Privacy policy

Last updated: 16 December 2025

This Privacy Policy explains how Northhaven Studio ("we", "us", or "our") collects, uses, and protects personal data when you visit or interact with this website (the "Website"). It has been drafted to align with the General Data Protection Regulation (GDPR), and Dutch data protection requirements and our Cookie Policy.



1. Who we are

This website is operated by:

  • NorthHaven Studio
  • Legal form: eenmanszaak / sole proprietorship
  • Registered with the Dutch Chamber of Commerce (KVK)
  • KVK number: 99279339
  • VAT number: NL005378599B47
  • Country of establishment: The Netherlands

Northhaven Studio is the data controller for the processing of personal data as described in this Privacy Policy.


2. Personal data we collect

We only collect personal data that is necessary for legitimate business purposes. Depending on how you interact with the Website, this may include:

  • Name and contact details (such as email address)
  • Information you provide via contact or inquiry forms
  • Communication content (emails or messages you send to us)
  • Technical data (IP address, browser type, device information)
  • Usage data (pages visited, interactions, referral sources)

We do not knowingly collect personal data from children under the age of 16.



3. How we collect personal data

Personal data is collected when you:

  • Contact us via the Website
  • Submit a business inquiry or contact form
  • Communicate with us by email
  • Visit the Website and consent to analytics cookies

We use Tally Forms to collect business inquiries and contact requests. When you submit a form, you voluntarily provide personal data such as your name, email address, and the content of your message.

Some data is collected automatically through cookies and similar technologies, as explained in our Cookie Policy.


4. Purposes and legal bases

We process personal data only where permitted under the GDPR, based on the following legal grounds:


Website operation and security


To ensure the Website functions properly and securely.

Legal basis: Legitimate interest (Article 6(1)(f) GDPR)


Communication and inquiries

To respond to messages, inquiries, or requests you send to us.

Legal basis: Performance of a contract or pre-contractual steps (Article 6(1)(b) GDPR)


Analytics and website improvement

To analyse how visitors use the Website and improve its performance and design. This processing only takes place if you have given consent via the cookie banner.

Legal basis: Consent (Article 6(1)(a) GDPR)


Legal and administrative obligations


To comply with legal obligations, such as tax or administrative requirements.

Legal basis: Legal obligation (Article 6(1)(c) GDPR)


Integration with future tools

We may use third-party tools such as email marketing platforms, CRM systems, Notion, payment processors (like Stripe), and similar services to manage our business operations and communications.

You will be informed of any data collected by these tools and its purpose.

Data will only be processed in accordance with GDPR principles.

Where these tools are located outside the EEA, we will ensure appropriate safeguards (such as Standard Contractual Clauses) are in place.

Consent will be requested where required before processing any non-essential personal data.



5. Cookies and similar technologies

We use cookies and similar technologies in accordance with applicable law. Essential cookies are always active, while analytics and other non-essential cookies are used only with your consent.

For detailed information about the cookies we use and how to manage your preferences, please refer to our Cookie Policy.



6. Google Analytics

With your consent, we use Google Analytics (GA4), a web analytics service provided by Google LLC, to understand how visitors interact with the Website.

We have configured Google Analytics as follows:

  • IP anonymisation is enabled
  • Analytics data is used solely for statistical purposes
  • Data is not shared with other Google services
  • Google Analytics is activated only after consent

Data collected via Google Analytics may be transferred to servers outside the European Economic Area (EEA), including the United States. Where such transfers occur, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission.


7. Use of Tally forms

We use Tally (provided by Tally BV, Belgium) to collect business inquiries and other contact requests through forms on this Website.

When you submit a Tally form, the following personal data may be collected:

  • Name
  • Email address
  • Message or inquiry details
  • Any other information you choose to provide


NorthHaven Studio acts as the data controller, determining the purpose and means of processing your personal data. Tally BV acts as a data processor, processing form submissions on our behalf.

Personal data submitted via Tally forms is processed for the purpose of responding to your inquiry or taking steps prior to entering into a contract.

Legal basis: Performance of pre-contractual steps (Article 6(1)(b) GDPR). Where applicable, processing may also be based on your consent (Article 6(1)(a) GDPR).


According to Tally:

  • Data is encrypted in transit and at rest
  • Data is stored on servers located within the European Union
  • Form responses can be deleted by us at any time
  • Deleted data is removed from backups within a limited retention period

For more information about how Tally processes personal data, please refer to their Privacy Policy.



8. Data retention

We do not retain personal data longer than necessary for the purposes for which it was collected.

Retention periods vary depending on the type of data:

  • Contact and communication data is retained as long as necessary to handle inquiries
  • Analytics data is retained in accordance with Google Analytics settings
  • Legal or administrative data is retained as required by law
  • Data stored in third-party tools (CRM, email marketing, Notion, Stripe, etc.) is retained only for the necessary period to perform their intended functions or as required by law.



9. Sharing personal data with third parties

We only share personal data with third parties where necessary for the operation of the Website, our services, or business processes, and only under appropriate safeguards.

This may include:

  • Hosting and website service providers
  • Analytics providers (such as Google)
  • CRM, email marketing, project management, and payment processing tools
  • Professional advisors where legally required

We do not sell personal data.



10. International data transfers

Some service providers may process personal data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.



11. Your rights under the GDPR

You have the following rights regarding your personal data:

  • Right to access
  • Right to rectification
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time

You can exercise these rights by contacting us using the details provided below.



12. Security measures

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, or disclosure.



11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. Updates will be posted on this page with a revised "Last updated" date.



12. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

  • contact@northhavenstudio.com