Neon Alchemy B.V.
Privacy Policy
Effective Date: 05/2026
The short version: we collect only what we need to do our work well. We don't sell it. We don't share it unless we have to. And you can always ask us what we hold on to.
The longer version follows. It is written in plain language because you deserve to actually understand it.
1. Who We Are
This Privacy Policy applies to the website and services of:
Neon Alchemy B.V.
Herengracht 420, 1017 BZ Amsterdam, The Netherlands
KvK: 99870924
VAT: NL869167364B01
Email: info@neonalchemy.nl
Neon Alchemy B.V. is the data controller for personal data collected through this website. This means we are responsible for deciding how and why your data is used.
2. What Personal Data We Collect
2.1 Contact form
When you submit a contact form on our website, we collect:
Your name
Your email address
Any information you choose to include in your message
We use this data solely to respond to your enquiry. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
2.2 Newsletter signup
When you sign up for our newsletter (The Elixir), we collect:
Your email address
Your name, if provided
We use this data to send you our newsletter. You can unsubscribe at any time via the link in any email we send. Legal basis: consent (Article 6(1)(a) GDPR).
Note: We are in the process of selecting a newsletter platform. When one is in place, this policy will be updated to name the platform and its data processing terms.
2.3 Booking and enquiry form
When you submit a booking or enquiry form via Elfsight, we collect:
Your name
Your email address
Your organisation, if provided
Details of your enquiry or requested appointment
We use this data to process and respond to your booking or enquiry. Legal basis: performance of a contract or pre-contractual steps (Article 6(1)(b) GDPR).
2.4 Live chat
If you use the live chat function on our website (provided via Squarespace and Elfsight), we collect:
Your name, if provided
Your email address, if provided
Your phone number, if provided
The content of your chat messages
We use this data to respond to your chat enquiry. Chat transcripts may be retained for quality and operational purposes. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
2.5 Analytics data
Our website uses Squarespace's built-in analytics. This collects aggregated, anonymised information about how visitors use our site, including:
Pages visited and time spent
Approximate geographic location (country or region level)
Device and browser type
Referral source
This data is used to understand how our website is performing and to improve it. It is not used to identify individual visitors. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
3. How Long We Keep Your Data
We do not keep your data longer than necessary. Our general retention periods are:
Contact form enquiries — 2 years from last contact, unless an ongoing client relationship develops
Newsletter subscriber data — for as long as you remain subscribed, plus 6 months after unsubscribe
Booking and enquiry data — 2 years from the date of the booking or enquiry
Chat transcripts — 12 months from the date of the conversation
Analytics data — as determined by Squarespace's data retention settings; aggregated and not personally identifiable
Where a client engagement develops from an initial enquiry, data relevant to that engagement is retained for 7 years after the engagement ends, in line with Dutch tax and administrative law requirements (Belastingdienst).
4. Who We Share Your Data With
We do not sell your personal data. We do not share it with third parties for their own marketing purposes.
We use the following third-party processors who may handle personal data on our behalf:
Squarespace Inc. (USA) — website hosting, forms, analytics, and live chat. Squarespace is certified under the EU-US Data Privacy Framework. Data processing is governed by Squarespace's Data Processing Agreement.
Elfsight (Cyprus/EU) — booking forms and live chat widget. Data processing is governed by Elfsight's Data Processing Agreement.
Google LLC / YouTube (USA) — video embeds on our website may load cookies from Google and YouTube if you interact with embedded video content. See our Cookie Policy for details.
Vimeo Inc. (USA) — video embeds on our website may load data from Vimeo if you interact with embedded video content. See our Cookie Policy for details.
Where data is transferred outside the European Economic Area (EEA) — for example, to US-based processors — we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or participation in the EU-US Data Privacy Framework.
We will update this section when a newsletter platform is selected.
5. Your Rights Under GDPR
Under the General Data Protection Regulation, you have the following rights:
Right of access — you can ask us what personal data we hold about you
Right to rectification — you can ask us to correct inaccurate data
Right to erasure — you can ask us to delete your data, subject to legal retention obligations
Right to restriction — you can ask us to limit how we use your data in certain circumstances
Right to data portability — you can ask for your data in a structured, machine-readable format
Right to object — you can object to processing based on legitimate interest
Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, contact us at info@neonalchemy.nl. We will respond within one month of receiving your request, as required by GDPR.
You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.
6. Security
We take reasonable technical and organisational measures to protect your personal data against loss, misuse, or unauthorised access. Our website is hosted on Squarespace, which maintains its own security infrastructure and certifications.
No method of transmission over the internet is completely secure. We cannot guarantee absolute security, but we take this responsibility seriously and will notify affected individuals and the AP in the event of a data breach where required by law.
7. Children
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us at info@neonalchemy.nl and we will delete it promptly.
8. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the effective date at the top. For significant changes, we will make reasonable efforts to notify affected individuals.
We recommend checking this page periodically.
9. Contact
For any questions, requests, or concerns about this Privacy Policy or how we handle your data:
Neon Alchemy B.V.
Herengracht 420, 1017 BZ Amsterdam, The Netherlands
This document was last updated: 05/2026 Neon Alchemy B.V. — Amsterdam. Story is how companies become human. We handle that part.