VNLLA Agency
Legal document

Privacy Policy

  • VNLLA Agency B.V.
  • KVK: 95196536
  • Kon. Wilhelminalaan 146, 2274 AN Voorburg, Netherlands
  • grow@vnlla.agency

Last updated: May 2026

VNLLA Agency B.V. is committed to protecting the personal data of everyone who visits our website or engages with our services. This policy explains what data we collect, why we collect it, how we use it, and what your rights are under the General Data Protection Regulation (GDPR).

We are the data controller for all personal data processed in connection with vnlla.agency and our client services.

1

Who we are

VNLLA Agency B.V. is a creative digital agency registered in the Netherlands.

  • Chamber of Commerce (KVK): 95196536
  • Registered address: Kon. Wilhelminalaan 146, 2274 AN Voorburg, Netherlands
  • Data controller contact: grow@vnlla.agency
2

What data we collect

2.1 Website visitors

When you visit vnlla.agency, we may collect the following data automatically:
  • — IP address and approximate location (country/city level)
  • — Browser type, device type, and operating system
  • — Pages visited, time spent on each page, and navigation path
  • — Referring website or search query that brought you to the site
This data is collected via analytics tools (including Google Analytics) and is used in aggregate to understand how our website is used and to improve it. We do not use this data to identify individual visitors.

2.2 Contact form submissions

When you submit an enquiry via our contact form, we collect:
  • — Your name
  • — Your email address
  • — Your company name (if provided)
  • — The content of your message
This data is used solely to respond to your enquiry. It is not added to any marketing list without your explicit consent.

2.3 Email marketing

If you subscribe to communications from VNLLA Agency — whether via a website form, at an event, or by explicit request — we collect your name and email address. You can unsubscribe at any time via the link in any email we send, or by contacting us directly at grow@vnlla.agency.

2.4 Clients and prospective clients

In the course of a business relationship, we may process:
  • — Contact details (name, email, phone number, job title)
  • — Company information and billing details
  • — Project briefs, feedback, and communications
  • — Financial information necessary for invoicing
3

Legal basis for processing

We process personal data on the following legal bases under GDPR Article 6:

  • — Legitimate interests — for analytics, improving our website, and responding to enquiries from prospective clients.
  • — Contractual necessity — for processing data required to deliver our services to clients.
  • — Consent — for email marketing communications. Consent may be withdrawn at any time.
  • — Legal obligation — where we are required to retain records for tax or legal compliance purposes.
4

Cookies

Our website uses cookies. A cookie is a small text file stored on your device by your browser. We use the following categories of cookies:

  • — Strictly necessary cookies — required for the website to function. These cannot be disabled.
  • — Analytics cookies — used to understand how visitors interact with the site (e.g. Google Analytics). These are only placed with your consent.
  • — Marketing cookies — used to track the effectiveness of any advertising campaigns. These are only placed with your consent.

When you first visit the site, you will be presented with a cookie consent banner. You can manage your preferences at any time by clicking the cookie settings link in the footer. We use Cookiebot to manage consent — their privacy policy is available at cookiebot.com.

5

How we use your data

We use the data we collect for the following purposes:

  • To respond to enquiries submitted via the contact form.
  • To deliver agreed services to clients.
  • To send marketing communications to subscribers (with consent).
  • To analyse website usage in aggregate and improve site performance.
  • To comply with legal and financial obligations (e.g. invoice retention).

We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling that produces legal or significant effects on individuals.

6

Data sharing

We share personal data only where necessary and only with the following categories of recipients:

  • Service providers — including our website hosting provider, email platform, CRM, and analytics tools. All processors are contractually bound to handle data in accordance with GDPR.
  • Professional advisors — including our accountant and legal advisors, where required.
  • Competent authorities — where required by law or court order.

Where data is processed by third-party tools, we use providers that are either established within the EU/EEA or that offer GDPR-compliant data processing agreements. Key tools we use include Google Analytics (analytics), Supabase (data storage), and Cookiebot (consent management).

7

Data retention

We retain personal data only for as long as necessary for the purpose for which it was collected:

  • Contact form enquiries — up to 12 months, or until the enquiry is resolved.
  • Client project data — for the duration of the engagement and up to 7 years thereafter, as required by Dutch tax law (Belastingdienst).
  • Marketing subscriber data — until you unsubscribe or withdraw consent.
  • Analytics data — as per Google Analytics default retention settings (up to 14 months for user-level data).
8

Your rights under GDPR

As a data subject, you have the following rights:

  • Right of access — you may request a copy of the personal data we hold about you.
  • Right to rectification — you may request correction of inaccurate or incomplete data.
  • Right to erasure — you may request deletion of your data, subject to our legal retention obligations.
  • Right to restriction — you may request that we restrict processing of your data in certain circumstances.
  • Right to data portability — you may request your data in a structured, machine-readable format.
  • Right to object — you may object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at grow@vnlla.agency. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.

9

Data security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include encrypted data storage, access controls, and secure communication channels.

No method of transmission over the internet is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.

10

Children's data

Our website and services are directed at business professionals and are not intended for individuals under the age of 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

11

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the date at the top of this document and, where appropriate, notify you by email.

Current version: May 2026.

VNLLA Agency B.V. · KVK 95196536 · Kon. Wilhelminalaan 146, 2274 AN Voorburg, Netherlands · grow@vnlla.agency · vnlla.agency