Privacy Policy
Last updated: 10 November 2026
1. Who I am
This website (noahalniema.com) is operated by [to be completed] ([to be completed]), registered with the Dutch Chamber of Commerce (KvK) under number [to be completed], located at [to be completed], the Netherlands ("I", "me"). I am the controller for the personal data described in this policy. For any privacy question or request, email noahniema@gmail.com.
2. What I process, why, on what legal basis, and for how long
| Data | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Contact and strategy-call requests — name, work email, company, services you're interested in, your message | To answer your question and, if you want, prepare a proposal | Art. 6(1)(b) steps at your request before a contract; Art. 6(1)(f) legitimate interest in replying to business enquiries | 12 months after our last contact, unless we start working together |
| Agent Vault access requests and purchases — name, company, work email, chosen agent and tier, VAT number, billing details, payment status | To deliver access, invoice and provide support | Art. 6(1)(b) performance of a contract; Art. 6(1)(c) legal obligation (accounting and tax) | For the duration of the contract; invoices and accounting records 7 years (Dutch fiscal retention obligation) |
| Analytics, only with your consent — pseudonymous online identifiers, pages visited, approximate location (country/city), device and browser information | To understand how the website is used and improve it | Art. 6(1)(a) consent — you can withdraw at any time | Google Analytics event data: 2 months; analytics cookies: max. 13 months |
| Technical and security data — IP address, browser type, date and time of requests (server logs of the hosting provider) | To deliver the website securely and prevent abuse | Art. 6(1)(f) legitimate interest in a secure website | Short-term, according to the hosting provider's log retention |
| Your cookie choices — consent status, date and version | To remember and be able to demonstrate your choice | Art. 6(1)(c) and (f) | 12 months, after which I ask again |
Payment card details are handled entirely by Stripe. I never see or store your full card number.
3. Who receives your data
I work with carefully selected service providers that process personal data on my behalf under a data processing agreement:
- Lovable — website platform and hosting
- My own automation server (n8n), hosted by Webdock in Denmark (EU) — receives and stores contact and access requests
- Telegram — an internal notification that a new request arrived; it contains no name, e-mail address or message
- Google Ireland Limited — Google Analytics (only with your consent) and Google Search Console (aggregated search statistics, no cookies)
- Stripe Payments Europe, Ltd. (Ireland) — payment processing. For some processing, such as fraud prevention, Stripe acts as an independent controller; see stripe.com/privacy.
I do not sell your data and I do not share it with others for their own marketing purposes.
4. Transfers outside the EU
Some providers, or their sub-processors, are based in the United States. Where personal data is transferred outside the European Economic Area, this is based on the EU-U.S. Data Privacy Framework (for certified companies) and/or the European Commission's Standard Contractual Clauses, together with appropriate additional safeguards.
5. Use of AI tools
I may use AI-based tools, acting as my processors, to summarise or route your enquiry so I can reply faster. No decisions with legal or similarly significant effects are made about you solely by automated means.
6. Cookies
I only place analytics cookies after you give consent. Read the Cookie Policy or change your choice via in the footer.
7. Security
I protect your data with appropriate technical and organisational measures, including encrypted connections (HTTPS), multi-factor authentication and access limited to me and the processors listed above.
8. Your rights
You have the right to access, rectify and erase your personal data, to restrict or object to its processing (including processing based on legitimate interest), and to data portability. Where processing is based on consent, you can withdraw it at any time; this does not affect processing that took place before. Send your request to noahniema@gmail.com. I respond within one month and may ask you to verify your identity.
You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). I'd appreciate the chance to resolve your concern first.
9. Do you have to provide data?
No. Providing your details is voluntary, but without contact details I can't reply to your enquiry or deliver a purchase.
10. Changes
I may update this policy. The latest version is always on this page, with the date it was last updated.