Privacy Policy

Last updated: 13 October 2026

This notice covers alisonrose.nl, my portfolio, interactive demos, contact form, and newsletter signups. The controller responsible for your personal data is: A. Rose Creative , trading as Alison Rose Hasebroekstraat 6, 3532 GL Utrecht, the Netherlands KvK: 96891424 · VAT: NL005248820B81 alison@alisonrose.nl What I collect and why. Contact messages: your first and last name, email, message, and any optional information about how you found me or the tool you are asking about. I use these to reply and discuss your request. The legal basis is taking steps at your request before a contract, or my legitimate interest in answering other enquiries. Newsletter: your name, email, and opt-in information, only if you choose to subscribe. The legal basis is consent. Submitting a contact message does not require a subscription. You can unsubscribe using the link in any newsletter. Optional analytics: if you allow analytics, Umami records page visits, browser/device information, and referring pages to help me understand how the site is used. This is based on consent. It does not use tracking cookies or collect contact-form contents. I exclude URL queries and fragments, and do not assign a personal user identifier. The analytics service receives network information when your browser connects. Security and delivery: hosting providers process technical connection data, such as IP addresses, to deliver and secure the site. Short-lived rate-limit counters help prevent spam and abuse. This is based on my legitimate interest in keeping the site working safely. Please avoid including sensitive personal information in a contact message unless it is necessary for your enquiry. Cookies, browser storage, and your choices. The privacy bar lets you choose essential only, allow optional features, or select analytics and external forms separately. Neither optional category loads until you allow it. Use Cookie settings in the footer to change or withdraw your choice at any time. Withdrawing permission reloads the page to stop integrations already running. Your choice is saved in this browser for up to 180 days. Local demo interactions, such as a game or planner, may also save their state in your browser. You can clear that data through your browser settings. The site editor uses necessary authentication and editing storage for its owner. External newsletter forms from MailerLite may set cookies or local storage, including a form identifier and submission/display preferences. Those forms are blocked until you permit external forms. Umami is cookieless, but I still ask before loading it. I honour Do Not Track and Global Privacy Control for analytics. Interactive demos and external links. The portfolio demos use example content and local interactions. They do not create a live Daylight, community, or Wren Sent account, send real messages to demo members, take payments, or generate live AI reports. Changes you make in a demo may remain in your browser. Demos are public: please do not enter private information into them. If you follow a link to Daylight, Wren Sent, after + co., a booking page, or another website, that service's own privacy notice applies. This portfolio does not collect the birth details or payment data used by those separate services. Who helps operate the site. Railway: hosting and site-content database. Resend: delivery of contact-form messages to my inbox. MailerLite: newsletter subscriptions and optional embedded signup forms. The subscription endpoint is operated through my shared Alison Rose auth service. Umami: optional analytics on my Railway-hosted analytics service. Cloudflare R2: image storage when uploaded site assets use this service. I do not sell personal data. Information is shared with these providers only as needed to operate the relevant feature, and with authorities when legally required. How long information is kept. Contact enquiries are kept for up to one year after the last contact, unless needed for an ongoing project, a legal obligation, or a dispute. Newsletter subscriptions are kept until you unsubscribe. A limited suppression or consent record may be retained to respect that choice and document consent. Privacy choices expire after 180 days. Demo state remains in your browser until you reset it or clear browser data. Rate-limit counters expire within 15 minutes. Analytics retention is reviewed at least annually; data that is no longer needed is deleted or aggregated. Security and international processing. I use HTTPS, restricted editor access, input validation, and other proportionate safeguards. Some providers may process data outside the European Economic Area. Applicable GDPR transfer safeguards, such as an adequacy decision or standard contractual clauses, must cover those transfers. You can contact me for information about the safeguards applicable to your data. Your rights. Depending on the circumstances, you can ask to access, correct, delete, or transfer your personal data, restrict processing, or object to processing based on legitimate interests. You can withdraw consent without affecting processing that was lawful before withdrawal. Email alison@alisonrose.nl . I may ask for proportionate verification and will normally respond within one month. You can also complain to the Dutch Autoriteit Persoonsgegevens or your local data protection authority. Changes. I will update this page when the site's processing changes and show the updated date above.