Last updated: July 2025
1. Who we are
Breakfast, a Dutch-based independent digital consultancy, respects your privacy and processes data in compliance with GDPR/AVG. For questions or requests, reach out via info@breakfastdigital.nl.
2. Data we collect & purposes
- Contact form (name, email, message): directly emailed to us and not stored elsewhere. Legal basis: performance of contract/your enquiry.
- Newsletter opt-in (email only): stored securely until you unsubscribe. Legal basis: consent.
- Analytics data (Google Analytics with IP anonymisation; Hotjar heatmaps): purely aggregated behavioural insights. Legal basis: consent/legitimate interest for service improvement.
- Embedded YouTube: collects analytics per YouTube’s policy. Legal basis: consent where applicable.
3. Cookies & tracking technologies
On first visit, a consent manager allows you to select:
- Functional cookies (essential for site features)
- Analytics cookies (e.g., Google Analytics, Hotjar)
- Third-party cookies from embedded content (YouTube)
Cookie retention durations:
- Google Analytics cookies: typically 2 years (adjustable via consent manager)
- Hotjar cookies: up to 365 days (session or persistent)
- YouTube cookies: according to YouTube policies
4. Data retention
- Contact messages: not stored beyond delivery via email.
- Newsletter list: kept until opt‑out or until dormant after extended inactivity.
- Analytics logs: anonymised and held for up to 25 months, unless longer legitimately required.
5. Third-party processors
We work with service providers, all GDPR-compliant, including:
- Webflow: global CDN hosting (data stored in EU/US under standard contractual clauses)
- Google: analytics
- Hotjar: behaviour tracking
- YouTube: embedded content
6. Legal basis & transparency
Our legal bases for data processing include: consent (analytics, newsletter), contract (responding to contact), and legitimate business interests (site performance analysis). More detail upon request.
7. Your rights
Under GDPR/AVG you have rights to:
- Access, correct, delete, restrict or oppose processing
- Request portability
- Withdraw consent at any time
- Lodge a complaint with the Autoriteit Persoonsgegevens
Contact us at info@breakfastdigital.nl to exercise any rights.
8. Policy updates
We may revise this policy. Updates will be posted here and reflected in the “last updated” date. For major changes, we may notify previous subscribers.
9. European focus / international visitors
While hosted globally, Breakfast applies EU data protection rules to all visitors. Visitors outside the EU may have additional rights depending on local law.
