Privacy Policy

Privacy & Data Protection Policy

Welcome to KOAT AGENCY. We value your privacy and are committed to protecting your personal data. This privacy policy explains what data we collect, why we collect it, how we use it, and how we keep it safe.


Who We Are

Our website address is: https://www.koatagency.com

KOAT AGENCY is a creative and digital marketing agency based in the Netherlands.
Owner: Ravi Keijzer
Address: Zandwilg 24D, 1731 LS, Winkel, The Netherlands
Email: info@koatagency.com
Phone: +31 (0)6 981954132


What Personal Data We Collect and Why We Collect It

We collect different types of personal data depending on how you interact with our website or services:

  • Contact information: name, email address, phone number (e.g. when submitting contact forms or requesting quotes)
  • Usage data: IP address, browser type, pages visited, time of visit
  • Transaction data: for invoicing or payments related to our services
  • Marketing preferences: when you subscribe to our newsletter or campaigns
  • Cookies: for site functionality, analytics, and personalization

We process this data based on legitimate interest, performance of a contract, or with your explicit consent.


Comments

Currently, users cannot post comments on our website. If this changes in the future, we will update this section accordingly.


Media

Visitors cannot upload media files to our website. If media uploads are enabled in the future, files may be publicly accessible unless otherwise stated.


Contact Forms

When you submit a contact form on our website, we collect your name, email address, and message. This data is stored for up to 6 months and is used solely for customer service and project-related communication.


Cookies

We use cookies for the following purposes:

  • To remember your preferences
  • To track anonymous analytics data (via Google Analytics)
  • To enable social media features (e.g., embedded Instagram content)

You can manage cookie settings through your browser. For more details, see our cookie statement.


Analytics

We use Google Analytics to analyze website traffic and usage. This service collects anonymized data such as IP addresses (masked), page views, and session duration.
Learn more via Google’s Privacy Policy.
You can opt out via the Google Analytics Opt-Out Tool.


Who We Share Your Data With

We only share your personal data with third parties when necessary:

  • Hosting provider: for website functionality
  • Email marketing services: like Mailchimp or MailerLite (if subscribed)
  • Analytics tools: like Google Analytics
  • Payment processors: such as Mollie, Stripe, or PayPal

All third parties process data in compliance with applicable laws and only on our instructions.


How Long We Retain Your Data

  • Contact form submissions: 6 months
  • Quote requests: 12 months
  • Client records (invoices): 7 years (as required by tax law)
  • Analytics data: up to 26 months
  • Newsletter data: until unsubscribed

What Rights You Have Over Your Data

You have the right to:

  • Access your personal data
  • Correct or delete your data
  • Object to or restrict data processing
  • Request data portability
  • Withdraw your consent at any time

To exercise your rights, email info@koatagency.com. We will respond within 30 days.


Where Your Data Is Sent

Some of our service providers are located outside the EU (e.g., the US). We ensure that your data is protected through safeguards such as Standard Contractual Clauses or certifications under the EU-US Data Privacy Framework.


Contact Information

For privacy-related questions or requests, please contact:

Privacy Officer: Ravi Keijzer
📧 Legal@koatagency.com
📞 +31 (0)6 981954132


Additional Information

How We Protect Your Data

We implement a range of measures to protect your data:

  • SSL encryption on our website
  • Restricted access to client data
  • Strong password enforcement and secure accounts
  • Regular updates to themes, plugins, and software
  • Staff awareness of data protection best practices

What Data Breach Procedures We Have in Place

In the event of a suspected or actual data breach, we will:

  1. Internally report and investigate the breach
  2. Notify affected users if needed
  3. Report to the Dutch Data Protection Authority (AP) within 72 hours, if required

What Third Parties We Receive Data From

We may receive anonymized data from third parties, such as social media platforms, for marketing and audience targeting purposes.


What Automated Decision-Making and/or Profiling We Do With User Data

We do not use automated decision-making or profiling that has legal or significant effects on users.


Industry Regulatory Disclosure Requirements

KOAT AGENCY is not subject to additional industry-specific privacy regulations but fully complies with the General Data Protection Regulation (GDPR).