts.
- Email — Resend for sending transactional email (quotes, invitations, updates).
- Accounting and payments — our accounting software and payment provider for invoicing and collecting payments.
- Analytics — a privacy-friendly, largely anonymised analytics tool for website usage.
Where possible we pick processors based in the European Union. When a transfer outside the EU is necessary, it relies on the European Commission's Standard Contractual Clauses (SCCs).
6. Security
We use reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access. This includes TLS encryption of all traffic, access control via individual accounts, the principle of least privilege, audit logging and periodic configuration reviews. No service is ever 100% secure.
7. Your rights
Under the GDPR you have the following rights:
- Access to the data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure (the “right to be forgotten”).
- Restriction of processing.
- Data portability.
- Objection to processing based on legitimate interest.
- Withdrawal of consent you gave earlier.
To exercise any right, email us at hello@webclouds.nl. We respond within 30 days. If you're unhappy with how we handle your data, you can file a complaint with the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl.
8. Children
Our services are aimed at businesses and organisations, not at children under 16. We don't knowingly collect personal data from minors.
9. Cookies
We use cookies and similar technologies. Details live in our separate cookie policy.
10. Changes
We may update this policy from time to time. For material changes we notify active clients by email. The latest version is always on this page, with the update date at the top.
11. Contact
Questions about this policy or how we handle your data? Email us at hello@webclouds.nl.