Privacy policy

Callicarpa B.V. processes personal data in line with the General Data Protection Regulation (GDPR / AVG). This policy explains what we collect, why, and what your rights are.

Who is responsible

Callicarpa B.V., Oostsingel 128, 2612 HJ Delft, Netherlands, is the data controller. You can reach us at joseannemarie@outlook.com.

This website

This website sets no tracking or advertising cookies, uses no analytics and loads no third-party scripts or fonts — everything is served from our own domain. If you switch on dark mode, that choice is stored only in your own browser. Our hosting provider keeps standard server logs (such as IP address, time and requested page) for security and to keep the site running; these are deleted automatically after a short period.

The contact form does not send or store anything on this website. It opens your own email program with your message filled in, and we only receive it if you press send there.

What we collect when you contact us or order

Data	Why	Legal basis
Name, email, phone, the message you send	To answer your question	Legitimate interest / steps before a contract
Name, email, billing details	To process your order and invoice it	Performance of a contract
Order and invoice records	Bookkeeping and tax obligations	Legal obligation
Access to your website, Search Console and Analytics	To carry out the SEO work you ordered	Performance of a contract

We do not see or store your card or bank details. Payments are handled by our payment provider.

Who else sees your data

We share data only with the processors we need to run the business: our hosting provider, our email provider, our payment provider and our accountant. They act on our instructions and are bound by a processing agreement. Where a provider processes data outside the EU, it does so under appropriate safeguards such as the EU standard contractual clauses.

How long we keep it

Invoices and related administration are kept for seven years because Dutch tax law requires it. Other order data is kept for two years after your last order. Messages that do not lead to an order are deleted after one year.

Your rights

You can ask us for a copy of your data, correct it, delete it, restrict or object to its processing, or receive it in a portable format. Where processing is based on consent, you can withdraw that consent at any time. Email joseannemarie@outlook.com and we reply within one month. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).