Last updated: October 2026 (draft)
We respect your privacy. This policy explains what personal data Alice Advice processes, why, how long we keep it and what your rights are. We process personal data in accordance with the General Data Protection Regulation (GDPR, in Dutch: Algemene verordening gegevensbescherming – AVG) and the Dutch GDPR Implementation Act (Uitvoeringswet AVG).
1. Who is responsible for your data?
The controller is Alice Advice, Stokviswater 10, 3011 DH Rotterdam, the Netherlands. For questions about your personal data, email info@alice-advice.nl or call +31 6 18 96 64 55.
2. What data do we process?
- Contact form data: your name, phone number, email address and message.
- Data you share with us by email, phone, WhatsApp or in person at our office.
- If you become a client – the data needed to provide the service, such as your address, date of birth, BSN, information about your income, employment, family and housing, as well as financial and tax documents.
- For businesses – also company details (such as KvK and VAT numbers) and accounting records, such as invoices and bank statements.
3. Why and on what legal basis?
- Replying to your enquiry and preparing a quote – based on your consent (Article 6(1)(a) GDPR) and steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
- Providing the service you ask us for: tax returns, applications, bookkeeping and correspondence with the authorities – to perform the contract (Article 6(1)(b) GDPR).
- Complying with legal obligations, including the obligation to retain tax and accounting records – Article 6(1)(c) GDPR.
We only process your BSN when it is necessary to file a return or application on your behalf and the law allows it. You can withdraw your consent to be contacted at any time – this does not affect the lawfulness of processing before the withdrawal.
4. How do we store your data?
We currently store data only as emails in our business mailbox info@alice-advice.nl. The mailbox is hosted by a Dutch hosting provider, and emails are synchronised with the email program on the office computer.
The website does not save contact form data in any database – each form message is sent straight to our mailbox by email. We do not keep a separate client database.
If you contact us via WhatsApp, messages are stored in the app on our business phone, and the service is provided by WhatsApp (Meta) under its own privacy policy.
5. Who do we share data with?
We never sell your data. We only share it when needed to provide the service or when the law requires it:
- our email and hosting provider (Domeinwinkel, the Netherlands) – hosts our mailbox and delivers contact form messages to it;
- the company that runs the website's servers – for the technical data needed to display the site;
- Dutch authorities and institutions (e.g. the Belastingdienst, UWV, SVB, the municipality, KVK) – only as part of the service you ask us for, or when required by law.
6. Transfers outside the European Economic Area
As a rule, we process data within the European Union. If one of our providers processes data outside the European Economic Area, this only happens on the basis of a European Commission adequacy decision (such as the EU-US Data Privacy Framework) or standard contractual clauses approved by the European Commission.
7. How long do we keep your data?
- Enquiries that did not lead to working together – up to 12 months after the last contact.
- Client data and documents related to tax returns and bookkeeping – for 7 years, in line with the Dutch tax retention obligation (fiscale bewaarplicht, Article 52 of the Algemene wet inzake rijksbelastingen).
After these periods, we delete the data.
8. Security
We take appropriate technical and organisational measures to protect your data against loss and unauthorised access – including an encrypted connection to the website (HTTPS), password-protected access to our mailbox and devices, and limiting access to the people handling your case.
9. Cookies and statistics
Our website does not use analytics or marketing cookies and does not use tracking tools. The web server may automatically log basic technical data (such as IP address, browser type and time of visit), used only to keep the website secure and working properly.
10. Your rights
You have the right to:
- access your data and receive a copy,
- have incorrect data corrected,
- have your data erased – unless we are legally required to keep it,
- restrict processing,
- data portability,
- object to processing,
- withdraw your consent at any time.
11. How to exercise your rights or file a complaint
Email us at info@alice-advice.nl. We will reply within one month at the latest. If you believe we process your data unlawfully, you can file a complaint with the Dutch Data Protection Authority – Autoriteit Persoonsgegevens (www.autoriteitpersoonsgegevens.nl).
12. Changes to this policy
We may update this policy, for example when our services or the law change. The current version is always available on this page.
