Privacy Policy

1. Who We Are

sixtynine.agency is a digital marketing and branding agency based in Rotterdam, the Netherlands. We are part of sixtynine.company.

• Address: Schiemond 20, 3024 EE Rotterdam, the Netherlands
• Email: [email protected]
• Phone: +31 6 23769707

2. What Data We Collect

We may collect the following personal data:

• Contact form submissions: name, email address, phone number, and message content when you reach out to us
• Analytics data: anonymized usage data through Google Tag Manager and Google Analytics, including pages visited, time on site, device type, and approximate location
• Cookies: functional and analytics cookies to improve your browsing experience

3. Why We Collect Your Data

We process personal data for the following purposes:

• To respond to your inquiries and provide our services
• To improve our website and user experience
• To analyze website traffic and performance
• To comply with legal obligations

The legal basis for processing is your consent (Article 6(1)(a) GDPR) and our legitimate interest in operating our business (Article 6(1)(f) GDPR).

4. Cookies & Tracking

We use Google Tag Manager (GTM) to manage analytics on our website. GTM may set cookies to collect anonymized data about how you use our site. This helps us understand which pages are popular and how visitors navigate our website.

You can control or disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website.

5. Data Sharing

We do not sell your personal data. We may share data with the following third parties:

• Google Analytics / Google Tag Manager: for anonymized website analytics
• Cloudflare: for website hosting and security
• Directus: as our content management system

All third-party processors are bound by data processing agreements in compliance with GDPR.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Contact form submissions are retained for the duration of any resulting business relationship and deleted upon request.

7. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your personal data ("right to be forgotten")
• Restrict processing of your data
• Object to processing based on legitimate interest
• Data portability — receive your data in a structured format
• Withdraw consent at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Data Security

We take appropriate technical and organizational measures to protect your personal data, including HTTPS encryption, secure hosting via Cloudflare, and access controls on our systems.

9. Complaints

If you believe we have not handled your personal data properly, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.