Privacy policy
This privacy policy explains which personal data Oosterom Studio processes when you visit this website or get in touch, why, and what your rights are. I collect as little as possible and never sell data to anyone.
Who is responsible?
- Oosterom Studio, sole proprietorship of Vincent Oosterom
- Based in Alphen aan den Rijn, the Netherlands
- Chamber of Commerce (KvK) number 85118028
- Email: vincent@oosteromstudio.nl
- Phone: +31 6 40 29 48 23
Questions about your data? Feel free to email me, I'll get back to you as soon as possible.
What data, why and for how long?
| When | What data | Why (legal basis) | Retention |
|---|---|---|---|
| You fill in the contact form | Name, email and, if you provide them: company, phone, budget, your message and the type of project | To respond to your request and prepare a proposal (steps prior to a contract) | Up to 2 years after our last contact. If it becomes a project, as long as needed for the project and the legal 7-year retention period for invoices |
| You email, call, send a WhatsApp message or book a call | Your name, contact details and what you send me | To answer your question (legitimate interest or steps prior to a contract) | Same as above |
| You use the website check | The web address you enter. If you request the report by email: your email address, and whether I may contact you | To run the check and send the report (consent). I only get in touch if you ticked that box | Results for up to 1 hour (so you can share them). Email address up to 2 years after our last contact, or shorter if you ask |
| You accept analytics cookies | Data about your visit: pages viewed, device, browser, approximate region. No name or email | To see how the site is used and improve it (consent) | 2 months in Google Analytics, cookies up to 2 years in your browser |
| You visit the website | Technical data such as IP address and browser, in the hosting server logs | To keep the site secure and working (legitimate interest) | Briefly, only as long as needed for security and troubleshooting |
Who do I share data with?
I only share your data with services needed to run this website and my business. They either process data on my behalf under a data processing agreement or are responsible themselves:
- Vercel: website hosting
- Resend: delivers contact form messages to my inbox, the confirmation to you and the website check report
- Google (PageSpeed Insights): only if you use the website check. The web address you enter is sent to Google to measure speed; your email address is not
- Google (Analytics): only if you accept cookies
- WhatsApp (Meta): only if you contact me via WhatsApp yourself; WhatsApp's privacy policy also applies
- Cal.com: if you book an intro call through my calendar; Cal.com's privacy policy also applies
- Anthropic (Claude): only if you use the AI demo. Your questions are sent to Anthropic to generate an answer; don't include personal data
- My email provider: where requests and emails arrive
Some of these parties are based in the United States. Data is only transferred there with appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
The fonts on this site are served from my own server, not via Google, so no data is sent to Google for that.
Security
The website uses a secure connection (https). The contact form is validated on the server and protected against spam. Only I have access to your data.
Your rights
You have the right to:
- access your data
- have incorrect data corrected
- have your data deleted
- restrict or object to the processing
- receive your data in a common format (portability)
- withdraw your consent at any time
Send your request to vincent@oosteromstudio.nl. I'll respond within one month. If you're not happy with how I handle your data, you can file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
Changes
If anything changes in how I handle data, I'll update this policy. The date at the top shows when it was last updated.