Privacy statement
What data we use, why, for how long, and what you can do about it.
This is an English translation of the Dutch privacy statement. If the two differ, the Dutch version applies.
Last updated: 20 October 2026 (draft).
In this statement you can read what data Prima Zaak uses, why, for how long, and what you can do about it. We keep it short and honest: we collect no more than we need.
1. Who is responsible
Prima Zaak is responsible for the processing of your data. Prima Zaak is a sole proprietorship (eenmanszaak) based in Weert, the Netherlands. We have been registered with the Dutch Chamber of Commerce (KvK) since 13 October 2026.
- Place of business: Weert (Limburg, the Netherlands)
- Address: Wilhelminasingel 230 A 1, 6001 GV Weert
- KvK number: 42192099
- VAT ID: NL005567527B08
- Email: [email protected]
- WhatsApp (messages only, no calls): +31 6 38 27 27 68 (opens in a new tab)
For any question about privacy, you can contact Prima Zaak using the details above.
2. Businesses we approach (example websites)
We make an example website for businesses that do not have a website yet. Then we send a letter with a link to that example site. Our AI does this work, under the supervision of a person.
We approach you only by letter. Not by email, WhatsApp or phone, unless you contact us first.
What data
Only business details from public sources, such as:
- business name and address;
- public phone number;
- opening hours;
- the type of business.
We take these details from Google (Google Maps and the Google Business Profile). We do not use photos, logos or reviews of your business for your example.
For a sole proprietorship or a general partnership (vof), these details can also say something about the owner, for example if the owner’s name is part of the business name. That is why we treat them as personal data.
Why, and on what legal basis
We use these details to make an example website and to approach you once by letter. The legal basis is our legitimate interest: showing what we can make for your business. We have weighed up that this is only a small intrusion, because we use only public business details and you can easily opt out.
How we limit this
- The example site has its own address on try.prestido.com, with a code that is hard to guess (for example https://try.prestido.com/k7f3q9x2ab/prima-zaak-bakery/). You can only find it through the letter or the email you received from us.
- The example site is not indexed by search engines (noindex).
- If you do not respond, we delete both the example site and the details we used to make it within 30 days of the letter. These include the name, address and phone number of your business. After that, we keep only data that cannot be traced back to you or your business, such as the type of business and the town, for our own statistics.
- You can always ask us to delete the example site and your details straight away. If you have told us you do not want to be contacted (“not interested”), we keep only your business name and address on a block list, so that we do not approach you again.
3. Requesting an example through our website
How it works. On the Request your free example page, you fill in what kind of business you have and where. On the Got a letter? page, you type the link from your letter; it opens your example on try.prestido.com. The page sends and stores none of this. Your own WhatsApp or email program opens with a message that you see first and send yourself. What you send us this way, we treat as an ordinary message (see section 4 below).
About your business, we use only public details from Google: name, address, phone number, opening hours and the type of business.
How long: we keep the details of your request for 30 days. After that we take your example down and erase your email address and the details of your business (name, address, phone number), unless you have replied to us. In that case we keep the conversation for as long as needed for your question or your order. After that we keep only data that cannot be traced back to you, for statistics, such as the type of business and the town.
Our AI: the example is made by AI from Anthropic. A person at Prima Zaak checks it before you get the link. Answers to your emails and WhatsApp messages are written first by our AI assistant. For that, the details of your business and your messages go to Anthropic. A person checks every website before it goes online.
Where: email runs through Zoho (EU).
4. When you contact us
You can reach us by email and by WhatsApp message. We then use your name, phone number or email address and the content of your message or conversation. We do this to answer your question and, if you want, to prepare an agreement. The legal basis is our legitimate interest in answering your question, or the preparation of an agreement.
An AI assistant first
Emails and WhatsApp messages are answered first by our AI assistant. For now, a person reads every reply before it is sent. The AI assistant always says that it is an AI and answers in your own language. If you would like to speak to a person, that is always possible: say so, and a person takes over. A person answers in English. Agreements on price and the conclusion of an agreement are always handled by a person at Prima Zaak. The AI assistant makes no decisions about you that have legal effects.
For the AI assistant, the content of your message or conversation goes to Anthropic, the maker of the AI we use. Anthropic processes the data on our behalf. See processors.
Messages you send us via WhatsApp are also processed by Meta (WhatsApp), under WhatsApp’s own privacy policy.
The checking currently happens through Telegram, a messaging service outside the European Union: your message and our AI assistant’s draft reply go to the owner of Prima Zaak in Telegram. The owner approves the reply, changes it or does not send it. We are replacing Telegram with our own app, which runs inside the European Union. You can read more about this under who helps us.
If you call us
Our number is for WhatsApp messages only. If you call anyway, you hear a recorded message saying that we cannot be reached by phone and that you can email us. The call then ends. We do not record calls with callers.
We do keep your phone number and the time of your call (the call log), so that we can see who tried to reach us. The legal basis is our legitimate interest in being reachable. We erase these details after 3 months.
In the past you could leave a voicemail on this number, and our AI assistant also handled phone calls. We keep those recordings and the written transcripts of those calls sealed, so that nobody can change them. We erase them 3 months after the date of the call.
5. Customers
If you become a customer, we use the data needed for the agreement:
- name, business name, address, email address and phone number;
- Chamber of Commerce (KvK) number and VAT ID;
- payment and billing details;
- the texts and photos for your website;
- the details needed to register your domain name in your name.
The legal basis is the performance of the agreement. For the accounts there is a legal obligation: the Dutch tax rule to keep records for 7 years.
Payments run through Mollie, which processes your payment details for that purpose (see who helps us).
6. Visitors to this website
- We use no cookies and do not track you. That is why you do not see a cookie notice either.
- Your choice of view of the street (day, morning, sunset, evening) and closing the language bar are remembered only on your own device (localStorage: pz-look and pz-taal-voorstel). That is not a cookie and not a tracking system; it is not sent anywhere.
- The website runs through Cloudflare. For technical reasons, Cloudflare processes your IP address to deliver and secure the site, for example against attacks. The legal basis is our legitimate interest in a secure, working website.
- Google. Fonts are on our own server; the website loads nothing from Google. We do use Google Search Console. In it, Google shows how often our website appears in Google’s search results and how often it is clicked. Those figures come from Google’s own search engine, not from this website, and are never about an identifiable visitor.
7. Who helps us (processors)
We work with a few services that process data on our behalf. We make agreements with them on security and confidentiality. We never sell your data.
| Service | What for |
|---|---|
| Cloudflare | Hosting of this website and of the example sites; security |
| Google (Places API) | Looking up public details of businesses for an example |
| Anthropic | The AI assistant that answers messages and conversations first |
| WhatsApp (Meta) | Messages you send us via WhatsApp (Meta also processes them under its own privacy policy) |
| Zoho Mail (European data centre) | |
| Mollie (the Netherlands) | Payments of your subscription and invoices (iDEAL, credit card). For the payment itself, Mollie is also responsible in its own right, under its own privacy statement. |
| Odido | Our business mobile number, for WhatsApp messages. Anyone who calls anyway hears a recorded message; see if you call us. |
| TransIP | Registration of customers’ domain names |
In addition, we currently use Telegram, a messaging service outside the European Union. Your messages and our AI assistant’s draft replies go through Telegram to the owner of Prima Zaak. The owner reads them and approves, changes or does not send them before anything is sent. Telegram stores these messages on its own servers. We have no separate agreements with Telegram about your data, and the European Commission has not issued an adequacy decision for the country where Telegram is based. That is why we are replacing Telegram with our own app, which runs inside the European Union.
Apart from this, we share data only when the law requires it, for example with the Dutch Tax Administration (Belastingdienst).
8. Data outside the European Union
Some of the services above are American or may process data outside the European Union, such as Anthropic. This happens only with appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework.
Telegram also processes data outside the European Union, without these safeguards; see who helps us.
You can ask us for more information about this.
9. How long we keep data
| Data | Retention period |
|---|---|
| Example site and details of businesses we approached | Up to 30 days after the letter if you do not respond, or sooner if you ask |
| Example requests (the details we use to make your example, and your email address in our example records) | 30 days; longer only if you reply to us. The message with which you requested the example falls under messages and conversations below. |
| “Do not contact” list (business name and address only) | As long as needed so that we do not approach you again |
| Messages and conversations if you do not become a customer | 3 months after the last contact |
| Customer data for the agreement | As long as the agreement runs. After that we keep invoices and accounts for 7 years (legal retention obligation); other data for 1 year. |
| Phone number and time of a call (call log) | 3 months |
| Earlier recordings and written transcripts of phone calls (voicemail and our former AI phone assistant) | 3 months after the date of the call |
| Technical data at Cloudflare (such as IP addresses) | Briefly, according to Cloudflare’s retention periods |
10. Your rights
You have the following rights:
- Access: you can find out what data we hold about you.
- Correction: if your data is wrong, we correct it.
- Erasure: you can ask us to delete your data, unless we are required by law to keep it.
- Objection: you can object to use based on legitimate interest. If you do not want us to make an example site for you or to approach you, let us know. We then stop straight away, delete the example site and do not approach you again.
- Restriction: you can ask us to restrict the use of your data for a while.
- Portability: you can get the data you gave us in a common file format.
Send your request to [email protected], or let us know by WhatsApp message. We respond within one month. Sometimes we ask you to show who you are, so that we do not give data to the wrong person. A request is free of charge.
11. Making a complaint
If you are not satisfied with how we handle your data, let us know first, and we will look for a solution together. You also always have the right to make a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), via autoriteitpersoonsgegevens.nl (opens in a new tab).
12. Security
We protect your data as well as is reasonably possible. For example:
- encrypted connections (https) for all websites;
- strong passwords and two-step verification on our accounts;
- only the owner has access to your personal data; a partner, only if you ask for one, sees only the public information on your website;
- we keep no more data, and for no longer, than needed.
If something does go wrong with your data, we report it as required by law to the Dutch Data Protection Authority and, where necessary, to you.
13. Changes
We may change this privacy statement, for example if we start using a different service. The latest version is always on this page, with the date at the top. We let customers know about important changes.