Privacy statement
ZandKade Compliance is the controller for data collected through this website. We can be reached at info@zandkadecompliance.nl and +31 6 11 32 53 62. We process personal data in accordance with the General Data Protection Regulation (GDPR).
What data do we process?
- Contact details you provide when you email us or use the contact form: name, email address, organisation, phone number (optional), chosen topic and the content of your message.
- Origin data from the form: the page you submitted from, the page your visit started on, the referring website and any campaign parameter in the link you arrived through — used only to understand how your question reached us.
- A hashed version of your IP address on submission (an irreversible value), solely to limit abuse and spam. We do not store the IP address itself.
- Engagement data needed to perform an agreement, including details of client contact persons.
Cookies and analytics
This is a static website. We place no tracking cookies and use no advertising or profiling technologies. For visitor statistics we use Ahrefs Web Analytics: a cookieless, privacy-friendly service that collects aggregated data and does not track individual visitors. Our hosting provider processes limited technical data (such as IP address and requested page) needed to keep the site secure and available.
No external connections. Fonts, styles and images are served from our own domain. Viewing this site therefore makes no connection to Google Fonts or any other external network, so no technical data is passed to such parties.
Session storage. We store only the path of the page your visit started on in your browser's sessionStorage, so that a form submission tells us how the question reached us. It disappears when you close the tab and is never shared.
Legal basis and purpose
We process your data to answer your question, issue a proposal or perform an agreement (performance of a contract and legitimate interest), and to comply with legal obligations such as statutory retention rules.
Retention
Correspondence that does not lead to an engagement is kept for a maximum of two years. Engagement records are kept for seven years under Dutch tax retention rules.
Sharing with third parties
We do not sell your data. We share data only with service providers acting for us, or where required by law. For the contact form these are Vercel (hosting and the form endpoint), Supabase (storage of submissions in an EU database) and Resend (sending the notification email to us). Processor terms apply with each.
Do not send confidential material through the form. It is intended for a first question, not for client files, reports or supervisory correspondence. After an intake we agree a secure channel — see how we work.
Your rights
You have the right to access, rectify, erase, restrict and port your data, and to object to processing. Email info@zandkadecompliance.nl. You may also lodge a complaint with the Dutch Data Protection Authority.
Contact
ZandKade Compliance · info@zandkadecompliance.nl · +31 6 11 32 53 62 · The Netherlands
If you find a security issue on this website, report it to info@zandkadecompliance.nl with "security" in the subject line. We respond within two business days and ask that you do not disclose the issue publicly before it is resolved.