Privacy Policy

PJ Designs is the data controller responsible for your personal data. Contact details: • Email: info@pjdesigns.nl • Address: Stadionstraat 11 C11, 4815 NC Breda, Netherlands • Chamber of Commerce: 99241625 • VAT: NL005378118B11

We may collect the following personal data: • Contact Information: Name, email address, phone number when you contact us or submit a form • Communication Data: Messages and correspondence you send us • Technical Data: IP address, browser type, device information (collected automatically) • Usage Data: How you interact with our website (pages visited, time spent) • Project Data: Business information and content provided for website projects

We use your personal data for: • Responding to inquiries and providing customer service • Delivering our web design and development services • Sending project updates and relevant communications • Improving our website and services • Invoicing and payment processing • Complying with legal obligations Legal basis: We process your data based on: • Your consent (for marketing communications) • Contract performance (for service delivery) • Legitimate interests (for website improvement and security) • Legal obligation (for tax and accounting records)

We do not sell your personal data. We may share data with: • Service providers who assist our operations: - Hosting providers (for website hosting) - Email service providers - Payment processors - Analytics providers • Legal authorities when required by law • Professional advisors (accountants, lawyers) when necessary All third parties are required to respect the security of your data and treat it in accordance with the law. We have Data Processing Agreements in place with relevant processors.

When PJ Designs provides website services, we may process personal data on behalf of our clients (e.g., visitor data, contact form submissions on client websites). 5.1 Our Role • For client websites: We act as a Data Processor on behalf of our clients (the Data Controllers) • For our own services: We act as Data Controller 5.2 Processing Activities As processor, we may process: • Website visitor data (IP addresses, browser info) • Contact form submissions • Newsletter subscriptions (if applicable) • E-commerce data (if applicable) 5.3 Security Measures We implement appropriate technical and organizational measures including: • SSL encryption for all data in transit • Secure cloud hosting with major providers • Regular security updates and patches • Access controls and authentication • Regular backups 5.4 Sub-processors We use the following categories of sub-processors: • Cloud hosting providers (EU/EEA based or with Standard Contractual Clauses) • Email service providers • Analytics tools (Microsoft Clarity, Supabase Analytics) A list of specific sub-processors is available upon request. 5.5 Client Obligations Clients using our services are responsible for: • Having their own privacy policy on their website • Obtaining necessary consents from their users • Instructing us on data processing activities • Reporting data breaches promptly

We retain your personal data only as long as necessary: • Contact form submissions: 2 years after last contact • Project-related data: 7 years (legal requirement for business records) • Website analytics: 26 months • Invoices and financial records: 7 years (Dutch tax law) • Client website data: Duration of contract + 30 days for transition After these periods, data is securely deleted or anonymized.

Under GDPR, you have the right to: • Access: Request a copy of your personal data • Rectification: Correct inaccurate or incomplete data • Erasure: Request deletion of your data ("right to be forgotten") • Restrict processing: Limit how we use your data • Data portability: Receive your data in a structured format • Object: Object to processing based on legitimate interests • Withdraw consent: Withdraw consent at any time To exercise these rights, contact us at info@pjdesigns.nl. We will respond within 30 days.

We primarily store and process data within the European Economic Area (EEA). When we use service providers outside the EEA (e.g., for analytics or certain cloud services), we ensure appropriate safeguards are in place: • Standard Contractual Clauses approved by the European Commission • Adequacy decisions where applicable • Other legally recognized transfer mechanisms

We use cookies to improve your browsing experience. For detailed information, please see our Cookie Policy.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes: • SSL encryption on all pages • Secure, managed hosting infrastructure • Regular security reviews and updates • Access controls and authentication • Internal procedures for handling personal data

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the new policy on this page with an updated revision date.

If you have concerns about our data practices, please contact us first. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): Website: www.autoriteitpersoonsgegevens.nl