Privacy policy
Last updated: May 2026
This policy explains how TK Advisory(“I”, “me”) handles your personal data, in line with the Dutch implementation of the GDPR (the AVG). I am the data controller. For any question, email tamim@tkadvisory.nl.
Who is responsible
TK Advisory is the data controller, based at Braillelaan 103, 2037 XB Haarlem, the Netherlands (KvK 99084503). Contact: tamim@tkadvisory.nl.
What I collect
- Contact form: your name, email, optional company, an optional description of who you are, and your message.
- Newsletter: your email address, if you subscribe.
- Booking: when you choose to book a call, the name, email, and any notes you enter are processed by Cal.com and added to my calendar so the meeting can take place.
- Analytics: privacy-friendly, aggregated usage data — no cookies and no tracking of individuals.
Why I collect it, and the legal basis
- To respond to your enquiry and arrange calls — legal basis: your consent (given when you submit the form or load the booking calendar) and the steps taken at your request prior to a possible engagement.
- To send the newsletter — legal basis: your consent, withdrawable at any time via the unsubscribe link.
- To understand site usage in aggregate — legal basis: my legitimate interest in improving the site, using analytics that collect no personal data.
Tools and processors I use
- Vercel — hosts the website. It processes standard server logs (including IP addresses) to deliver and secure the site.
- Plausible Analytics — cookieless, privacy-friendly analytics, EU-hosted. No personal data is collected and nothing is shared with third parties for advertising.
- Resend — delivers contact-form emails to me.
- Cal.com — powers scheduling, only when you choose to load the calendar and book.
- Google Calendar — confirmed bookings are added to my own calendar so I can attend the meeting.
The booking calendar is not loaded until you actively click to load it, so no data is shared with Cal.com unless you choose to use it.
International transfers
Some of these providers may process data outside the EU (for example in the United States). Where that happens, the transfer is covered by appropriate safeguards such as the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework.
How long I keep it
I keep enquiry and booking data only as long as needed to handle your request and any resulting work, and newsletter data until you unsubscribe. After that it is deleted or anonymised.
Your rights
Under the AVG you can request access to, correction of, or deletion of your personal data, request restriction or portability, and object to processing or withdraw consent at any time. Email tamim@tkadvisory.nl and I will respond within the legal time limits. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).