Privacy
Last updated: 15 September 2026
This policy covers enquiries, contact messages, bookings, AI and automation work, software builds, and technical-partner services provided by Niko Lubbe.
Who controls the data
Niko Lubbe is the controller for personal data used to run this website, answer enquiries, and manage his own business records. If I process personal data only on a client's documented instructions, the client is the controller and our written agreement includes the required processor terms before that processing starts. For privacy questions, use the contact form.
Enquiries and contact form
If you email me or submit the contact form, I process your name, email address, optional company name, message, and site language. Please do not include personal, confidential, or sensitive data unless it is needed for the request and you have the right to share it.
Google bookings and Resend
Booking links on this site open a Google booking page. Google processes the details you enter under its own privacy terms and makes the booking details available to me. The contact form is submitted to this website. Resend then processes the contact details and answers as my email delivery provider so the submission reaches my inbox.
Access to client systems and accounts
Technical work may require delegated or administrator access to domains, DNS, email, hosting, vendor accounts, and internal tools. I use that access for the agreed work. Where the provider supports it, a separate user or delegated role is preferable to transferring account ownership. While working, I may see account contacts, user lists, settings, logs, support requests, or business content. We agree what access is needed and when it should be removed.
AI and automation providers
An agreed workflow may send selected data to an AI provider such as OpenAI or Anthropic, or to an automation platform. Before connecting it, we agree what data may be sent and which provider and account will be used. That provider's terms, retention settings, security controls, and processing locations apply. The workflow should limit personal or confidential data and include human review where the risk calls for it.
Why the data is used
I use data to answer enquiries, assess and scope work, schedule calls, deliver projects, configure or support systems, troubleshoot integrations, manage access, send invoices, keep business records, secure the website and services, and meet legal obligations. The legal basis is usually a legitimate interest, steps before a contract, performance of a contract, consent where required, or a legal obligation.
Sharing and retention
Data may be shared with providers needed for email, hosting, bookings, invoicing, documents, AI, automation, or business administration. I keep enquiry and project records only as long as needed for the work, reasonable business records, or legal duties. Data stored in a client-owned account follows the client's settings and retention choices. Some providers may process data outside the Netherlands or the European Economic Area under their own safeguards.
Cookies and analytics
The site may use the necessary INTLAYER_LOCALE cookie and browser language information to keep the English or Dutch version consistent. It is not used for advertising or profiling. No third-party analytics, advertising cookies, remarketing tags, or tracking pixels are currently used on this website.
Your rights and updates
If GDPR applies, you may have the right to access, correct, delete, restrict, object to, or receive a copy of your personal data. Use the contact form to make a request. If the data is held for a client inside the client's system, I may direct your request to that client. You can also complain to your local data protection authority. I may update this policy when the website, services, providers, or law change. The date above shows the latest update.