Privacy statement.
MediaDeploymentLab handles personal data with care. We only collect what we need to get in touch and give you access to the members area, and we never sell anything on.
Draft text — details in [brackets] are still to be filled in.
Who is responsible
[Bedrijfsnaam] [rechtsvorm], located at [Straatnaam 1], [1234 AB] [Plaats], Chamber of Commerce (KVK) [12345678], is the controller under the GDPR. Privacy questions go to hello@mediadeploymentlab.com.
What we process
- Contact form: name, email address, company or link, and your message.
- Members area request: name, email address, company and your note.
- Members: email address, your step in the journey, your intake answers and requests you make in your area.
- Chat (members from step 2): your name, email address and the messages you send.
- Newsletter: your email address and, if you give them, your first name and language. Only after you confirm your sign-up by email.
- Technical data: IP address and browser data in server logs, needed to keep the site secure.
Why and on what basis
- Replying to your message or request — at your request (pre-contractual steps) or our legitimate interest in answering.
- Providing the members area, intake and chat — because it's needed for our agreement with you.
- Emailing you about your access or your next step — part of that same service.
- Securing the site and preventing abuse — legitimate interest.
- Sending the newsletter — based on your consent, which you confirm via the link in your email and can withdraw any time with the unsubscribe link.
We don't use your data for advertising and we don't build profiles.
Who processes data for us
We work with a few carefully chosen providers, each bound by a data processing agreement and allowed to use your data only to deliver their service to us.
- Vercel — website hosting.
- Supabase — sign-in and the members area database.
- Brevo — sending email (sign-in links, notifications and the newsletter) and managing the newsletter list.
- Chatwoot — the chat in the members area.
- Sanity — managing the site's texts and ventures (holds no visitor data).
- Plausible Analytics — anonymous visitor statistics, hosted in the EU. No cookies, and visitors can't be identified.
Some of these providers are (partly) outside the European Economic Area, mainly in the United States. Transfers then rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep data
- Contact messages and rejected access requests: up to [12 months] after the last contact.
- Member data, intake and chat: while you're a member and [24 months] after, unless you ask us to delete it sooner.
- Newsletter: until you unsubscribe. A sign-up you don't confirm lapses.
- Data we're legally required to keep (such as invoices): 7 years.
Security
The members area is only open after our approval and sign-in through a personal link. Connections are encrypted, members only see their own data and the chat verifies who you are. No system is watertight though; if something looks off, email us right away.
Your rights
You can access, correct or delete your data, restrict or object to processing, and ask for a copy to take elsewhere. Send your request to hello@mediadeploymentlab.com; we reply within a month. If you disagree with how we handle your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
We update this statement when our services change. The date at the bottom shows when that last happened.