Privacy Policy – NL Assist

NL Assist provides administrative assistance to individuals living in the Netherlands.

Business name

NL Assist

KVK number

42129958

VAT number

NL005518037B91

Email

info@nl-assist.com

Telephone and WhatsApp

+31 6 2043 3030

Website

https://nl-assist.com

NL Assist is responsible for the personal data described in this Privacy Policy. Contact us at the email address above with questions or privacy requests.

Depending on how you contact us and the service you request, we may process:

• your name and contact details;
• enquiry, appointment and service details;
• messages you send by email, WhatsApp or the website contact form;
• information needed to issue invoices and keep business records required by law;
• information you tell us or show us during an appointment; and
• technical information about your visit to our website, such as your IP address, the pages requested, browser and device details, date and time, security events and cookie preferences.

When you show us a document or screen during an appointment, we may briefly see information needed to assist you. Under our current process, we do not keep copies of supporting documents or service notes.

Contact-form information is stored in the website database and an email notification is sent to NL Assist. The form does not save its contents in cookies or browser local storage.

We normally receive personal data directly from you or from your device and browser when you visit the website.

Please do not send us DigiD usernames or passwords, authentication codes, copies of identity documents, or your BSN. Redact your BSN and any information that is not needed before showing or sharing a document.

You log in to government websites, enter your information, review it and submit it yourself. NL Assist does not ask for, record or retain your DigiD credentials or authentication codes. We do not ask for or retain your BSN.

If you send information we did not request, we will delete it as soon as reasonably possible unless we are legally required to keep it. Please do not send health or other specially protected information unless we have first agreed that it is necessary for the service.

We use personal data for the following purposes:

• To answer enquiries, arrange appointments and provide a requested service. The legal basis is taking steps you request before entering into a contract, or performing our contract with you.
• To issue invoices and maintain legally required business records. The legal basis is compliance with a legal obligation.
• To operate and protect the website, prevent misuse, and handle complaints or legal claims. The legal basis is our legitimate interest in running and protecting the business, where that interest does not override your rights.
• To measure website use through Google Analytics. The legal basis is your consent. Google Analytics is loaded only after you consent. You can withdraw consent through the website’s cookie preferences.

You can object to processing based on our legitimate interests. The conditions and limits in the GDPR apply to privacy rights.

We do not sell personal data or share it for marketing. Depending on how you contact us or use the website, the following providers may receive or process relevant information:

• Apple/iCloud Mail, for email communications;
• Cloudflare, for website delivery, DNS and security;
• Meta/WhatsApp, when you contact us through WhatsApp; and
• Google, for website analytics, but only after you consent.

Lovable hosts the website backend and database and processes contact-form submissions. The managed email service sends a notification to NL Assist.

We may also disclose information when required by law or when you ask us to share specific information as part of an agreed service.

Some providers may process information outside the European Economic Area (EEA), including in the United States. Where a transfer requires safeguards under the GDPR, we rely on an applicable legal transfer mechanism, such as an adequacy decision or Standard Contractual Clauses.

You can contact us to request further information about the safeguards that apply. Provider information is available from Apple, Cloudflare, WhatsApp and Google.

We keep personal data only as long as necessary for the purpose for which it was collected or as required by law:

• Enquiries that do not lead to a service: up to 12 months after your last contact.
• Appointment and service communications: up to 12 months after the appointment or the end of the service.
• Invoices and accounting records: 7 years, or longer where the law requires it.
• Documents or information sent by mistake: deleted as soon as reasonably possible, unless we are legally required to keep them.
• Website security information: kept only for as long as needed to protect the website, investigate misuse or meet a legal obligation, subject to the relevant provider’s service settings.
• Google Analytics event and user-level data: retained for 2 months. Aggregated reports may be retained separately under Google’s product settings.

We may keep limited information for longer where necessary to establish, exercise or defend legal claims.

Our website uses essential cookies or similar technologies for website functions, such as remembering your language and cookie preferences.

Google Analytics is loaded only after you actively consent. The website is configured to block Google Analytics before consent; if you reject analytics, Google Analytics does not load and analytics data is not sent to Google. We do not currently use marketing cookies.

You can change or withdraw your choice using the Cookie preferences link in the website footer. For more information, please see our Cookie Policy.

Subject to the conditions in the GDPR, you may ask us to:

• give you access to your personal data;
• correct inaccurate data;
• delete data or restrict how we use it;
• stop processing where you have the right to object;
• provide data you supplied in a portable format where that right applies; or
• stop relying on your consent for a particular use.

Withdrawing consent does not affect processing that took place lawfully before you withdrew it.

Contact info@nl-assist.com to make a request. We may ask you to verify your identity. We normally respond within one month. If a request is complex, the GDPR allows an extension; we will tell you within the first month if an extension is needed.

You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Providing contact and service information is voluntary. However, we may be unable to answer your enquiry, arrange an appointment or provide the requested service if you do not provide information needed for that purpose.

Where information is required by law for invoicing or business records, we must keep that information to meet our legal obligations. Consent to Google Analytics is optional; refusing it does not affect your use of the website or our services.

NL Assist does not make decisions about you using solely automated processing that produce legal or similarly significant effects.

We may update this Privacy Policy when our services or data practices change. The current version and its update date will be published on our website.