Privacy policy

Hault Agency VOF is the controller for the personal data you share through the English pages of this website. Hault Agency VOF is a Dutch general partnership (vennootschap onder firma), and you can reach us about your data through the details below.

The address in Kadıköy, Istanbul, is the registered address of our Turkish company, Hault Agency Ltd. Şti. The Turkish pages of this website have their own privacy notice.

We only receive personal data when you send us something, such as a request through the project form, a booking for an intro call or your email address after a free SEO check. You can read every page and use the free SEO check without telling us who you are.

The project form

When you send the project form on our Start a project page, we receive the answers you choose and the details you type in. These are the services you're interested in, your market, your budget band, when you'd like to start, your name, your email address, your company and your website. If you open 'Tell us more (optional)', we also receive your phone number, your message and the link to your brief, but only if you fill them in.

With your request we also save a few details about how you found us. These are the language of the page, the page you sent the form from and the website that referred you. We also save the page where your visit started and any campaign tags (utm) in the link. They don't tell us who you are, and we only keep them together with your request.

We use your request to reply to you, to prepare the intro call and, if you want one, to write a proposal. Each request gets an internal label based on your answers, such as the budget band and the services you chose, so we can reply in the right order. A person always reads your request, and the label never decides anything on its own.

The legal basis is Article 6(1)(b) GDPR, because you ask us for a proposal and we need your details to take that step before a possible contract. That's why the form has no consent checkbox.

Booking an intro call

When you book an intro call, you pick a time in our calendar yourself. Your name, your email address, the time you choose and, for a phone call, your phone number then go into our calendar in Google Workspace. If your request mentions your company and the topics you'd like to discuss, we add them to the description of the appointment, so we can prepare the call. The message you typed in the project form does not go into the appointment.

The founders receive the appointment in their own calendars, and Google sends you an invitation by email. For a video call, it contains a Google Meet link. Google processes these details on our behalf. The legal basis is again Article 6(1)(b) GDPR, because you ask us for an intro call, and we keep the appointment for as long as your request, which is 12 months.

The free SEO check

When you use the free SEO check, our server opens the web address you enter and reads that one page. It also sends the address to Google PageSpeed Insights to measure how fast the page loads on mobile. If you don't leave an email address, we don't save the check as a request, and we only count that a check took place.

If you do leave your email address, we save it together with the address you checked and your results, so we can send you the results or a personal reply. The legal basis is again Article 6(1)(b) GDPR, because you ask us for this.

Spam protection and security

To keep the forms free of spam, our server checks every submission, for example how quickly the form was filled in and how many links it contains. It also uses your IP address to limit how many requests can come from one connection. Like every web host, Vercel processes technical data such as your IP address and browser type when you open a page. It needs that data to deliver the page and protect the website. The legal basis for this is our legitimate interest in a website that is safe and works well (Article 6(1)(f) GDPR).

Your cookie choice

When you choose in the cookie banner or in 'Cookie settings' which cookies we may use, we record that choice in a log. It holds the categories you allow, the version of the explanation you saw, the time, the language of the page and a random code. The same code is in the hault-consent cookie, and it says nothing about who you are. The log doesn't contain your IP address or your browser. Our server only uses your IP address briefly, as with the forms, to stop anyone from flooding the log.

We keep this log because the GDPR asks us to be able to show that we have your consent (Article 6(1)(c) and Article 7(1) GDPR). We keep each recorded choice for 24 months: 12 months while it applies, and another 12 months so we can still show it.

Statistics and marketing cookies

Google Analytics and Google Ads are switched off right now. If we switch one on, it only runs after you allow the matching category in the cookie banner or in 'Cookie settings'. The legal basis is then your consent (Article 6(1)(a) GDPR), which you can withdraw at any time. Our cookie policy lists those cookies and how long they stay.

Emails

We only email you about your own request, for example with a reply, a confirmation or your results. We won't send you newsletters or marketing emails unless you ask for them.

We use five services that process data on our behalf, and each one only receives what it needs for its task. We don't sell your data, and we don't share it with anyone else unless the law requires us to.

Render hosts our own booking service. When you book an intro call, your name, email address, company, topics, the time you chose and, for a phone call, your phone number pass through that service to our calendar in Google Workspace. The service does not keep them; its log only holds the code of your request.

Our forms and the storage of requests run in Vercel's Frankfurt region (fra1) in Germany.

Vercel, Google and Render are companies from the United States, so your data may be processed outside the European Economic Area (EEA). Web3Forms may also process data outside the EEA. When that happens, the transfer relies on a safeguard that the GDPR allows, such as an adequacy decision of the European Commission or standard contractual clauses.

We keep personal data only for as long as we need it to answer your request, and then we delete it. These are the periods we use.

If you become a client, we keep the details we need for the project and for our business records for as long as the law requires.

We store every request encrypted, in private storage that isn't publicly accessible, and only Hault holds the key to read it. If we send you a confirmation email, it never repeats the message you typed. It only contains your first name and the answers you chose, so nobody can misuse the form to send spam to others.

You can ask us which personal data we have about you. You can also ask us to correct it, delete it or send it to you in a common file format. You can also object to how we use it, or ask us to limit its use. If you accepted cookies for statistics or marketing, you can withdraw that consent at any time through 'Cookie settings' at the bottom of every page.

Send your request to info@haultagency.com, and we'll reply within one month, as the GDPR requires. If you think we handle your data in the wrong way, please tell us first, so we can put it right. You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or to the data protection authority in the country where you live or work.

When we change how we handle personal data, we update this page and the date on it. Our cookie policy explains the cookies and browser storage on this website in more detail. This version is from 18 October 2026.