Privacy Beleid

Zenith Gomes Services ("ZG Services", "we", "our") is the data controller for personal data processed through this website and our related services. We are registered in the Netherlands under KvK 42053585, BTW NL005458660B14, with offices at Prins Hendrikstraat, 3131 PL Vlaardingen — Rotterdam.

Privacy contact: contact@zgservices.nl

• Identity & contact: name, email, phone, address.
• Service request details: pickup/delivery, project briefs, business inquiries.
• Recruitment data: CV, work history, references and any information you submit.
• Technical data: IP address, device, browser, language, referrer (only via consented analytics).
• Usage data: pages viewed, interactions, session recordings (only via Microsoft Clarity, after consent).
• Communications you send us by email, phone or form.

• Performance of a contract — quoting, planning and delivering logistics, moving, transport, digital and recruitment services.
• Legitimate interest — answering inquiries, preventing fraud, securing our platform, improving our services.
• Consent — analytics cookies (GA4), product analytics (Microsoft Clarity), marketing communications. Consent is optional and can be withdrawn at any time.
• Legal obligation — tax, accounting and statutory record-keeping under Dutch law.

We use Google Analytics 4 and Microsoft Clarity to understand how visitors use the website. Both tools are loaded only after you accept analytics cookies. Before consent, no analytics scripts, cookies or pixels are placed on your device. IP addresses are anonymised, ad personalisation and Google signals are disabled, and Clarity sessions exclude form values and masked content by default.

Full details and management options are in our Cookie Policy.

We rely on a small number of vetted processors, each bound by data processing agreements:

• Supabase — backend, database & authentication (EU region).
• Cloudflare — CDN, DDoS protection, edge hosting.
• Google LLC — Google Analytics 4 (consent-based).
• Microsoft Corp. — Clarity behavioural analytics (consent-based).
• Email & infrastructure providers used to deliver transactional messages.

Some processors (Google, Microsoft, Cloudflare) may transfer data outside the EEA. Such transfers rely on the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, the EU – U.S. Data Privacy Framework. Additional technical and organisational safeguards apply.

• Quote & service requests: up to 24 months after last contact.
• Recruitment applications: up to 12 months, or longer with explicit consent.
• Accounting & invoicing data: 7 years (Dutch statutory requirement).
• Analytics data: 14 months (GA4 default), then deleted.
• Consent records: stored locally in your browser and on our servers for audit purposes.

We apply industry-standard technical and organisational measures: TLS 1.3, encrypted storage, role-based access control, row-level security on the database, signed time-limited URLs for file access, strict Content-Security-Policy and HSTS headers, and regular security reviews.

You have the right to:

• Access the personal data we hold about you.
• Request correction or deletion ("right to be forgotten").
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent at any time without affecting prior lawful processing.
• Lodge a complaint with the Dutch DPA (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

To exercise any right, email contact@zgservices.nl. We respond within 30 days.

Our services are not directed at children under 16. We do not knowingly collect data from minors.

We may update this policy to reflect legal or operational changes. Material changes will be communicated on this page with an updated "Last updated" date.

See also our Cookie Policy and Terms & Conditions.