Last updated: 9 April 2026.

Privacy policy

This policy explains how Digital Customer Care Company BV (“we”, “us”) processes personal data when you use our website, contact us, or engage us as a client. We process personal data in line with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Dutch law.

See also our terms of service (summary page).

Who we are

The controller responsible for personal data relating to this website and general business enquiries is:

Digital Customer Care Company BV

Willem Fenengastraat 16E, 1096 BN Amsterdam, The Netherlands

KvK (Chamber of Commerce): 70303363 · VAT (BTW): NL858247719B01

When we deliver outsourced customer service or technical support under a contract with your organisation, we typically act as a processor on your instructions; your organisation is usually the controller for end-customer or user data. The details are set out in our data processing agreement with you.

Personal data we process

Depending on how you interact with us, we may process:

  • Website: technical and usage data (such as IP address, browser type, pages visited, and timestamps) collected through server logs and similar tools.
  • Contact and sales: name, work email address, telephone number, company name, and the content of your message when you email us, submit the website contact form (processed on our server and delivered to our inbox via our transactional email provider), use the website chat widget (provided by a third-party service that processes message content and technical session data according to its own terms), or otherwise get in touch.
  • Clients and suppliers: business contact details, contract and billing information, and communications relating to the services we provide or receive.
  • Recruitment: data you submit when you apply for a role with us, such as your CV and cover letter.

We do not use automated decision-making that produces legal or similarly significant effects concerning you.

Purposes and legal bases

We process personal data only where we have a valid legal basis under the GDPR:

  • To operate and secure our website and to analyse aggregate traffic (legitimate interests in a secure, reliable online presence; where required, consent for non-essential cookies — see below).
  • To respond to enquiries and manage our relationship with prospects and clients (performance of a contract, pre-contractual steps, or legitimate interests in developing our business).
  • To perform our contractual services, invoicing, and account management (performance of a contract and legal obligations).
  • To comply with legal obligations (such as tax and accounting retention rules).
  • To establish, exercise, or defend legal claims where necessary (legitimate interests or legal obligation).

Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

Cookies and similar technologies

Our website may use cookies or similar technologies that are strictly necessary for the site to function. If we use optional analytics or marketing cookies, we will only activate them where permitted by law and, where required, on the basis of your consent. You can control cookie preferences through your browser settings and, where we provide a cookie banner or preference centre, through that tool.

Recipients and subprocessors

We share personal data only with employees and service providers who need it to perform their tasks. This may include hosting and infrastructure providers, email and productivity tools, CRM systems, and professional advisers, bound by confidentiality and data processing terms where applicable.

We do not sell your personal data.

International transfers

Our primary operations and hosting are in the European Economic Area. If we transfer personal data outside the EEA, we ensure appropriate safeguards under the GDPR (such as Standard Contractual Clauses or adequacy decisions), unless an exception applies.

Retention

We retain personal data only for as long as necessary for the purposes described above, including to meet legal, accounting, or reporting requirements. Retention periods vary by category (for example, contract and finance records may be kept longer than a one-off website enquiry). When data is no longer needed, we delete or anonymise it securely.

Your rights

Under the GDPR, you may have the right to:

  • Access your personal data and receive a copy in a structured, commonly used format where applicable (data portability, where the conditions are met).
  • Rectify inaccurate data or complete incomplete data.
  • Erase data in certain circumstances (“right to be forgotten”).
  • Restrict processing in certain circumstances.
  • Object to processing based on legitimate interests or for direct marketing.
  • Withdraw consent where processing is consent-based.

You may exercise these rights by contacting us via our contact page. We may need to verify your identity before responding. You also have the right to lodge a complaint with a supervisory authority. In the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens (www.autoriteitpersoonsgegevens.nl).

Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction, in line with the nature of the processing and industry practice.

Changes to this policy

We may update this privacy policy from time to time. The “Last updated” date at the top of this page will change when we do. We encourage you to review this page periodically.

Questions about privacy?

If you have questions about how we handle personal data, or wish to exercise your rights, contact us — we will respond in a straightforward way.