Privacy statement

What data we process, why, and what rights you have.

This statement explains which personal data CUBO Agency processes, why, for how long and what rights you have. We collect as little as possible.

1. Who is responsible

CUBO Agency, based in Terneuzen (Zeeland, the Netherlands), is the controller within the meaning of the General Data Protection Regulation (GDPR). Questions about privacy? Email jaimy@cubo-agency.com.

2. What data we process

  • Contact form: name, email address and, if you fill them in, phone number, company name, your message and your choices (service, budget, timing, preferred contact method and contact person).
  • Direct contact: what you share when you call, email or send us a WhatsApp message.
  • Clients: contact and billing details and the information needed to carry out the assignment.
  • Technical data: when you send a request, the server briefly records your IP address to limit abuse and spam.

3. Purposes and legal bases

  • Responding to your request and scheduling an intro call: based on your consent and to prepare an agreement at your request (Art. 6(1)(a) and (b) GDPR).
  • Carrying out an assignment and communicating about it: performance of the contract (Art. 6(1)(b) GDPR).
  • Invoices and accounting: legal obligation, such as the tax retention requirement (Art. 6(1)(c) GDPR).
  • Securing the website and preventing spam: legitimate interest (Art. 6(1)(f) GDPR).

You can withdraw your consent at any time by emailing us. This does not affect what we lawfully did before.

4. How long we keep data

  • Requests that do not lead to an assignment: no longer than 12 months after the last contact.
  • Client data: for as long as we work together and up to 2 years afterwards.
  • Invoices and accounting records: 7 years, as required by law.
  • Technical data for spam prevention: no longer than 1 hour in the server memory.

5. Who else sees your data

We never sell your data. We only share it with parties needed to deliver our service, such as our hosting provider (the server this website and the form run on) and our email provider. We make agreements with these processors about security and confidentiality. If you choose to contact us via WhatsApp, WhatsApp (Meta) processes your data under its own privacy terms.

If a service processes data outside the European Economic Area, this only happens with appropriate safeguards, such as an adequacy decision or the European Commission’s standard contractual clauses.

6. Cookies and tracking

This website sets no cookies and uses no analytics, advertising pixels or embedded third-party content. Fonts and scripts are served from our own server. That is why you see no cookie banner.

Your browser only remembers during your visit (sessionStorage) whether the intro animation has already been shown. This is a functional setting without personal data that disappears when you close the tab. If we ever add analytics or embeds, we will ask your consent first and update this statement.

7. Security

The website runs over an encrypted connection (HTTPS). Form requests are stored in a location on the server that cannot be reached from the internet. Only we have access.

8. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Send your request to jaimy@cubo-agency.com. We respond within one month.

Not happy with how we handle your data? Let us know first and we will look for a solution together. You always have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

9. Changes

We update this statement when the way we work changes. Last updated: 31 October 2026.