Privacy Policy

Get Stuff Done Development B.V. (GSD), Eekmolenweg 18, 7241 CM Lochem. Email: info@getstuffdone.nl. We are responsible for processing personal data within our services (custom PHP, integrations, APIs, hosting, maintenance & support).

• Contact details: name, email, phone, company name.
• Correspondence and project information you share with us.
• Invoice and payment data for business administration.
• Website visit data (functional cookies, preferences like theme/language; see cookie policy).

• Quote requests and communication: necessary for pre‑contractual steps.
• Execution of agreements: necessary for service delivery.
• Invoicing and administration: legal obligation.
• Improving website and services: legitimate interest with respect for privacy.

We do not keep data longer than necessary for the purposes, unless legislation prescribes a longer period (e.g. a 7‑year fiscal retention for administration). Preference cookies have limited durations (see cookie policy).

We do not share data with third parties unless needed for service delivery or legally required. When engaging parties (such as hosting or email providers), we conclude processor agreements with appropriate safeguards and limit data to what is necessary.

• Access limitation on a need‑to‑know basis.
• Encryption where appropriate and secure storage.
• Monitoring and logging to prevent misuse and detect incidents.

• Access, rectification, erasure and restriction of processing.
• Objection to processing based on legitimate interest.
• Data portability where applicable.

Exercise your rights via info@getstuffdone.nl. We respond as soon as possible and always within the statutory period. If you disagree with our handling, you can file a complaint with the Dutch Data Protection Authority.

We mainly place functional cookies for basic operation (such as a CSRF token), and preference cookies for language and theme. See the cookie policy for details and choices. Analytical cookies are configured in a privacy‑friendly way.

If data is processed outside the European Economic Area, we take appropriate safeguards (e.g. standard contractual clauses) or select vendors with an adequate level of protection.

In case of a data breach or security incident, we inform those involved and, where required, the supervisory authority. We provide relevant information about nature, impact and measures taken.

We may amend this statement when our services or laws change. The most current version is on this page.