Privacy Policy — TouchPoint Studio

Controller TouchPoint Studio KVK 98246356 Location Blaricum, The Netherlands Contact richard@touchpointstudio.nl Effective April 2026 | Version 1.0

This Privacy Policy explains how TouchPoint Studio collects, uses and protects personal data in connection with its website and client services. We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch data protection law.

1. What Data We Collect

We collect personal data in two ways:

Via the contact form on our website:

First and last name
Company, role or organisation type
Email address
Project details and any other information you voluntarily share

Via client projects and agreements:

Contact details of client representatives (name, email, phone, job title)
Business information required to issue quotations and invoices
Communication records related to project delivery

2. Why We Collect It

To respond to enquiries submitted via our contact form
To prepare and issue quotations and project proposals
To deliver agreed services, including hardware rental and software development
To issue invoices and manage payments
To maintain ongoing client relationships and project communication
To comply with legal obligations, including tax and accounting requirements

Our legal basis for processing is contract performance (Article 6(1)(b) GDPR) for client-related data, and legitimate interest (Article 6(1)(f) GDPR) for website enquiries. We do not process your data for marketing purposes without your explicit consent.

3. How Long We Keep It

Contact form data: up to 12 months, or until your enquiry is resolved and no ongoing relationship has formed.
Client project data: 7 years to comply with Dutch tax and accounting obligations.
Communication records: duration of the client relationship plus 3 years.

After the applicable retention period, data is securely deleted or anonymised.

4. Who We Share It With

We do not sell or share your personal data with third parties for marketing purposes. We may share data with:

Netlify — our website and contact form are hosted via Netlify, which processes form submissions on our behalf as a data processor under GDPR.
Our accountant or legal advisors — where required to fulfil legal or financial obligations.
Authorities — where required by law.

Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place in accordance with GDPR.

5. Your Rights

Under GDPR, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data, where no legal retention obligation applies
Object to or restrict processing in certain circumstances
Request a portable copy of your data

To exercise any of these rights, contact us at richard@touchpointstudio.nl. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch data protection authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

6. Cookies and Analytics

Our website is a static HTML site hosted on Netlify. We do not currently use tracking cookies, advertising scripts or third-party analytics tools. If this changes, this Policy will be updated and visitors will be informed.

7. Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse or unauthorised access. Our website runs over HTTPS. Access to client data is restricted to authorised personnel only.

8. Contact and Updates

For any questions about this Privacy Policy or how we handle your data:

Richard Spuij
TouchPoint Studio
richard@touchpointstudio.nl
touchpointstudio.nl

We may update this Policy from time to time. The current version is always available at this URL. Material changes will be communicated via our website.