Privacy Policy

Executive Shield Partners ("we", "us", "our") respects your privacy. This policy explains which personal data we collect through our website and services, why we collect it, how long we keep it and what rights you have. We process personal data in accordance with the General Data Protection Regulation (GDPR).

1.Who we are

Executive Shield Partners is the data controller for the personal data described in this policy.

• Company: Executive Shield Partners
• Address: [Street and number, City, Country]
• Chamber of Commerce: [KvK number]
• Email: [privacy@executiveshieldpartners.com]
• Phone: [Phone number]

2.What data we collect

We only collect personal data that we genuinely need. Depending on how you interact with us, this may include:

• Contact details, such as your name, email address, phone number and company name when you fill in a form or book a call.
• Communication data, such as the content of emails or messages you send us.
• Booking and engagement data, such as appointment details, diagnostic results and project information when you become a client.
• Website usage data, such as pages visited and device information, collected through cookies (see our Cookie Policy).
• Billing data, such as invoice details and payment status.

3.Why we use your data

We process personal data for the following purposes and legal bases:

• Responding to enquiries and bookings, based on our legitimate interest in running our business.
• Delivering our services, based on the performance of a contract.
• Sending service-related communication, based on contract or legitimate interest.
• Marketing communication, only with your consent or within the limits of applicable law. You can opt out at any time.
• Legal and tax obligations, such as invoice retention, based on a legal obligation.
• Improving our website, through anonymised or aggregated statistics, based on legitimate interest.

4.How long we keep your data

We do not keep personal data longer than necessary. Contact enquiries are kept for up to two years after our last contact. Client and billing records are kept for the period required by Dutch tax law, currently seven years. Cookie retention is described in our Cookie Policy.

5.Who we share data with

We never sell your data. We only share personal data with parties that help us run our business, under a data processing agreement where required:

• Our website hosting and IT providers
• Our scheduling, email and CRM tools
• Our accountant and payment providers
• Authorities, only when we are legally required to do so

If a provider processes data outside the European Economic Area, we make sure appropriate safeguards are in place, such as EU Standard Contractual Clauses.

6.How we protect your data

Security is our profession, so we hold ourselves to the same standard we advise our clients. We use access controls, encryption where appropriate, and work inside a secured Microsoft 365 environment with audit logging. Access to personal data is limited to those who need it for their work.

7.Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted, where legally possible
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, email us at [privacy@executiveshieldpartners.com]. We respond within one month. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8.Changes to this policy

We may update this policy from time to time, for example when our services or the law change. The latest version is always published on this page, with the date of the most recent update at the top.