Privacy Policy

1. What data we process

• Contact form: your name, your email address, the subject you choose and the content of your message.
• Account and client relationship: if you create an account or become a client, we process your name and email address, a securely hashed password or, if you sign in with Google, your Google account ID, and the data we need to deliver and invoice our services, such as mail hosting subscriptions, payments and files in your client portal.
• Payments and donations: the amount, payment status and payment method, plus any name or message you enter with a donation. The payment itself is handled by Mollie; your bank or card details never reach us.
• Website visits: technical data such as your IP address, browser and device type, the pages you visit and the website you came from. See section 3.

2. Why we use your data

• To answer your questions and stay in touch about your request (legitimate interest, or taking steps before entering into a contract).
• To deliver our services, manage your account and send invoices (performance of a contract).
• To meet legal obligations, such as the statutory obligation to keep our accounting records (legal obligation).
• To secure the website and our systems and to prevent misuse of accounts (legitimate interest).
• To measure how the website is used and improve it (legitimate interest; see section 3).

3. Analytics and statistics

We use Google Analytics, a Google service, to see how visitors use the website, for example which pages are viewed and for how long. Google Analytics places cookies for this purpose and processes data such as your IP address and information about your device and browser. Google may also process this data outside the European Economic Area, including in the United States. You can block these cookies in your browser settings or with Google's opt-out add-on (tools.google.com/dlpage/gaoptout).

We also collect visitor statistics with BromeoMonitor (monitor.bromeo.live). This measurement does not use cookies and does not store IP addresses.

When you create an account or sign in, we send a notification with your account ID, name and email address to BromeoMonitor, so we can manage accounts and act against misuse.

4. Service providers we use

We only share the data these parties need for their task. We never sell your data and do not share it for marketing purposes.

• FormSubmit (formsubmit.co): processes the messages you send through the contact form and forwards them to our email address.
• Mollie: processes payments and donations. Mollie is independently responsible for the payment itself; see Mollie's privacy statement.
• Google: provides Google Analytics and, if you choose to, signing in with your Google account. Google then shares your name, email address and Google account ID with us. We never see your Google password.
• MXroute: if you use our mail hosting, your mailboxes and email messages are stored on the servers of MXroute, our mail hosting supplier.
• BromeoMonitor: visitor statistics and account notifications, as described in section 3.

Some of these providers are based outside the European Economic Area or may process data there (such as Google, FormSubmit and MXroute).

5. Cookies

• Session cookie: when you sign in, we place a functional cookie that keeps you signed in. It is removed when you sign out or when the session expires.
• Signing in with Google: when you sign in with Google, a temporary cookie protects the sign-in process.
• Analytics: Google Analytics places analytics cookies (see section 3). BromeoMonitor does not use cookies.

6. How long we keep data

We keep personal data no longer than necessary for the purpose for which it was collected. Data we are legally required to keep, such as invoices and accounting records, is kept for as long as the statutory retention period applies (7 years for accounting records).

7. Security

We take appropriate technical and organisational measures to protect your data, such as encrypted connections (HTTPS), securely hashed passwords and restricted access to our systems.

8. Your rights

You have the right to access, rectify and erase your data, to restrict its processing, to data portability and to object to processing. Where processing is based on your consent, you can withdraw that consent at any time. Send your request to info@thegatekeeperenterprises.com; we will respond within one month.

Not happy with how we handle your data? You can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl). We would appreciate it if you contact us first, so we can try to resolve it together.