Your data, our boundaries.

Who we are

BINDZ is an AI-native growth studio based in Akkrum and Barcelona, working with clients worldwide. Questions about your data go to info@bindz.nl. We act as the data controller for the information described on this page.

What we collect

Only what we need to do the work. There are three places data shows up.

From visitors to this site

When you browse bindz.nl we collect basic technical signals: your IP address, the pages you visit, the device and browser you use, and how you got here. This data is aggregated and used to keep the site fast and to understand which pages earn their keep. If you accept analytics in the cookie banner, those signals stay tied to a session identifier; if you decline, they are dropped after the request.

From people who write to us

If you start a brief, send an email, or fill in the contact form, we receive the details you typed and any files you attached. We use that to reply, to scope the work, and to keep a record of the conversation. We keep it until the project ends and for two years after, then we delete it unless we have a contractual reason to hold it longer.

From clients we work with

During a project we may handle business data you share with us: brand assets, customer lists, analytics access, internal documents. The terms in our service agreement govern that data. We treat it as confidential, hold it on encrypted storage, and return or destroy it at the end of the engagement.

Why we keep it

Three reasons, all named.

• To run the service you asked for. Replying to your message, building the work, billing for it, sending you the file at the end.
• To improve the studio. Anonymous, aggregated signals about which pages and projects work, so the next brief lands better.
• To meet our legal obligations. Tax records, contractual disputes, things the law requires us to keep for a defined period.

Who sees it

Inside BINDZ, only the people working on your project. Outside BINDZ, only the operational tools we need to do the work: email, project management, analytics, billing. Each of those tools is a named processor with its own contract and its own security posture, listed below on request. We do not sell or rent your data. We do not share it with advertisers. We do not feed it into public AI models.

Where it lives

Primary storage is in the European Union. A small number of operational tools are based in the United States; for those, transfers are covered by EU-approved Standard Contractual Clauses or the Data Privacy Framework. If you want a list of the specific tools and their locations, ask and we will send it.

How long we keep it

Active project data: for the duration of the engagement plus two years. Tax-relevant records: seven years, as Dutch law requires. Marketing emails: until you unsubscribe, plus a short retention window after that. Analytics signals: thirteen months in aggregate.

Your rights

You can ask us to:

• Show you what we hold on you.
• Correct anything inaccurate.
• Delete data we no longer have a reason to keep.
• Move your data to another provider in a portable format.
• Stop processing it for marketing or analytics.

Send the request to info@bindz.nl. We answer within thirty days, usually faster. If you are not happy with the response, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Security

We use single sign-on, hardware-key two-factor authentication, encrypted laptops, and a small set of vetted SaaS tools. Access to client data is granted by named project, never broadly. We log breaches if they happen and notify affected parties within seventy-two hours.

Changes to this policy

When the policy meaningfully changes, we update the date at the top and post a short note on this page. Material changes also go out by email to active clients before they take effect.

← Back to home