Engaging UX Design
Engaging UX Design is a registered sole proprietorship (eenmanszaak) based in Eindhoven, the Netherlands. We provide UX design, web design, app development, and long-term digital support services.
For all privacy and data-related questions, contact us at legal@engaginguxdesign.com.
When you fill in our project questionnaire, contact form, or book an appointment, we may collect:
When you visit our website, we may automatically collect:
If you book an appointment through our booking tool or contact us via a third-party form, that provider may share relevant data with us as part of the service interaction.
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and project questionnaires | Legitimate interest / Pre-contractual steps |
| Preparing project summaries and estimates | Pre-contractual steps |
| Executing projects and delivering services | Performance of contract |
| Issuing invoices and processing payments | Legal obligation / Performance of contract |
| Retaining financial records (7 years, Dutch tax law) | Legal obligation |
| Improving our website using anonymised analytics | Legitimate interest / Consent |
| Sending project-related communications | Performance of contract |
| Sending service updates or newsletters | Consent (opt-in only) |
| Data type | Retention period |
|---|---|
| Project enquiries and questionnaires (no contract) | 12 months |
| Client project data and communications | 5 years after project completion |
| Financial records and invoices | 7 years (Dutch legal requirement) |
| Anonymised website analytics | 26 months |
| Newsletter subscribers | Until you unsubscribe (every newsletter contains an unsubscribe link) |
| Unconfirmed newsletter sign-ups (confirmation link not clicked) | Deleted within 30 days. Unconfirmed sign-ups never receive newsletters. |
| Newsletter sign-up protection records (pseudonymised IP address and email address, used only to prevent abuse of the form) | 48 hours |
We do not sell, rent or trade your personal data. We only share data with the following third parties where strictly necessary to deliver our services or comply with legal obligations. All third-party providers are bound by appropriate data processing agreements or standard contractual clauses.
| Third party | Purpose | Location |
|---|---|---|
| Google Analytics 4 | Anonymised website statistics (IP anonymisation enabled) | EU (Data Processing Agreement in place) |
| Microsoft Clarity | Heatmaps and anonymised session recordings, only after you accept analytics cookies | USA (SCCs apply) |
| Google Ads (future) | Advertising — not yet active. Separate consent will be requested when enabled. | USA (SCCs apply) |
| Google Calendar API | Creating calendar events and video-call links for booked appointments | USA (SCCs apply) |
| Resend | Transactional email delivery (booking confirmations, quick-estimate results, contact form submissions) | USA (SCCs apply) |
| Vercel | Hosting for our self-hosted booking tool and quick estimate tool | USA/EU (SCCs apply) |
| Supabase | Backend database and storage for web applications built for clients | EU (where possible) |
| GitHub | Source code version control and deployment pipelines | USA (SCCs apply) |
| Hostinger / website hosting provider | Main website hosting and data storage. The contact form is handled by our own website (see Resend below for email delivery). | EU preferred |
| Hostinger Reach | Newsletter: storing subscribers' email address and name, and sending the sign-up confirmation email and newsletters. We only add you after you confirm your subscription by email (double opt-in). | Covered by Hostinger's Data Processing Addendum; storage locations are listed in Hostinger's Trust Center |
| Accountant / tax advisor | Financial records and tax obligations | Netherlands |
Our interactive tools are hosted on the following subdomains, all of which are subject to this Privacy Policy:
All third-party providers are bound by appropriate data processing agreements or standard contractual clauses in accordance with GDPR requirements.
Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or that the receiving country benefits from an adequacy decision.
As a data subject under the GDPR, you have the following rights:
To exercise any of these rights, email us at legal@engaginguxdesign.com. We will respond within 30 calendar days. Identity verification may be required before processing your request.
If you are not satisfied with our response, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or alteration. These measures include:
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, as required by GDPR Article 33 and 34.
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us at legal@engaginguxdesign.com and we will delete it promptly.
We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent update. Continued use of our website or services after changes constitutes acknowledgement of the updated policy. For significant changes, we will provide a prominent notice on our website.
For all privacy-related questions or to exercise your rights: