Privacy & Cookie Policy

1. Who we are (data controller)

Exeme (sole proprietorship / eenmanszaak)
KVK number: 42107673
Establishment number: 000066110424
Kwikstaartlaan 42, Box C2649
3704 GS Zeist, Netherlands
Contact: cam@exeme.com

If you have questions about this policy or want to exercise your rights, email us at the address above.

2. What data we collect and why

Contact enquiries

When you use our contact form, we collect your name, email address, optional company or website, selected service, and project message. We use this information only to review and respond to your enquiry, discuss potential work, and prepare a proposal where requested.

The form is protected by Cloudflare Turnstile, which processes limited device, network, and browser signals to distinguish legitimate visitors from automated abuse. Enquiry notifications are delivered through Resend and received in our Google Workspace mailbox.

Analytics (with your consent)

• Google Analytics 4 — collects anonymised usage data (pages visited, session duration, approximate location). Used to understand how visitors use the site so we can improve it.
• Microsoft Clarity (active once enabled in settings) — session recordings and heatmaps to understand user behaviour. No personally identifiable information is captured.

Marketing / advertising (with your consent)

• Bing UET (Universal Event Tracking) (active once enabled in settings) — tracks conversions from Microsoft Ads campaigns.

Strictly necessary (no consent required)

• Cookies required for the site to function (e.g. storing your cookie preferences). No personal data is used for tracking or profiling.
• Cloudflare Turnstile — protects the contact form from spam and automated abuse. It is used only when you interact with the contact form and is not used by Exeme for advertising.
• Cloudflare Web Analytics — cookieless, privacy-first analytics operated by our CDN provider. Does not set cookies or track individuals; not subject to consent requirements.

3. Cookies we use

The table below lists cookies set by this site. We only set non-essential cookies after you grant consent.

4. Legal basis

We process contact enquiries because you have asked us to respond or take steps before entering into a contract, such as discussing a project or preparing a quote. Where that basis does not apply, we rely on our legitimate interest in responding to genuine business enquiries and protecting the contact form from abuse.

We process personal data collected through analytics and marketing cookies on the basis of your consent (GDPR Art. 6(1)(a) / UK GDPR Art. 6(1)(a)). You can withdraw consent at any time using the button at the bottom of this page or in the site footer.

Strictly necessary cookies are processed under our legitimate interest in delivering a functioning website (GDPR Art. 6(1)(f)).

5. International data transfers

Google, Microsoft, Cloudflare, and Resend may process personal data using infrastructure or subprocessors outside the EEA or UK. Where personal data is transferred internationally, we rely on an applicable adequacy decision or appropriate safeguards included in the provider's data processing terms, such as Standard Contractual Clauses and, where relevant, the UK International Data Transfer Addendum.

You can contact us for more information about the safeguards that apply to a particular transfer.

6. How long we keep contact enquiries

We normally retain unsuccessful or inactive enquiries for up to 12 months after the last contact, then delete them unless there is a legal or business reason to keep them longer. If an enquiry becomes a client relationship, relevant records may be retained for the duration of that relationship and any legally required period afterwards. Resend delivery records are retained according to the active Resend plan and settings.

7. Your rights

Under GDPR and UK GDPR you have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate data.
• Erasure — ask us to delete your data ("right to be forgotten").
• Restriction — limit how we process your data.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — withdraw cookie consent at any time via the button below or in the site footer. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Lodge a complaint — contact the UK ICO (ico.org.uk) or the Dutch AP (autoriteitpersoonsgegevens.nl).

To exercise any right, email cam@exeme.com. We respond within one month.

8. Changes to this policy

We update this policy when we add new cookies or change how we process data. Material changes will be communicated via a new consent prompt. The "Last updated" date at the top reflects the most recent revision.