Privacy policy
Who we are
EagleStream provides IT and technology products and services, including investment, infrastructure, software engineering and consulting. We are based at Weteringschans 165-C, 1017 XD Amsterdam, The Netherlands, and we are the controller for the personal data described here.
What we collect and why
When you contact us
If you use our contact form we receive your name, email address, company (if you give it), the topic you choose and your message. We use these only to reply and to follow up on your enquiry. Our legal basis is our legitimate interest in answering the people who write to us, or taking steps toward a contract at your request.
Analytics
With your permission, we use Google Analytics to understand which pages are visited and how the site performs. Analytics is switched off until you choose “Allow analytics”, and you can change your choice at any time with “Cookie settings” at the bottom of every page. Google Analytics sets cookies that start with _ga. We do not combine analytics data with other personal data, and we do not use it for advertising.
Website security and delivery
Our hosting server and Cloudflare, which protects and speeds up this site, process technical data such as IP addresses and browser details to deliver pages and block abuse. The contact form uses Cloudflare Turnstile to tell people and bots apart. We keep a short-lived, anonymised record of form submissions per network address to limit spam.
Clients
When we deliver services, we process the contact and billing details needed to fulfil our contract. Card payments are handled by Stripe; we never see or store full card details.
Who we share data with
We do not sell or rent personal data. We share it only with service providers that help us run our business, under agreements that require them to protect it:
- Twilio SendGrid, which delivers contact form messages to our inbox
- Google, for analytics when you allow it
- Cloudflare, for site security, performance and bot protection
- Stripe, for client payments
Some of these providers process data outside the European Economic Area. Where they do, transfers are covered by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. We may also disclose data where the law requires it, or to a successor if our business is reorganised or sold.
How long we keep it
We keep enquiries for as long as the conversation is active and up to two years afterwards, client records for as long as Dutch tax and company law requires, and analytics data for 14 months.
Your rights
You can ask to access, correct, delete, restrict or receive a copy of your personal data, and you can object to processing based on legitimate interest. You can withdraw consent for analytics at any time. We will confirm your identity before acting on a request and respond within one month. If you are unhappy with how we handle your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Security
This site is served only over encrypted connections, and the contact form sends messages without storing them on our web server. No method of sending data over the internet is completely secure, so please do not send passwords or other highly sensitive information through the form.
When we act as a processor
When we host or handle data on behalf of our clients, the client is the controller and our data processing agreement with that client applies instead of this policy.
Changes and contact
We review this policy regularly and will post any changes here with a new date. For any privacy question, use the contact form.