← Back to the site

Privacy policy.

Last updated: 2 November 2026

1. Who we are

Flow First is a trade name of Twin Enterprises, based in Tilburg, the Netherlands, and registered with the Dutch Chamber of Commerce (KvK) under number 76032205. We are responsible for processing personal data as described in this policy. Questions? Email hello@flowfirstdigital.com.

2. What data we process

• Contact form: name, company name, email address, website (optional), your message and, if you choose, an indication of your marketing budget.
• Email and WhatsApp: your name, contact details and whatever you send us.
• Working together: the contact and billing details needed for the assignment.
• Technical data: our hosting provider processes data such as your IP address to keep the website secure and available.
• Website usage (only with your consent): which pages you view, for how long, where you came from, your device and browser, your approximate location (country/city) and whether you send the contact form. Google Analytics does not store your IP address.

3. Why we process it

• To respond to your enquiry and schedule an intro call (at your request and based on our legitimate interest).
• To carry out an assignment (performance of a contract).
• Administration and invoicing (legal obligation).
• To keep the website secure and working (legitimate interest).
• To measure how the website is used so we can improve it (only with your consent, which you can withdraw at any time).

We don’t send newsletters and we never sell your data.

4. How long we keep it

• Enquiries that don’t lead to working together: up to 12 months after the last contact.
• Client data: for as long as we work together, and up to 2 years after that.
• Invoices and records: 7 years, as required by Dutch tax law.
• Analytics data (Google Analytics): up to 14 months.
• Your cookie choice: stored in your own browser until you change it or clear your browser data.

5. Who we share it with

We work with a few carefully chosen service providers that process data on our behalf:

• TransIP: website hosting, email and contact form processing (servers in the Netherlands).
• Google Workspace: email and documents.
• WhatsApp (Meta): if you contact us via WhatsApp.
• Google Analytics (Google Ireland Ltd.): statistics on how the website is used, only with your consent. We have switched off data sharing with Google for other purposes and don’t use the data for advertising.

Some of these providers (also) process data outside the EU, mainly in the United States. This is done under the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses. Beyond that, we only share data when the law requires us to.

6. Cookies and analytics

We use Google Analytics 4 to measure how visitors use the website, for example which pages are viewed and how many enquiries come in. We only do this if you give permission through the cookie notice. Without your consent, we place no analytics cookies.

Google Analytics then places the cookies _ga and _ga_* (kept for up to 2 years). Google may process this data outside the EU, under the EU-US Data Privacy Framework. We don’t use the data for advertising and don’t share it with others.

Your choice is stored in your browser (in localStorage, under the name ff_consent). This is needed to remember your choice and doesn’t require consent. You can change your choice or withdraw your consent at any time via cookie settings (also at the bottom of the homepage). If you decline, the website still works fully.

Without consent, Google Analytics only sends anonymous, cookieless signals (Google Consent Mode), which Google uses to roughly estimate the number of visits. No data about you as a person is stored.

We don’t use marketing or advertising cookies. Fonts are loaded from our own server. The WhatsApp button only opens a link to WhatsApp; nothing is shared until you send a message there yourself.

7. Security

The website runs entirely over a secure connection (HTTPS). Only the people who need your data for your enquiry or assignment have access to it.

8. Your rights

You have the right to access, correct or delete your data, restrict processing, object, and have your data transferred. Send your request to hello@flowfirstdigital.com; we’ll respond within one month.

Not happy with how we handle your data? Let us know. You can also file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

9. Changes

We may update this privacy policy. The latest version is always on this page.