Privacy Policy

1. Who is responsible for your data

spriteCloud B.V. is the data controller. We are registered with the Dutch Chamber of Commerce under number 27351758.

spriteCloud B.V., Rijnlandlaan 199, Unit 1.05, 1062 MX Amsterdam, The Netherlands.

For privacy questions or requests, email dpo@spritecloud.com or call +31 20 615 9155 (Mon to Fri, 09:00 to 17:00 CET).

2. What data we collect

Contact form: your name, email address, company and the message you send us.

Event sign-ups and talk proposals: your name, email address, company and, for talk proposals, your proposed topic.

Demo bookings: when you book a call through our Google Calendar booking page, Google collects your name and email address on our behalf so the meeting can be scheduled.

Job applications: the details and documents you send us, for example your CV and cover letter.

Email and phone contact: the content of messages and calls you have with our team.

Live chat: the name, email address and messages you send through the chat on our website.

Website usage, only with your consent: pages you visit, how you click and scroll, the referring site, your approximate location based on IP address, and your browser and device type. We collect this through Google Analytics, Microsoft Clarity and HubSpot. If you accept advertising cookies, Google Ads also records whether you reached our site through one of our ads. If you have filled in one of our forms, HubSpot can link your page visits to your contact record.

Technical data: when you load the site, our hosting provider Webflow and Google Fonts receive your IP address and browser details, because your browser needs them to deliver the page and its fonts.

We do not ask for sensitive data such as health information, and we ask you not to include it in forms or emails.

3. Why we use it and on what legal basis

To answer your questions and prepare proposals. Legal basis: steps you ask us to take before a contract, and our legitimate interest in replying to business enquiries.

To deliver services to our clients and manage the relationship. Legal basis: performance of a contract.

To send event invitations and updates you signed up for. Legal basis: your consent. You can unsubscribe through the link in every email.

To send relevant information about our services to business contacts. Legal basis: our legitimate interest. You can object at any time and we will stop.

To understand how the website is used and improve it. Legal basis: your consent, given through the cookie banner.

To measure the results of our Google Ads campaigns. Legal basis: your consent, given through the cookie banner.

To handle job applications. Legal basis: steps you ask us to take before an employment contract, and your consent if you ask us to keep your details for future roles.

To meet legal obligations, such as tax and accounting rules. Legal basis: legal obligation.

We do not use your data for automated decision-making or profiling with legal or similarly significant effects.

4. Cookies

We only place analytics, functionality and advertising cookies after you accept them in the cookie banner. Our Cookie Policy lists every cookie we use, what it does and how long it stays. You can change your choice at any time through the Cookie settings link in the footer.

5. Who we share data with

We do not sell personal data. We share it with service providers who process it on our behalf, under a data processing agreement:

Webflow (website hosting and contact form submissions).

HubSpot (CRM, email, live chat, event sign-ups and the cookie banner). Our HubSpot account is hosted in HubSpot's EU data centre.

Google (Google Analytics, Google Ads, Google Workspace email and documents, Google Calendar booking pages, Google Fonts).

Microsoft (Microsoft Clarity website analytics).

We may also share data with authorities when the law requires it, or with professional advisers such as accountants and lawyers who are bound by confidentiality.

6. Transfers outside the EU

Some of these providers are based in the United States or may access data from there. We only use providers that are certified under the EU-US Data Privacy Framework or that have signed the European Commission's Standard Contractual Clauses with us.

7. How long we keep your data

Enquiries that do not lead to a contract: up to 2 years after our last contact.

Client and contract records: 7 years after the end of the contract, as Dutch tax law requires.

Event and marketing contacts: until you unsubscribe or object, or after 2 years without any interaction.

Job applications: up to 4 weeks after the application process ends, or up to 1 year if you agree that we keep your details for future roles.

Analytics data: Google Analytics keeps event data for a maximum of 14 months. Cookie lifetimes are listed in our Cookie Policy.

8. Your rights

You have the right to access your personal data, to have it corrected or deleted, to restrict how we use it, to receive it in a portable format, and to object to processing based on our legitimate interest, including direct marketing. Where we rely on your consent, you can withdraw it at any time. Withdrawal does not affect processing that already took place.

Send your request to dpo@spritecloud.com. We reply within one month. We may ask you to confirm your identity first.

If you think we have not handled your data properly, please contact us first. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

9. Security

We protect personal data with technical and organisational measures, including encrypted connections (HTTPS), access controls on the systems we use and confidentiality obligations for our staff.

10. Changes to this policy

We update this policy when our website, tools or legal obligations change. The date at the top shows the latest version.