Legal
Last updated 1 October 2026
Privacy Policy
Demo text for the fictional agency Lockwater — replace it with your own policy and have it reviewed. This is not legal advice.
Last updated: September 30, 2026
Last updated: September 30, 2026
This policy explains what personal data we collect through this website, why, who processes it for us and what your rights are.
This policy explains what personal data we collect through this website, why, who processes it for us and what your rights are.
Who is responsible for your data
Who is responsible for your data
The controller is Lockwater Performance B.V. (demo), a performance-marketing agency registered in Amsterdam, the Netherlands (“Lockwater”, “we”, “us”). Questions go to privacy@lockwater.example.
The controller is Lockwater Performance B.V. (demo), a performance-marketing agency registered in Amsterdam, the Netherlands (“Lockwater”, “we”, “us”). Questions go to privacy@lockwater.example.
What we collect
What we collect
Growth Audit form. Your website address, industry, monthly ad spend band, monthly revenue band, main paid channel, main goal, timeline, full name, work email, company, role and your consent.
Growth Audit form. Your website address, industry, monthly ad spend band, monthly revenue band, main paid channel, main goal, timeline, full name, work email, company, role and your consent.
Contact form and call booking. Your name, email address, company and message. When you book a call, the scheduler also records the slot you pick, your time zone and any notes you add.
Contact form and call booking. Your name, email address, company and message. When you book a call, the scheduler also records the slot you pick, your time zone and any notes you add.
Job applications. Your name, email address, CV, portfolio links and anything else you send to jobs@lockwater.example.
Job applications. Your name, email address, CV, portfolio links and anything else you send to jobs@lockwater.example.
Usage data. Our hosting provider logs your IP address, browser type and the pages you request. If you accept analytics cookies, we also collect pages viewed, the referring site, approximate location and device type.
Usage data. Our hosting provider logs your IP address, browser type and the pages you request. If you accept analytics cookies, we also collect pages viewed, the referring site, approximate location and device type.
Please don’t include sensitive data, such as health information, in free-text fields.
Please don’t include sensitive data, such as health information, in free-text fields.
Why we use it and our legal bases
Why we use it and our legal bases
To prepare your Growth Audit and answer your request. You ask us for this before any contract (Article 6(1)(b) GDPR).
To schedule and hold calls. Same basis: you ask us to meet.
To follow up about your audit or call. Our legitimate interest in answering business inquiries (Article 6(1)(f)). We stop when you ask, and we don’t add you to a newsletter.
To assess job applications. Steps before a possible employment contract (Article 6(1)(b)), and your consent if you let us keep your details for future roles (Article 6(1)(a)).
To measure how the site is used. Your consent (Article 6(1)(a)), given in the cookie banner.
To keep the site secure. Our legitimate interest in protecting the site (Article 6(1)(f)).
To meet legal obligations, such as bookkeeping rules once you become a client (Article 6(1)(c)).
To prepare your Growth Audit and answer your request. You ask us for this before any contract (Article 6(1)(b) GDPR).
To schedule and hold calls. Same basis: you ask us to meet.
To follow up about your audit or call. Our legitimate interest in answering business inquiries (Article 6(1)(f)). We stop when you ask, and we don’t add you to a newsletter.
To assess job applications. Steps before a possible employment contract (Article 6(1)(b)), and your consent if you let us keep your details for future roles (Article 6(1)(a)).
To measure how the site is used. Your consent (Article 6(1)(a)), given in the cookie banner.
To keep the site secure. Our legitimate interest in protecting the site (Article 6(1)(f)).
To meet legal obligations, such as bookkeeping rules once you become a client (Article 6(1)(c)).
The Growth Audit form shows a calendar or a paid-audit offer depending on your spend band. This has no legal or similarly significant effect on you.
The Growth Audit form shows a calendar or a paid-audit offer depending on your spend band. This has no legal or similarly significant effect on you.
Who we share it with
Who we share it with
We use a small number of service providers that process data on our behalf under written data processing agreements:
We use a small number of service providers that process data on our behalf under written data processing agreements:
a website hosting provider, which serves the site and keeps server logs;
a form-handling service, which receives form submissions;
a scheduling service, which shows available times and sends booking confirmations;
an analytics service, which counts visits only after you consent;
an email and workspace provider, which we use to reply to you;
a CRM, where we track inquiries and client conversations.
a website hosting provider, which serves the site and keeps server logs;
a form-handling service, which receives form submissions;
a scheduling service, which shows available times and sends booking confirmations;
an analytics service, which counts visits only after you consent;
an email and workspace provider, which we use to reply to you;
a CRM, where we track inquiries and client conversations.
Some providers are based outside the European Economic Area, for example in the United States. For those transfers we rely on an adequacy decision, such as the EU-US Data Privacy Framework, or on Standard Contractual Clauses, and you can ask us for a copy.
Some providers are based outside the European Economic Area, for example in the United States. For those transfers we rely on an adequacy decision, such as the EU-US Data Privacy Framework, or on Standard Contractual Clauses, and you can ask us for a copy.
We don’t sell your data or share it with advertisers. We disclose it only when the law requires us to or to protect our legal rights.
We don’t sell your data or share it with advertisers. We disclose it only when the law requires us to or to protect our legal rights.
How long we keep it
How long we keep it
Growth Audit and contact inquiries that don’t lead to a project: 12 months after our last contact.
Call bookings: 12 months after the call.
Client records: for the length of the contract; financial records for seven years, as Dutch tax law requires.
Job applications: four weeks after the process ends, or up to 12 months if you agree that we may keep them.
Server logs: up to 30 days. Analytics data: up to 14 months.
Growth Audit and contact inquiries that don’t lead to a project: 12 months after our last contact.
Call bookings: 12 months after the call.
Client records: for the length of the contract; financial records for seven years, as Dutch tax law requires.
Job applications: four weeks after the process ends, or up to 12 months if you agree that we may keep them.
Server logs: up to 30 days. Analytics data: up to 14 months.
Your rights
Your rights
Under the GDPR you can ask us to:
Under the GDPR you can ask us to:
give you a copy of the personal data we hold about you;
correct data that is wrong or incomplete;
delete your data;
restrict or object to how we use it;
send the data you gave us to you in a portable format.
give you a copy of the personal data we hold about you;
correct data that is wrong or incomplete;
delete your data;
restrict or object to how we use it;
send the data you gave us to you in a portable format.
You can also withdraw your consent at any time; this doesn’t affect what we did before. Email privacy@lockwater.example and we’ll reply within one month. If you’re unhappy with our answer, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or to the supervisory authority where you live.
You can also withdraw your consent at any time; this doesn’t affect what we did before. Email privacy@lockwater.example and we’ll reply within one month. If you’re unhappy with our answer, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or to the supervisory authority where you live.
Cookies
Cookies
Strictly necessary cookies remember your cookie choice and protect our forms from spam. They don’t need consent.
Analytics cookies show us which pages are useful. We set them only if you accept them in the cookie banner.
The embedded scheduler may set its own cookies when the calendar loads. Its provider’s privacy policy applies to that part of the page.
Strictly necessary cookies remember your cookie choice and protect our forms from spam. They don’t need consent.
Analytics cookies show us which pages are useful. We set them only if you accept them in the cookie banner.
The embedded scheduler may set its own cookies when the calendar loads. Its provider’s privacy policy applies to that part of the page.
To change your choice, clear this site’s cookies in your browser and the banner will reappear.
To change your choice, clear this site’s cookies in your browser and the banner will reappear.
Security
Security
We use encrypted connections, limit access to the people who need it and use two-factor authentication. If a breach puts your data at risk, we’ll tell you and the authorities as the law requires.
We use encrypted connections, limit access to the people who need it and use two-factor authentication. If a breach puts your data at risk, we’ll tell you and the authorities as the law requires.
Changes to this policy
Changes to this policy
When our practices change, we update this page and the date at the top, and we flag significant changes on the site.
When our practices change, we update this page and the date at the top, and we flag significant changes on the site.
Contact
Contact
Lockwater Performance B.V. (demo), Amsterdam, the Netherlands. Email privacy@lockwater.example.
Lockwater Performance B.V. (demo), Amsterdam, the Netherlands. Email privacy@lockwater.example.