Privacy statement

Who we are

Noctu is Amin's agency, based in the Netherlands, building websites with an assistant for trade businesses. Questions about this statement or your data: [email protected]. We respond within a month, usually much faster.

If you visit this site

We measure visits with Umami, an analytics tool running on our own server. It uses no cookies and collects nothing that identifies you personally. We see which pages are viewed and which country visits come from, not who you are.

If you fill in a form (such as a demo request), we process the details you provide: business name, email address and whatever you tell us. We use those only to answer your request.

If you use the chat with Nox, we keep the conversation (question and answer, without name or address) to check and improve the assistant. The assistant never asks for personal details; please don't type them in either. Conversations are kept for at most a year.

If we approach your business

Noctu sometimes approaches businesses by email, in a targeted way. For that we process business contact details from public business sources, such as a company's own website or a public business register: business name, business email address, address and public information about the business.

We do this on the basis of our legitimate commercial interest: targeted, small-scale contact with businesses our work may be relevant to. We record per business where the data came from, we limit ourselves to what that one message needs, and every first email states where we found your details and how to opt out. The underlying balancing assessment is documented and available via the email address above.

What we don't do: buy lists, harvest social network profiles, process special categories of data, or make automated decisions about people.

Opting out

Don't want to hear from us (again)? One reply or email is enough. Your address goes on our permanent suppression list and you will never hear from us again. Objections to direct marketing are always honoured immediately.

Retention

Demo requests and correspondence are kept while the contact lasts, and for at most a year after the last contact. Data on businesses we approached that never responded is deleted at most a year after the last message. The suppression list is kept permanently; that is necessary to honour an opt-out lastingly.

Where your data lives

Our systems run on self-managed servers in the Netherlands. For site availability we use Cloudflare as a security and delivery layer; for email we use Google Workspace. Data processing agreements are in place with these parties.

Your rights

You have the right to access, correct and delete your data, and to object to processing. Email us and we will take care of it. If you are unhappy with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).