The Shadows Agency ("we", "us", or "our"), operating from Amsterdam, The Netherlands, respects your privacy and is committed to protecting the personal data of our visitors. This Privacy Policy details our data collection, usage, cookies framework, and security parameters in compliance with the **General Data Protection Regulation (GDPR)** and the **Dutch Telecommunications Act** (*Telecommunicatiewet*).
01 // Data We Collect
We collect personal data only when explicitly provided by you or dynamically set according to your active privacy settings:
Brand Evaluation Details: When requesting a digital presence audit, we collect your Identity Target (website or social media URL), Secure Delivery Channel (email address), and any secure message text provided in the audit request form.
Analytical Usage Telemetry: We collect anonymous device signatures, session counts, and page interaction metrics to measure website performance.
Security Logs: Cloudflare Turnstile telemetry is collected to block spam entries and distinguish automated bot attacks from human traffic.
02 // Cookies & Consent Framework
In compliance with Dutch ePrivacy regulations, we use a consent-gated framework for cookie delivery. Cookies set on this website are categorized as follows:
Strictly Necessary Cookies (Consent Exempt):
shadows_cookie_consent: A first-party cookie that stores your cookie settings preference (Accept/Decline). Expires in 365 days.
__cf_bm / Turnstile data: Essential session state properties set by Cloudflare to protect the web server and form endpoints against DDoS and spam activities.
Analytical / Performance Cookies (Consent Required):
Google Analytics Cookies (such as _ga, _ga_QEYF3JVZWJ): Used to audit website visits, sources, and conversion paths. These are **blocked by default** and only execute if you click "Accept" in our consent banner.
03 // Data Storage & Sharing
Your data is kept secure and only processed by authorized processors under strict data protection agreements:
Resend (resend.com): The brand audit requests submitted through our form are transmitted securely via API to Resend to dispatch reports to our inbox. No emails are sold or rented.
Google LLC (Google Analytics): If analytics tracking is accepted, usage data is transmitted to Google server infrastructure. IP anonymization is utilized to protect identity.
As an EU resident, you hold full legal authority over your personal information:
Right to access, rectify, or request deletion of your audit request records.
Right to withdraw your cookie analytics consent at any time (by deleting cookies in your browser settings).
Right to object to data processing activities.
Right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your data has been handled unlawfully.
Security & Consent
We use essential cookies for core functionality and performance. Analytics are activated after consent. Privacy Policy
