Privacy Policy
How Les Abatui handles personal data when you visit this website or get in touch with us.
1. Who we are
Les Abatui is a creative branding studio based in the Netherlands. We are the controller of the personal data described in this policy.
- Les Abatui
- Chamber of Commerce (KvK): 95599274
- VAT number: NL005164164B50
- Email: contact@lesabatui.com
- Telephone: +31 (0)6 83 60 05 28
This policy explains what personal data we process when you visit this website or contact us, why we process it, and what rights you have. We process personal data in accordance with the General Data Protection Regulation (GDPR).
2. The data we process
2.1 When you use the contact form
Our contact form asks for your name, your email address and your message. We use these only to read and answer your enquiry. Your message is delivered straight to our mailbox by email — we do not store form submissions in a database.
2.2 Technical data
When you submit the form we briefly process your IP address, to limit how many messages can be sent from one connection and to filter out automated spam. It is held in memory for a short period and is not stored alongside your message.
Our hosting provider keeps standard server logs — IP address, time of the request, the page requested and the type of browser — for security and troubleshooting.
2.3 When you email or call us
If you contact us directly, we process the details you choose to share with us and the content of the correspondence.
2.4 What we do not do
We use no analytics, no tracking pixels, no advertising cookies and no profiling. We do not sell or rent personal data, and we do not use your data to build a profile of you.
3. Why we process it, and on what legal basis
- Answering your enquiry — to take steps at your request before entering into an agreement, and our legitimate interest in responding to people who approach us (Article 6(1)(b) and (f) GDPR).
- Spam prevention and rate limiting — our legitimate interest in keeping the website usable and our mailbox free of automated abuse (Article 6(1)(f) GDPR).
- Security and troubleshooting — our legitimate interest in a secure, functioning website (Article 6(1)(f) GDPR).
- Legal obligations — where we are required to keep records, for example for tax purposes (Article 6(1)(c) GDPR).
4. Who we share data with
We share personal data only with the service providers that help us run this website and our correspondence. They act as processors, on our instructions:
- Vercel — hosting of the website.
- Supabase — the database holding the website's own texts and images, and the sign-in for our editors.
- Resend — delivery of the email generated by the contact form.
- Our email provider, for the mailbox that receives your message.
Some of these providers are established outside the European Economic Area, or run on infrastructure that is. Where that is the case, the transfer is covered by the European Commission's Standard Contractual Clauses or another mechanism permitted under Chapter V of the GDPR.
We may also share data where the law requires us to.
5. Content delivered by other servers
Opening a page on this website makes your browser contact two servers besides our own, and each of them therefore receives your IP address and the technical details of your request:
- Google Fonts (fonts.googleapis.com and fonts.gstatic.com) — delivers the typefaces.
- Supabase — delivers our logo and the photographs on the site, which are stored there together with the site's texts.
Neither of them sets cookies. If you would rather avoid the connection to Google, you can block those two domains in your browser; the site stays fully usable with fallback typefaces.
6. How long we keep your data
- Enquiries — for as long as we need them to handle your question and, if it leads to a working relationship, for the duration of that relationship. Afterwards we keep the correspondence for up to two years, unless a longer statutory period applies.
- Administrative records — seven years, as Dutch tax law requires.
- Rate-limiting data — minutes, then discarded.
- Server logs — the period applied by our hosting provider, in the order of weeks.
7. Your rights
Under the GDPR you have the right to:
- ask what personal data we hold about you, and receive a copy;
- have inaccurate data corrected;
- have your data erased;
- restrict how we process your data;
- object to processing based on our legitimate interest;
- receive the data you gave us in a portable format;
- withdraw your consent, where processing rests on consent.
To exercise any of these, email contact@lesabatui.com. We answer within one month. We may ask you to confirm your identity first, so that we never disclose data to the wrong person.
If you are not satisfied with how we handle your request, you can lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or with the supervisory authority in your own country of residence.
8. Security
The website is served over an encrypted connection (HTTPS). Access to the content management system is limited to named accounts protected by individual passwords, and we keep the number of people and systems that can reach personal data as small as we reasonably can.
9. Children
This website is aimed at businesses and professionals. We do not knowingly collect personal data from children under 16. If you believe we have, contact us and we will delete it.
10. Changes to this policy
We revise this policy whenever the website or the way we work changes. The date under the title shows when it was last updated.
11. Contact
Questions about this policy, or about how we handle your data? Email contact@lesabatui.com or call +31 (0)6 83 60 05 28.