Privacy Policy

Who we are

eXceed Agency (“eXceed”, “we”, “us”) is a design and engineering studio based in the Netherlands. We are the controller of the personal data described in this policy. For any privacy-related question, contact us at contact@exceedagency.eu.

Registered as [legal entity name], Netherlands, KvK [KvK number], [registered address].

What we collect

We keep data collection to a minimum. Depending on how you interact with us, we may collect:

• Details you give us — your name, email address, and the contents of any message when you email us or submit a form.
• Usage data — aggregated analytics such as pages visited, referring site, and device or browser type.
• Technical data — your IP address and standard server logs, retained briefly to keep the site secure and working.

How we use your data

• To respond to your enquiry and provide services you ask for.
• To operate, maintain, and improve our website.
• To keep our site and systems secure.
• To meet our legal, tax, and accounting obligations.

Legal basis for processing

Under the EU General Data Protection Regulation (GDPR), we process your data on the following grounds:

• Consent — for example, optional analytics cookies, which you can withdraw at any time.
• Contract — to deliver services you have engaged us for.
• Legitimate interests — running and securing our website and responding to enquiries.
• Legal obligation — keeping tax and accounting records.

Cookies & analytics

We use Plausible, a privacy-friendly analytics tool that we host ourselves, to understand how the site is used. Plausible does notuse cookies, does not collect any personal data, and does not track you across other websites. It only records aggregate, anonymous metrics such as page views and referrers. Because no cookies or personal identifiers are involved, no consent is required for this — but we show a short notice so you know it's there.

Our site sets no tracking or advertising cookies. The only data stored in your browser is a small flag in local storage that remembers you have dismissed the privacy notice, so it does not reappear on every visit.

Sharing your data

We do not sell your personal data. We share it only with trusted service providers that help us run the business, under appropriate data protection agreements, such as:

• Hosting and infrastructure providers (e.g. Vercel).
• Email and communication tools.
• Analytics providers.

International transfers

Some providers may process data outside the European Economic Area (EEA). Where they do, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

How long we keep it

We keep personal data only as long as necessary for the purposes above. Enquiry correspondence is typically kept for up to [24 months], and accounting records are retained for as long as Dutch law requires (generally 7 years).

Your rights

Under the GDPR you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. To exercise any of these, email contact@exceedagency.eu and we will respond within the legally required timeframe.

You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Security

We take reasonable technical and organisational measures to protect your data against loss, misuse, and unauthorised access. No method of transmission over the internet is completely secure, however, so we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. The “last updated” date above always reflects the current version.

Contact

Questions about your privacy or this policy? Email contact@exceedagency.eu.