Privacy Policy

Last updated: October 2025

1. Introduction

This Privacy Policy explains how I, The Joy Embassy, collect, use, and protect personal data when you visit my website thejoyembassy.com, contact me, or use my services.

I am committed to protecting your privacy and complying with the General Data Protection Regulation (EU 2016/679) (“GDPR”) and the Dutch GDPR Implementation Act (UAVG).

2. Who I am

Business name: The Joy Embassy
Legal form: Sole proprietorship (eenmanszaak)
Registered with: Kamer van Koophandel (KvK)
KvK number: 98205102
VAT number: NL005317589B20
Registered address: Keurenplein 41, Box E4008, 1069CD Amsterdam
Email: eva@thejoyembassy.com

I am the “data controller” responsible for processing your personal data.

3. What personal data I collect

I may collect and process the following types of personal data:

  • Contact details (name, email address, phone number)

  • Billing information (address, payment details, VAT number)

  • Website usage data (IP address, browser type, pages visited, time spent)

  • Communication data (messages or inquiries you send to me)

  • Cookies and analytics data (see my Cookie Policy)

4. How I use your data

I process personal data for the following purposes:

  • To provide my products or services

  • To process and deliver orders or contracts

  • To respond to inquiries or customer service requests

  • To send updates, invoices, or administrative messages

  • To analyze website traffic and improve my services

  • To comply with legal obligations (for example, tax and accounting laws)

5. Legal bases for processing

I process personal data under one or more of the following legal grounds:

  • Your consent (Article 6(1)(a) GDPR)

  • Performance of a contract (Article 6(1)(b) GDPR)

  • Compliance with a legal obligation (Article 6(1)(c) GDPR)

  • My legitimate interests (Article 6(1)(f) GDPR), such as improving my website and preventing fraud

6. Data retention

I keep your data only as long as necessary to fulfill the purposes above or as required by law (for example, Dutch tax law requires invoices to be kept for 7 years).

7. Sharing your data

I only share personal data with trusted third parties when necessary, such as:

  • IT and hosting providers

  • Payment service providers

  • Professional advisors (e.g., my accountant)

  • Legal authorities if required by law

All third parties are required to keep your data confidential and secure.

8. International data transfers

If I transfer your data outside the European Economic Area (EEA), I ensure that appropriate safeguards (such as the EU Standard Contractual Clauses) are in place.

9. Your rights

Under the GDPR, you have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion (“right to be forgotten”)

  • Restrict or object to processing

  • Withdraw consent at any time

  • Receive your data in a portable format

To exercise these rights, contact me at eva@thejoyembassy.com.

If you are not satisfied, you may lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority): https://www.autoriteitpersoonsgegevens.nl

10. Cookies

My website may use cookies or similar technologies. You can find more information in my Cookie Policy.

11. Security

I use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

12. Changes to this policy

I may update this Privacy Policy from time to time. Any updates will be posted on this page with the new “last updated” date.