Privacy policy
Last updated: 16 October 2026
Suspiciously Fast respects your privacy. This policy explains which personal data we process when you visit our website, get in touch or work with us as a client, why we do so and which rights you have.
Who we are
Suspiciously Fast is a trade name of Studio Polderman, a sole proprietorship. Studio Polderman is the controller for the processing of personal data described in this policy.
- Studio Polderman, trading as Suspiciously Fast
- Rotterdam, the Netherlands
- Chamber of Commerce (KvK) number: 95561080
- Email: info@suspiciouslyfast.nl
Questions about your data? Email info@suspiciouslyfast.nl.
What data we process
When you fill in the contact form
- name, email address, phone number and company name
- your message and, if you select them, the service, package and budget you are interested in
- the language of the website, the page with the form and the page you came from
- the type of browser and device you use to send the form
Phone number, company name, service, package and budget are optional.
When you email or call us
Your name, your contact details and the content of your message or conversation.
When you are a client
The data we need to carry out and invoice an assignment, such as contact person, company name, address, Chamber of Commerce number, VAT number and agreements about the assignment. Clients get access to our client portal. It stores quotes, invoices, tasks, messages and files we exchange, and your email address to log in. Shoots may also record images and sound of people; we agree on this with the client for each assignment.
When you visit the website
To run and secure the website, the provider that hosts it processes technical data such as your IP address, the time of your visit and your browser type. For visitor statistics we use Cloudflare Web Analytics. It works without cookies and does not track you across websites; we only see totals, such as the number of visits per page. If you give permission via the cookie notice, we also use Google Analytics. It shows us how visitors use the site, for example which pages they view and whether they request a quote. Legal basis: your consent, which you can withdraw at any time via "Cookies" at the bottom of the site.
Why we process data
- Answering your enquiry and preparing a quote. Legal basis: steps taken at your request before entering into a contract.
- Carrying out, delivering and invoicing an assignment, including through the client portal. Legal basis: performance of the contract.
- Keeping our accounts. Legal basis: legal obligation (tax record keeping).
- Running and securing the website and client portal and preventing abuse. Legal basis: legitimate interest.
- Understanding how the website is used so we can improve it. Legal basis: legitimate interest.
We do not use your data for automated decision making or profiling, and we do not sell it.
Who we share data with
We work with the following parties. They process data on our behalf and only for the purposes above.
- Cloudflare: hosts and secures the website and client portal, stores enquiries, client data and files, provides visitor statistics and forwards email sent to our domain to our mailbox.
- Resend: sends emails on our behalf, such as a notification of a new enquiry and messages from the client portal.
- Google (Gmail): our mailbox, where enquiries and emails arrive.
- Sanity: content management system for the text and images on the website. Images are loaded from Sanity's servers, so Sanity receives technical data about your visit, such as your IP address.
- Google (Analytics): measures how visitors use the website, only if you give permission. Advertising features and data sharing for advertising are switched off, and Google does not store your IP address.
- Our accounting software: invoicing and accounts. Processes client and invoice data.
Some pages also show videos from Vimeo and YouTube. When such a video loads, your browser connects to their servers and they receive technical data such as your IP address. We use the more privacy friendly settings these services offer (youtube-nocookie.com for YouTube, the do not track setting for Vimeo). Vimeo and YouTube are responsible for what they do with that data; please read their own privacy policies.
Apart from this, we only share data when the law requires us to.
Data outside Europe
Some of these parties are based in the United States or use servers outside the European Economic Area. We only work with parties that provide appropriate safeguards, such as certification under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep data
We do not keep data longer than necessary for the purpose it was collected for.
- Enquiries that do not lead to an assignment: 1 year
- Client and assignment data: 2 years after the last assignment
- Invoices and accounts: 7 years, as required by law
- Emails: 2 years
- Visitor statistics: with Cloudflare only as totals, without data that can identify you; with Google Analytics for up to 14 months
Cookies
Our website only places cookies for statistics (Google Analytics) if you give permission via the cookie notice. We do not use advertising cookies. You can change your choice at any time via "Cookies" at the bottom of the site. If you withdraw your consent, we remove the Google Analytics cookies from your browser. When a Vimeo or YouTube video loads, those services may store their own data in your browser. The client portal only uses a cookie that is needed to keep you logged in.
Security
We take appropriate measures to protect your data against loss and unauthorised access. The website and client portal use a secure connection (https), enquiries and client data are stored in a protected environment and only we have access to them.
Your rights
You have the right to access, correct or delete your data. You can also object to the processing, ask us to restrict it or receive your data in a common file format. Send your request to info@suspiciouslyfast.nl. We will respond within a month.
Not happy with how we handle your data? Let us know and we will look for a solution together. You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Changes
We may update this privacy policy, for example when our services or the law change. The date at the top shows when it was last updated.