Privacy Policy
Last updated: 8 September 2026
At d beard, privacy matters. This Privacy Policy explains what personal data is collected through dbeard.com and in connection with our services, why that information is processed, how long it may be retained, and what rights you have under the General Data Protection Regulation (GDPR).
1. Who we are
The data controller responsible for the processing described in this Privacy Policy is:
d beard
Independent Marketing
Wagenschutsweg 14
6415 RN Heerlen
The Netherlands
Dutch Chamber of Commerce (KVK): 98329847
VAT number: NL002893650B74
Email: info@dbeard.com
Website: https://dbeard.com
d beard is the independent marketing practice of Danny Krichel.
2. What personal data we collect
The personal data we collect depends on how you interact with d beard.
This may include:
- your name;
- email address;
- telephone number, if provided;
- company name and professional details;
- information you provide through a contact form or email;
- information relating to a project, enquiry, proposal or client relationship;
- newsletter subscription information;
- IP address and basic device or browser information;
- website usage and analytics information;
- cookie preferences;
- comments or other information you voluntarily submit through the website;
- billing and administrative information when you become a client.
We only aim to collect information that is reasonably necessary for the purpose for which it is used.
3. Contact requests and project enquiries
When you contact d beard through the website, email, telephone or another communication channel, we may process the information you provide in order to respond to your enquiry.
This can include your name, email address, company, telephone number, project information and the contents of your message.
We process this information because it may be necessary to take steps at your request before entering into a contract, or because we have a legitimate interest in responding to business enquiries and communicating with potential clients and partners.
If your enquiry does not result in a client relationship, we normally retain the correspondence for no longer than 24 months after the last meaningful contact, unless there is a legitimate reason or legal obligation to retain it for longer.
If the enquiry results in a project or client relationship, relevant information may become part of our business administration and contractual records.
4. Clients, projects and business relationships
When you work with d beard, we process information necessary to manage the business relationship and perform the agreed services.
This may include:
- contact information;
- company information;
- project briefs and correspondence;
- proposals and contracts;
- meeting notes;
- project files;
- billing information;
- invoices and payment records.
The legal basis for this processing is generally the performance of a contract, taking steps before entering into a contract, compliance with legal obligations and, where appropriate, our legitimate business interests.
Core financial and administrative records are generally retained for seven years in accordance with Dutch tax requirements.
5. Newsletter and MailPoet
d beard uses MailPoet to manage newsletter subscriptions and distribute email newsletters.
When you subscribe to the newsletter, we may process:
- your first name;
- your last name;
- your email address;
- your subscription status;
- the date and time of your subscription;
- technical information related to your registration and confirmation;
- information about newsletter opens and link clicks where this functionality is enabled.
Newsletter communications are sent on the basis of your consent.
Where double opt-in is used, you will first receive a confirmation email. Your subscription only becomes active after you confirm it.
You can unsubscribe at any time by using the unsubscribe link included in newsletter emails.
Subscriber information is primarily stored within the website’s WordPress database. MailPoet states that mailing lists, newsletters and subscriber data are stored on the website itself. If the MailPoet Sending Service is used, MailPoet may also process information needed to deliver and manage email campaigns, including recipient email addresses and sending logs.
MailPoet provides GDPR-related features and a Data Processing Agreement for its service.
Your newsletter data will normally be retained for as long as you remain subscribed. After unsubscribing, limited information may be retained where necessary to record and respect your opt-out or demonstrate compliance with privacy and marketing requirements.
6. Cookies and similar technologies
dbeard.com uses cookies and similar technologies to ensure the website works correctly, remember visitor preferences, understand website usage and, where applicable, measure marketing performance.
The website may use the following categories of cookies:
Functional cookies
These are required for the website or requested functionality to work correctly.
Preference cookies
These may remember choices made by visitors.
Statistics and analytics cookies
These help us understand how visitors use the website and which pages or content are useful.
Marketing cookies
Where used, these may support advertising, campaign measurement or tracking across websites.
Non-essential cookies are only intended to be activated after you have made a choice through the cookie consent mechanism.
You can change or withdraw your cookie consent through the website’s cookie settings.
For detailed information about individual cookies, purposes and retention periods, please refer to the website’s Cookie Policy or cookie settings.
7. Google Analytics 4
d beard uses Google Analytics 4 (GA4) to understand how visitors find and use dbeard.com and to improve the website and marketing activities.
Google Analytics may process information such as:
- pages visited;
- referral source;
- approximate geographic location;
- device type;
- operating system;
- browser;
- date and time of visits;
- website interactions;
- campaign and UTM parameters;
- pseudonymous identifiers associated with website usage.
Google states that Google Analytics 4 does not log or store visitors’ IP addresses.
For users in the European Economic Area, relevant Google Analytics data may be processed by Google Ireland Limited. Depending on the service and processing involved, data may also be processed by other Google entities or infrastructure outside the EEA. Google provides contractual safeguards for relevant international data transfers.
Google Analytics is only intended to be activated after the required consent has been provided through the cookie consent mechanism.
The legal basis for the use of Google Analytics is therefore consent, where required under applicable privacy and cookie rules.
GA4 allows website owners to configure retention periods for user-level and event-level data. We use GA4 retention periods of 14 months for this type of data.
8. Website hosting by STRATO
dbeard.com is hosted by:
STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
STRATO may process technical information required to host and secure the website, such as:
- IP addresses;
- server logs;
- browser and device information;
- website requests;
- contact and form data stored on the server;
- website and database content.
The legal basis for this processing is our legitimate interest in providing a secure, reliable and efficient website, as well as the performance of contractual obligations where applicable.
STRATO states that customer data for its hosting services is processed in its data centres in Germany.
STRATO also provides a Data Processing Agreement under Article 28 GDPR. For contracts entered into from 18 July 2022 onwards, STRATO states that the agreement is included automatically.
9. Embedded content and external services
Pages on dbeard.com may contain embedded content, such as videos, maps, social media content, images or other external media.
Embedded content may behave in the same way as if you had visited the external website directly.
External providers may receive information such as your IP address, browser or device information and interactions with the embedded content.
If you are logged in to an account with the external provider, your activity may also be associated with that account.
Where an embedded service uses non-essential tracking technologies, it should only be loaded after the required consent has been provided.
10. Comments
If commenting functionality is enabled and you leave a comment, we may collect the information entered in the comment form, as well as technical information such as your IP address and browser user agent.
This information may be used to publish and moderate comments and detect spam.
If Gravatar is used, an anonymised version of your email address may be shared with the Gravatar service to determine whether a profile image is associated with your account.
Comments and related metadata may be retained for as long as reasonably necessary for publication, moderation, security or legal purposes.
11. Security and spam prevention
Technical information such as IP addresses, request data and browser information may be processed to protect the website against spam, fraud, malicious activity, unauthorised access and other security threats.
The legal basis for this processing is our legitimate interest in maintaining a secure and reliable website.
Hosting providers, security tools and automated spam detection services may process limited personal data for these purposes.
12. Who we share personal data with
d beard does not sell personal data.
Personal data may be processed or shared with service providers where necessary to operate the website and business.
This currently includes, where relevant:
- STRATO GmbH, for website hosting and infrastructure;
- MailPoet, for newsletter management and email delivery;
- Google Ireland Limited / Google Analytics, for website analytics;
- cookie consent and privacy management providers;
- security and spam prevention services;
- IT and software providers;
- accounting and administrative services;
- professional advisers where necessary;
- public authorities where disclosure is legally required.
These providers only receive information that is reasonably necessary for the relevant service.
13. International transfers of personal data
Some service providers may process personal data outside the European Economic Area.
Where such transfers occur, appropriate legal safeguards are used where required. These may include:
- an adequacy decision issued by the European Commission;
- Standard Contractual Clauses;
- another GDPR-recognised transfer mechanism.
For example, some MailPoet service providers may operate outside Europe, including providers in the United States, and Google may use international processing infrastructure.
14. How long we keep personal data
We do not retain personal information longer than necessary for the purpose for which it was collected.
As a general guideline:
- General enquiries: normally up to 24 months after the last meaningful contact
- Newsletter subscribers: for as long as the subscription remains active
- Client and project information: for the duration of the relationship and afterwards where legally or commercially necessary
- Invoices and core financial administration: generally 7 years
- GA4 user and event data: according to the configured Google Analytics retention setting
- Cookies: according to the retention periods shown in the Cookie Policy
- Comments: for as long as reasonably necessary for publication and moderation
- Security logs: for as long as reasonably necessary for security and troubleshooting
15. Your rights under the GDPR
Depending on the circumstances, you may have the right to:
- access the personal data we hold about you;
- request correction of inaccurate information;
- request deletion of personal data;
- restrict certain processing;
- object to certain processing;
- request data portability;
- withdraw consent at any time where processing is based on consent.
Withdrawing consent does not affect processing that lawfully took place before the withdrawal.
Privacy requests can be sent to:
We may need to verify your identity before processing certain requests.
16. Complaints
If you have questions or concerns about the way d beard processes your personal data, please contact us first at:
You also have the right to lodge a complaint with a data protection authority.
As d beard is established in the Netherlands, the relevant supervisory authority is:
Autoriteit Persoonsgegevens
The Hague
The Netherlands
17. Automated decision-making
d beard does not use personal data to make solely automated decisions that produce legal or similarly significant effects for website visitors, newsletter subscribers or prospective clients.
18. Children
The d beard website and services are primarily intended for businesses and professional users and are not specifically directed at children.
We do not knowingly seek to collect personal data from children through the website.
19. Data security
Reasonable technical and organisational measures are used to protect personal data against accidental loss, misuse, unauthorised access, disclosure or alteration.
No online system can be guaranteed to be completely secure, but measures are taken that are appropriate to the nature of the data and the services provided.
20. Changes to this Privacy Policy
This Privacy Policy may be updated when the website, services, technology providers or legal requirements change.
The latest version will always be published on dbeard.com together with the date on which it was last updated.
