Privacy Policy

1. Who we are

This Privacy Policy explains how WebConsults.tech (“WebConsults”, “we”, “us”) handles personal data when you visit webconsults.tech, contact us or use our services. WebConsults.tech is a web design and digital marketing agency based in Curaçao.

We are the controller (verantwoordelijke) for the personal data described in this policy. You can reach us at info@webconsults.tech or through our contact form.

2. Which privacy laws apply

Because we are based in Curaçao, we comply with the Landsverordening bescherming persoonsgegevens (LBP, Curaçao's National Ordinance on the Protection of Personal Data, P.B. 2010, no. 84).

When we offer our services to people and businesses in the Netherlands or elsewhere in the European Union, we also comply with the General Data Protection Regulation (GDPR — in Dutch the Algemene verordening gegevensbescherming, AVG) and the Dutch GDPR Implementation Act (Uitvoeringswet AVG). Where these rules differ, we follow the one that gives you the most protection.

3. What personal data we collect

• When you contact us (through our contact form or by email): your name, email address, phone number (optional), the service you're interested in, your message and the page you sent the form from. We do not store your IP address with form submissions.
• When you become a client: contact and billing details, company details (such as company name, address, Chamber of Commerce and tax numbers), project communication, and the content and materials you provide for your website or campaigns. If you give us access to accounts (for example hosting, domain or Google Business Profile), we only use that access to do the work you asked for.
• When you visit our website: our hosting provider automatically processes technical data in server logs — such as your IP address, browser type, device, the pages you request and the date and time — to deliver the website and keep it secure.

We don't ask for sensitive data (such as health information or ID numbers). Please don't send it to us through the contact form.

4. Why we use your data and our legal basis

• To answer your enquiry and send you a proposal — because you asked us to (steps before entering into a contract; GDPR art. 6(1)(b)).
• To deliver our services — designing, building, hosting, maintaining and marketing your website, and invoicing for that work (performance of a contract; art. 6(1)(b)).
• To meet our legal obligations — such as keeping tax and bookkeeping records (legal obligation; art. 6(1)(c)).
• To keep our website and systems secure — preventing spam, abuse and technical problems (our legitimate interest; art. 6(1)(f)).

The LBP allows processing on comparable grounds. We do not sell or rent your personal data, and we do not use it for automated decision-making or profiling.

5. Cookies

Our website does not use analytics, advertising or tracking cookies, and we don't load third-party trackers, social media widgets or externally hosted fonts. That's why you won't see a cookie banner on our site.

Only strictly necessary cookies may be used — for example to keep our own administrators signed in to WordPress. Under Dutch law (article 11.7a of the Telecommunicatiewet) these do not require consent. If we ever add analytics or marketing cookies, we will ask for your consent first and update this policy. See our Cookie Policy for details.

6. Who we share your data with

We only share personal data with service providers that help us run our business, and only as far as needed:

• Hostinger — website hosting, content delivery and our business email.
• Google (Gmail) — we receive contact-form notifications and emails in a Google mailbox.
• Platforms you ask us to use for your project — for example domain registrars, payment providers, Google Ads or Meta, under their own terms.
• Accountants, legal advisers and authorities — when this is necessary or required by law.

Service providers that process data on our behalf may only use it to provide their services to us and must keep it secure and confidential.

7. International transfers

We are based in Curaçao, which is outside the European Union, and some of our service providers (such as our hosting and email providers) store data in the United States. When personal data from the EU is transferred to a country without an EU adequacy decision, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses or, for US companies certified under it, the EU-U.S. Data Privacy Framework.

8. How long we keep your data

• Enquiries that don't lead to a project: up to 12 months after our last contact.
• Client data: for as long as we work together, and afterwards only as long as needed for follow-up questions or support.
• Invoices and administrative records: for the period required by tax and bookkeeping laws (up to 10 years).
• Server logs: for a limited period set by our hosting provider, used only for security and troubleshooting.

9. How we protect your data

We take appropriate technical and organisational measures to protect your data, including HTTPS encryption across our website, keeping WordPress and its plugins up to date, limiting access to personal data to people who need it, and regular backups. If a data breach occurs that poses a risk to you, we will inform you and the competent supervisory authority where the law requires this.

10. Your rights

Under the GDPR and the LBP you have the right to:

• access the personal data we hold about you;
• correct or complete data that is wrong or incomplete;
• have your data deleted or blocked;
• restrict or object to certain processing, including processing based on our legitimate interest;
• data portability — receive the data you gave us in a commonly used format (GDPR);
• withdraw your consent at any time, where we rely on consent.

To use any of these rights, email info@webconsults.tech. We may ask you to confirm your identity. We'll respond within one month (four weeks), free of charge.

11. Complaints

If you're unhappy with how we handle your data, please contact us first — we'd like to put it right. You also have the right to file a complaint with a supervisory authority:

• Netherlands: the Autoriteit Persoonsgegevens — autoriteitpersoonsgegevens.nl
• Curaçao: the College bescherming persoonsgegevens, the supervisory authority established under the LBP
• Elsewhere in the EU: the data protection authority in your country

12. Websites we build for clients

When we build, host or maintain a website for a client, the client is the controller of the personal data of their own visitors and customers, and we act as a processor on their behalf, following their instructions. We can provide a data processing agreement (verwerkersovereenkomst) on request.

13. Children

Our services are aimed at businesses. We do not knowingly collect personal data from children under 16, the age of digital consent in the Netherlands.

14. Links to other websites

Our website links to other websites, such as our social media pages. We are not responsible for how those websites handle your data — please read their privacy policies.

15. Changes to this policy

We may update this Privacy Policy when our services or the law change. The date at the top of this page shows when it was last updated. This version is dated 19 October 2026.

16. Contact

Questions about this policy or your personal data? Email info@webconsults.tech or use our contact form.