Privacy Policy
This policy explains how NetherForm Group handles the personal data that reaches us through this website, its forms and the work we do for clients, and how you can use your rights over it.
Who is responsible for your data
NetherForm Group is the controller of the personal data described in this policy: we decide why it is processed and how. You can reach us about your data at our Amsterdam office, by email or by phone, using the details below. What this site stores on your device, and the banner where you make that choice, are explained in our Cookie Policy.
- Company
- NetherForm Group
- Address
- Keizersgracht 456, 1017 CD Amsterdam, Netherlands
- Telephone
- +31 20 987 6543
What we collect, why, and on what basis
Each row is one thing you can do on this site, or one way we work for you: what reaches us, why we need it, and the legal ground we rely on under the EU General Data Protection Regulation.
What reaches us, activity by activity, and the ground we rely on for each.
| Activity | What we receive | Why | Legal basis |
|---|---|---|---|
| Visiting the site | The request data every website receives: your IP address, your browser and the page asked for. There is no account and no login. | Cloudflare delivers the site and protects it against attacks and abuse. | Our legitimate interest in a secure, working site |
| Analytics, only after you accept | How the site is used: pages viewed, clicks, scrolling and device type. Microsoft Clarity masks anything typed into a form. Before you answer the banner, the Google tag sends only cookieless pings. | Google Analytics 4 and Microsoft Clarity show us which pages help visitors; Ahrefs Web Analytics counts visits without cookies. | Your consent for Google Analytics 4 and Clarity, which you can withdraw in the cookie settings; our legitimate interest for Ahrefs |
| Writing to us through a form (the contact form, the enquiry form on the home page, a ready-made company request) | Your name, email, your phone number if you give it, the topic you choose and your message, plus the visit context described in the next section | To answer your enquiry and, if you ask, prepare a proposal | Steps taken at your request before a contract; our legitimate interest for the visit context |
| Starting an engagement through the onboarding form | Your contact details and country of residence; the planned company (form, proposed names, activity, capital, number of shareholders and directors); the services you choose, your timeline, the source-of-funds acknowledgement and your message | To scope the work and prepare the engagement | Steps taken at your request before a contract |
| Paying an invoice through the payment page | The invoice number, the payer's name and email, the amount, the currency and the payment method chosen | To match your payment request to your invoice | Performing our contract with you |
| Working for you as a client | Engagement records, correspondence and invoices; where the law requires it, identity and source-of-funds checks | To carry out the work and keep the records the law requires | Performing the contract; a legal obligation for tax records and for checks under the Wwft |
The onboarding form takes no files. Identity documents are asked for only after first contact, through a channel named in our message to you. The payment page does not take payments while card and crypto payments are not live: your payment request reaches us by email and nothing is charged on this site. The Wwft is the Dutch act on preventing money laundering and terrorist financing; where it requires us to identify a client and check the source of funds, those checks and their records rest on that legal obligation. Google receives a request from your browser only if you press the map button on our contact page.
Context sent with every form
With every form on this site (the contact form, the enquiry form on the home page, a ready-made company request, the onboarding form and the payment page), the site sends us, alongside what you typed, the technical context of your visit:
- the IP address of your connection;
- an approximate, city-level location derived from that address by the network, never your device's own position;
- the network: your internet provider or network operator;
- your browser, its version and your operating system;
- the language your browser asks for;
- the referring page: the page or search you came from;
- your path through the site: the pages viewed before you wrote, and your visit number;
- the time on page before you sent the form;
- your device type, screen size and window (viewport) size;
- whether cookies are present, your cookie-consent state and, if you accepted analytics, the analytics id (the Google Analytics client id).
We use this context because we have a legitimate interest in answering your enquiry well and in telling real enquiries from spam.
Cookie contents are never sent. The form reports only whether cookies are present or absent.
The stored parts of your visit (your first visit, your visit number and the pages before this one) are kept on your device only after you accept analytics. Without that consent, the context covers the sending page alone.
We keep this context with the enquiry email it arrives in, and for as long as we keep that email.
Who receives your data
These providers receive personal data from us, or from your browser, to run the site and deliver what you send.
The providers that receive personal data, their role, and the moment they receive it.
| Recipient | What it does for us | When it receives data |
|---|---|---|
| Cloudflare | Hosts and protects the site; runs the Turnstile check that tells people from bots on pages with a form; keeps a short-lived counter that limits repeated sending; holds a copy of an enquiry whose delivery failed | On every visit, and with every form you send |
| Resend | Delivers the emails our forms send to our mailbox | When you send a form |
| The provider of our mailbox | Hosts the mailbox where form emails and your emails to us arrive | When you send a form or write to us |
| Google Analytics 4 measures how the site is used; Google Maps shows our office on the contact page | Analytics: cookieless pings before you answer the banner, full measurement only after you accept. Maps: only when you press the map button | |
| Microsoft | Microsoft Clarity shows how pages are used, with anything typed into a form masked | Only after you accept analytics |
| Ahrefs | Ahrefs Web Analytics counts visits without cookies | On every visit |
We do not sell your data, we send no newsletter, and nothing you send us is passed to a messaging app.
Where a provider processes data outside the European Economic Area, the transfer relies on the safeguards in that provider's data processing terms.
How long we keep it
We keep each kind of data only as long as its purpose, or the law, requires:
- Enquiries that do not lead to an engagement: for as long as we need them to answer you and follow up on what you asked, and no longer; we delete them sooner if you ask.
- The visit context sent with a form: with the enquiry email it arrives in, and for as long as that email.
- The sending counter and undelivered enquiries: the counter that limits repeated sending expires on its own after a short time; an enquiry held because its delivery failed is deleted automatically once the holding period ends.
- Analytics data: for the period set in Google Analytics 4 and Microsoft Clarity, after which those tools delete it.
- Invoices and the records behind them: seven years, the period Dutch tax law sets for business records (article 52 of the Algemene wet inzake rijksbelastingen, the General State Taxes Act).
- Identity and source-of-funds checks under the Wwft: for the period that act sets.
Your rights and changes to this policy
Your rights
You have the right to see the personal data we hold about you, to have it corrected and to have it deleted. You can ask us to restrict how we use it, object to any use based on our legitimate interest, and receive the data you gave us in a structured, machine-readable format to pass on to someone else. Where we rely on your consent, you can withdraw it at any time; withdrawing it does not affect what was done before. For analytics, you withdraw it in the cookie settings linked in the footer of every page.
How to use them
Write to us at info@company-formation-in-netherlands.com and tell us which right you want to use. We may ask you to confirm who you are before we act, so that your data never goes to someone else.
Complaints
If you think we have handled your data wrongly, you can complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens (Dutch Data Protection Authority), or to the data protection authority of the country where you live. You are welcome to raise it with us first, but you do not have to.
Changes to this policy
We change this policy when the tools this site uses or the services we offer change. The "Last updated" date at the top of the page moves with every change, so you can see at a glance whether anything is new since your last visit.