Privacy Statement

Privacy Statement

Last updated: 26 September 2026

1. Who we are

This Privacy Statement explains how empha6 (“Empha6”, “we”, “us” or “our”) processes personal data when you visit our website, contact us, communicate with us, or use our services.

Empha6 is a Netherlands-based marketing and corporate communications consultancy providing strategy, planning, guidance and content services primarily to businesses and other professional organisations.

Legal entity: empha6
Registered address: Zilverschoonlaan 3, 3452AA Vleuten, the Netherlands
Chamber of Commerce (KVK): 96427027
VAT number: NL005209544B97
Email: info@empha6.com
Telephone: +31 6 53546659
Represented by: John Blackwell

For questions about this Privacy Statement or the processing of your personal data, please contact us at info@empha6.com.

2. Whose personal data do we process?

We may process personal data relating to:

  • visitors to our website;
  • people who contact Empha6;
  • prospective customers and their representatives;
  • current and former customers and their representatives;
  • suppliers and professional advisers;
  • people whose information is provided to us by a customer where that information is necessary to perform an agreed service.

Empha6’s services are intended primarily for businesses and people acting in a professional capacity rather than for consumers.

3. What personal data may we process?

Depending on how you interact with Empha6, we may process:

  • name;
  • business email address;
  • telephone number;
  • company name;
  • job title or professional role;
  • business address;
  • billing and payment information;
  • correspondence and communications with Empha6;
  • information contained in documents or materials provided to us;
  • information relating to a project or engagement;
  • information contained in websites, marketing materials, communications or other business activities that we review as part of a service;
  • technical information associated with your use of our website, where applicable;
  • cookie and consent information, where applicable.

We will only request or use personal data that is relevant to the purpose for which it is processed.

4. How we obtain personal data

We may obtain personal data:

  • directly from you;
  • from your employer or organisation;
  • from a customer in connection with a project;
  • from publicly available business or professional sources;
  • automatically when you use our website, where applicable;
  • from service providers that support our website or business operations.

Where we receive personal data from a third party, we will process it in accordance with applicable data-protection law.

5. Why we process personal data

We may process personal data for the following purposes:

Responding to enquiries

We use contact information and correspondence to respond to enquiries, discuss potential services and communicate with prospective customers.

Providing services

We process information necessary to provide contracted consulting, strategy, planning, content, audit, assessment and related services.

This may include accessing customer websites, content-management systems, analytics platforms, CRM systems, marketing materials, communications platforms or other systems where this is necessary to perform an agreed service.

Managing customer relationships

We may process information to communicate with customers, schedule work, manage projects, provide deliverables, address questions and maintain records of our professional relationship.

Contract administration and invoicing

We process information necessary to prepare proposals, enter into agreements, issue invoices, receive payments and maintain business records.

Legal and regulatory obligations

We may process information where necessary to comply with legal, accounting, tax, regulatory or other applicable obligations.

Protecting our legitimate business interests

Where permitted by law, we may process personal data where this is necessary for legitimate interests such as maintaining business records, protecting our systems, preventing misuse, establishing or defending legal claims, and managing our business.

Website operation and improvement

We may process technical or usage information necessary to operate, secure and improve the website. Where applicable, analytics or other non-essential technologies will be used only in accordance with applicable cookie and privacy requirements.

6. Legal bases for processing

Depending on the circumstances, our legal basis for processing personal data may be:

  • Entering into or performing a contract – where processing is necessary to discuss, establish or perform an agreement with you, including preparing a proposal or quotation at your request;
  • Compliance with a legal obligation – where we are required by law to process your personal data;
  • Our legitimate interests – where processing is necessary for legitimate business purposes and those interests are not overridden by your rights and interests;
  • Your consent – where we are required to obtain your consent before processing your personal data. You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

7. Customer information and third-party personal data

Some Empha6 services require access to information held by a customer, including information that may relate to the customer’s employees, customers, prospects, suppliers or other individuals.

The customer remains responsible for ensuring that it has the appropriate legal basis and authority to provide Empha6 with access to such information and systems.

Where Empha6 processes personal data on behalf of a customer and applicable law requires Empha6 to act as a data processor, the parties may enter into a separate Data Processing Agreement or incorporate appropriate data-processing provisions into the applicable agreement.

Empha6 will process such personal data only to the extent reasonably necessary to provide the agreed services and in accordance with the customer’s documented instructions, subject to applicable law.

8. Service providers and other recipients

We may use third-party service providers to operate our business and provide our services. These may include providers of:

  • website hosting;
  • website and content-management services;
  • cookie-consent management;
  • email and communications;
  • cloud storage;
  • accounting and invoicing;
  • information technology and security;
  • professional advice;
  • analytics or other website services, where applicable.

We do not sell personal data.

Where appropriate, service providers process personal data on our behalf under contractual arrangements and applicable data-protection requirements.

9. International transfers

Because Empha6 may work with customers and service providers internationally, personal data may in some circumstances be processed outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will use an appropriate legal mechanism or safeguard required by applicable data-protection law.

Because we use service providers that may process personal data internationally, personal data may in some circumstances be processed outside the European Economic Area (EEA). Where required by applicable data-protection law, Empha6 will ensure that an appropriate legal basis and safeguards are in place for such transfers.

10. Artificial intelligence

Empha6 may use artificial-intelligence tools in connection with certain services, including research, drafting, editing, analysis or content development.

Where the use of an AI service could involve submitting customer information or confidential material to an external AI provider, Empha6 will seek the customer’s prior approval before doing so.

We will not knowingly use confidential customer information in an external AI service without the customer’s approval, except where otherwise expressly agreed.

AI-assisted material remains subject to Empha6’s professional review and editing where appropriate.

11. How long we retain personal data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to meet legal, accounting, tax, contractual or dispute-resolution requirements.

Different information may therefore be retained for different periods.

Unless a longer period is required or justified by law or a legitimate business need:

  • enquiry information will normally be retained only as long as reasonably necessary to manage the enquiry and any resulting relationship;
  • project and customer correspondence will normally be retained for the duration of the business relationship and for a reasonable period afterwards;
  • contracts and project records may be retained for as long as necessary to establish, exercise or defend legal claims;
  • financial and tax records will be retained for the period required by applicable tax and accounting law;
  • cookie-consent records will be retained as necessary to demonstrate and manage consent.

We will periodically review retained personal data and delete or anonymise information that is no longer required.

12. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

However, no method of transmitting or storing information can be guaranteed to be completely secure.

13. Your rights

Depending on the circumstances and applicable law, you may have the right to:

  • request access to your personal data;
  • request correction of inaccurate or incomplete data;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to certain processing;
  • request data portability;
  • withdraw consent where processing is based on consent;
  • lodge a complaint with a supervisory authority.

To exercise your rights, contact info@empha6.com.

We may need to verify your identity before fulfilling certain requests.

14. Complaints

If you have concerns about how Empha6 handles your personal data, please contact us first so that we can investigate and attempt to resolve the issue.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or another competent supervisory authority.

15. Third-party websites

Our website may contain links to third-party websites, including social-media platforms or other resources.

When you follow a third-party link, that third party’s privacy policy and terms apply. Empha6 is not responsible for the privacy practices of third-party websites.

16. Changes to this Privacy Statement

We may update this Privacy Statement from time to time to reflect changes in our services, technology, legal requirements or data-processing practices.

The latest version will be published on this page with its effective date.

17. Contact

If you have questions about this Privacy Statement or our handling of personal data:

empha6
Zilverschoonlaan 3
3452AA Vleuten
The Netherlands

Email: info@empha6.com
Telephone: +31 6 53546659