Privacy Policy

iamfredperry B.V., registered with the Dutch Chamber of Commerce (KvK) under number 42100151 (branch number 000066038693), is the data controller for this website and for the accounts we give clients, prospective clients and the firms we work with (such as our accountants). As a Netherlands-based company working with clients in both the Netherlands and the United Kingdom, we handle personal data in line with the EU General Data Protection Regulation (GDPR) and, for UK-based clients, the UK GDPR and Data Protection Act 2018.

What We Collect

Contact Form

When you submit the contact form, we collect the name, company name, email address and message you give us and, if you choose to share them, your phone number, team size and the service you are interested in. We use this only to reply to your enquiry.

Your Account

If we work together, are discussing a project, or you work with us as a firm (for example our accountants), we may give you an account. To provide it, we hold:

• The account’s business details: its name, email address, phone number, website, business address, company type and registration number (such as a KvK number).
• For each person we give access to: their name, their email address (their login) and a securely hashed password. One person can have access to more than one account with the same email address and password.
• The quotes, contracts and invoices we exchange, including project descriptions, pricing, payment schedules and dates.
• Documents we share with the account, such as letters, statements or official papers we send to our accountants. These documents can themselves contain personal data.
• A record of activity on the account, with the date and time and the person it was: signing in, setting up an account or resetting a password, opening a quote, contract or document, opening an invoice’s payment link, and accepting or declining a quote or signing a contract.

If you accept or decline a quote, or sign a contract, in your account, we also record the date and time, the IP address and device or browser it was done from and, for an acceptance, the exact wording of the agreement you consented to. We keep this only as evidence that a valid agreement was reached, in case it is ever needed. See our Terms for how this supports a binding electronic acceptance.

How We Use It

We use this data to reply to enquiries, to prepare and manage quotes, contracts and invoices, to share documents with the people who need them, to run and secure your account, and to keep the financial and accounting records we are legally required to keep. The activity record lets us see that a document, quote or invoice has been seen, and by whom, so we know when to follow up. We do not sell your data, and we do not use it for marketing without your separate consent.

Our Legal Basis

We rely on: performance of a contract, to manage an engagement and your account; legal obligation, to keep financial and accounting records for the period Dutch law requires; and legitimate interest, for account security (such as limiting failed sign-ins), for the activity record, and for keeping evidence of quote acceptances and signed contracts so an agreement can be defended if disputed. Where none of these apply, we rely on your consent, which you can withdraw at any time.

How Long We Keep It

Contact form enquiries are kept only as long as needed to handle the conversation. Account, quote, contract and invoice records are kept for as long as we work together, and afterwards for as long as Dutch law requires us to keep financial and administrative records (generally seven years). A person’s access is removed when they no longer need it, and they are signed out straight away. Shared documents stay visible in an account until we stop sharing them. The activity record is kept for as long as the account is active, except where it forms part of the evidence for an agreement. Sign-in and security logs are kept only briefly, to prevent fraud.

Security

Every person has their own login. Passwords are stored using industry-standard one-way hashing, so we cannot see or recover your actual password. Repeated failed sign-ins are automatically limited, removing someone’s access signs them out at once, and all traffic to this site and your account is encrypted (HTTPS). Our own access to these records is protected with two-factor authentication.

Third Parties

Invoices may include a payment link hosted by Revolut. If you use it, Revolut processes that payment directly and we do not see or store your card or bank details. When we add a document to our records, we may use Anthropic’s Claude service to read it and fill in its details, and Google Cloud Translation to make an English copy of a document in another language. Both process the document only to do that, under business terms that do not allow them to use it to train their models. Our website host stores the underlying files and database on our behalf. Each of these acts strictly as a processor, on our instructions.

Your Rights

You can ask to see, correct or delete the personal data we hold about you, object to or restrict certain processing, and ask for a copy of your data in a portable format, by contacting us through the contact form. If you are not satisfied with our reply, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or, if you are based in the UK, the Information Commissioner’s Office (ICO).

Cookies

The public pages of this website do not use tracking or analytics cookies. A small entry in local storage remembers that you have closed the cookie notice, and if you switch between English and Dutch, that choice is remembered in one small, strictly necessary cookie (site_lang) so the site opens in the right language next time. Neither is used for tracking or analytics. Your account uses one strictly necessary session cookie to keep you signed in while you use it, and if you tick “Stay signed in for 7 days” when signing in, one more (crm_remember) keeps you signed in on that device for up to 7 days. It holds only a random token and is deleted when you sign out. For that reason all of these are exempt from cookie consent requirements. If this ever changes, for example if analytics is added, this page will be updated.