Privacy Policy

Beyond Hype Social Last updated: 1 November 2026

We keep this simple. This policy explains what personal data we collect when you visit our website, contact us or work with us, why we need it, and what your rights are. We follow the EU General Data Protection Regulation (GDPR, known in the Netherlands as the AVG).

Who we are

Beyond Hype Social is a trade name of Jenny Strandberg Creative, a sole proprietorship (eenmanszaak) registered in the Netherlands.

  • Chamber of Commerce (KvK) number: 94442207

  • VAT/BTW number: NL005084058B03

  • Address: our registered address is recorded with the Dutch Chamber of Commerce (KvK) and is available on request.

Privacy and legal contact: info@jscreative.pro

Jenny Strandberg Creative is the controller for the personal data described in this policy. That means we decide why and how it is used, and we're responsible for looking after it. For any question or request about your data, email us at info@jscreative.pro.

What data we collect and why

When you fill in our contact form

We ask for:

  • your name

  • your email address

  • your business or brand name

your Instagram handle or website (optional)

which package you're interested in

your message

Why: to reply to you, usually within 2 working days, to understand your business, and to arrange a free fit call if you'd like one. Legal basis: taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR).

We don't ask for, and don't store, sensitive information such as health details. Please don't include it in your message.

When you book a fit call

Fit calls are always free. Right now you can request one through the contact form. If we add an online booking tool later, it will collect your name, email, chosen time and any notes you add. We'll update this policy and name the tool when that happens. Legal basis: steps before a contract (Art. 6(1)(b) GDPR).

When you become a client

To deliver our services we process:

  • contact details of you and your team (name, email, phone number if you share it)

billing details (business name, billing address, VAT number, payment information), kept in our accounting software

emails, briefs, feedback and approvals

the content, brand materials and account access you share with us

We create and store content in Canva and Google Drive. We deliver finished work through Google Drive or another channel you prefer.

Why: to carry out the agreement, plan and publish content, communicate with you, send invoices and keep our records. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and our legal obligations, such as tax record-keeping (Art. 6(1)(c) GDPR).

When you visit our website

Our website runs on Squarespace. When you visit, technical data is processed automatically, such as your IP address, browser and device type, the pages you visit and when. We use this to keep the site secure and working. Legal basis: our legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR).

Once we add Google Analytics and the Meta Pixel, we'll use them to understand how visitors use our site and to measure and improve our advertising. These tools are only switched on after you've given your consent in our cookie banner. Legal basis: your consent (Art. 6(1)(a) GDPR). See "Cookies" below.

When you contact us on Instagram or by email

If you send us a message on Instagram or by email, we use your name, handle or email address and your message to reply. Legal basis: our legitimate interest in answering messages (Art. 6(1)(f) GDPR) or steps before a contract (Art. 6(1)(b) GDPR).

Marketing emails

We don't send newsletters or marketing emails. If we start, we'll only send them to people who have clearly opted in, with a one-click unsubscribe in every email.

We never sell your personal data, and we don't use it for automated decision-making.

When we act on behalf of our clients

When a client gives us access to their social media accounts (for example Instagram, Facebook or Meta Business Suite) or their ad accounts, we may see personal data of their followers and customers, such as comments, direct messages and profile names. In that situation the client is the controller and we act as their processor: we only use that data to deliver the agreed services and only on their instructions.

We offer every client a data processing agreement (verwerkersovereenkomst), as required by Art. 28 GDPR. If you're a follower of one of our clients and have a question about your data, please contact that business directly. We'll help them answer it.

Who we share data with

We only share data with service providers we need to run our business ("processors"), and only as much as they need. We have agreements in place with them.

Squarespace (Squarespace Ireland Ltd. / Squarespace, Inc.): Website hosting, contact form, cookie banner

Google (Google Ireland Ltd. / Google LLC): Business email (Google Workspace), file storage and delivery (Google Drive) and, once added, website analytics (Google Analytics)

Canva: Creating and storing content

Moneybird B.V. (Netherlands): Accounting software: invoicing, bookkeeping and billing details (data stored in the EEA)

Meta (Meta Platforms Ireland Ltd. / Meta Platforms, Inc.): Messages you send us on Instagram, managing client accounts and ads we're given access to and, once added, the Meta Pixel on our website

Meta and Google are also responsible for their own processing as platform providers. Their privacy policies apply to how Instagram, Facebook and Google handle your data. For the Meta Pixel, we and Meta are jointly responsible for collecting the data on our website.

We may also share data when the law requires it (for example with the Dutch Tax Administration), or with an accountant or legal advisor who is bound by confidentiality.

Transfers outside the EEA

Our accounting software, Moneybird, is Dutch and stores data only within the EEA. Some of our other providers are based in, or use servers in, countries outside the European Economic Area:

Squarespace, Google and Meta (United States) are certified under the EU-U.S. Data Privacy Framework, which the European Commission has recognised as offering adequate protection.

Canva is based in Australia. Its US company is certified under the Data Privacy Framework, and Canva uses the European Commission's Standard Contractual Clauses (SCCs) for other transfers.

Where a transfer isn't covered by the Data Privacy Framework, providers use the SCCs. You can ask us for more information about these safeguards.

How long we keep your data

We keep data no longer than we need it:

Enquiries that don't lead to a project: 12 months after our last contact

  • Client communication and project files: 2 years after the agreement ends

  • Invoices and financial records: 7 years, as required by Dutch tax law

Website analytics: Up to 24 months

Client account access (passwords, roles): Removed or handed back within 14 days after the agreement ends

Cookies

Cookies are small files placed on your device when you visit a website.

Functional cookies make the site work, for example by remembering your cookie choice and keeping the site secure. These don't need consent.

  • Analytics cookies. Once added, we use Google Analytics to see how many people visit and which pages are popular. We only place these cookies after you've agreed in our cookie banner.

Marketing cookies. Once added, we use the Meta Pixel to measure our ads on Instagram and Facebook and to show relevant ads to people who visited our site. We only place these cookies after you've agreed in our cookie banner.

Nothing is pre-ticked. You can change or withdraw your choice at any time via the cookie settings link on our website, or by deleting cookies in your browser. Saying no is as easy as saying yes, and the site still works.

Your rights

Under the GDPR you have the right to:

access the personal data we hold about you

correct data that is wrong or incomplete

delete your data (the "right to be forgotten"), unless we must keep it by law

restrict how we use your data

object to processing based on our legitimate interest

data portability: receive your data in a common format, or have it sent to someone else

  • withdraw consent at any time, where we rely on consent. This doesn't affect anything we did before.

To use any of these rights, email info@jscreative.pro. We'll reply within one month. We may ask you to confirm your identity first, so we don't give your data to the wrong person. Using your rights is free.

Complaints

If you're unhappy with how we handle your data, please tell us first at info@jscreative.pro. We'd like the chance to put it right. You also have the right to file a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or with the authority in the EU country where you live or work.

How we keep data safe

We take sensible technical and organisational measures to protect your data, such as:

secure (HTTPS) connections on our website

strong passwords and two-factor authentication on our accounts

  • access to client accounts only through the platform's role or partner features where possible, rather than shared passwords

keeping access limited to the people who need it

  • removing access when a project ends

If a data breach happens that is likely to put your rights at risk, we'll report it to the Autoriteit Persoonsgegevens within 72 hours and inform you where required.

Changes to this policy

We may update this policy when our services, tools or the law change, for example when we add a booking tool. The latest version is always on this page, with the date at the top. If a change matters for you, we'll let you know.

Contact

Questions about privacy? Email info@jscreative.pro. For everything else, say hello at hello@beyondhypesocial.com.