Privacy Policy

The short version

This site collects as little as possible. There is no account system, no advertising network, no profiling and no selling of data to anyone.

Two things collect personal data: the contact form, which you fill in deliberately, and analytics, which only runs if you accept cookies.

Who is responsible

GeekCow Creative Studio, a sole trader (eenmanszaak) established in Weesp, Netherlands, registered with the Dutch Chamber of Commerce under KvK number 73006637, is the controller for the personal data described here.

For any question about this policy, or to exercise the rights listed below, email hello@geekcow.com. You will get an answer within one month, and usually much sooner.

What is collected, and why

There are three cases.

• Contact form. When you submit it, the following is sent by email: your name, your email address, the scope options you selected, the budget range you selected, and your message. Purpose: to answer your enquiry. Legal basis: your consent, and the steps taken at your request prior to entering a contract (GDPR Art. 6(1)(a) and 6(1)(b)).
• Spam protection. The form is protected by Google reCAPTCHA v3, which assesses whether the submission is automated. Google receives technical information about your device and browsing in order to do this. Legal basis: legitimate interest in keeping the form usable (GDPR Art. 6(1)(f)). See the Cookie Policy for an important note about when this loads.
• Analytics. If — and only if — you press Accept on the cookie banner, Google Analytics is loaded and records anonymous usage such as which pages are visited and for how long. Legal basis: your consent (GDPR Art. 6(1)(a)). Press Decline and no analytics script is loaded at all.

Who else sees it

Personal data is shared only with the processors needed to run the service:

• Mailjet — delivers the contact-form email. EU-based infrastructure.
• Google (reCAPTCHA and, with consent, Analytics) — a US provider. Transfers rely on the EU–US Data Privacy Framework and Google's standard contractual clauses.
• The hosting provider serving this website.
• Nothing is sold, rented, or shared for advertising purposes. Ever.

How long it is kept

Contact-form emails are kept for up to 12 months after the last exchange, so a conversation can be picked up again, then deleted. If an enquiry becomes a signed project, the relevant records move under the retention obligations that apply to business administration in the Netherlands (currently seven years for tax purposes).

Your cookie choice is stored in your browser's local storage, not on a server, and stays there until you clear it.

Your rights

Under the GDPR/AVG you have the right to request access to your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you can withdraw that consent at any time, which does not affect processing carried out before you withdrew it.

Email hello@geekcow.com to exercise any of these. If you believe your data has been handled improperly, you also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

Security

The site is served over HTTPS, sets a strict set of security headers, and the contact endpoint validates and rate-limits input. No system is perfectly secure, but the same hardening checklist applied to client projects is applied here.

Changes

If this policy changes, the date at the top of this page changes with it. Material changes will be flagged on the site rather than made quietly.