Privacy Policy

This privacy policy explains what personal data Auke Marketing collects, why, how long it is kept and what rights you have. It applies to aukemarketing.com, the free tools on this site, the newsletter and the services I provide to clients.

I keep this short and specific. If something is unclear, email me at auke [at] aukemarketing [dot] com.

Who is responsible for your data

The controller for the processing described here is:

• Auke Marketing, a sole proprietorship (eenmanszaak) owned by Auke Jongbloed
• Registered with the Dutch Chamber of Commerce (KvK) under number 51006197
• VAT number: NL002162452B85
• Address: Emmastraat 16, 3134 CL Vlaardingen, the Netherlands
• Email: auke [at] aukemarketing [dot] com

Auke Marketing currently operates from the Netherlands and works with clients worldwide. Because the business is established in the Netherlands, the EU General Data Protection Regulation (GDPR) and Dutch law apply to all processing, wherever you are located. If the place of business changes, this policy will be updated.

What data I collect and why

Contact and feed review requests

When you use the contact form or request a free feed review, I receive your name, email address, store website, the monthly Shopping spend range you select and the page you sent the form from. The form is delivered to my inbox by email.

• Purpose: to answer your request and, if you ask for it, review your feed and Merchant Center.
• Legal basis: steps taken at your request before entering into an agreement (Art. 6(1)(b) GDPR) and my legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR).
• Retention: up to 2 years after our last contact, unless you become a client (see below).

Newsletter and tool reports

Some tools let you receive a report by email or join the newsletter. You are only added to the mailing list when you tick the consent box. Your email address (and first name, when you give it) is stored with my email provider, Kit.

• Purpose: to send the report you asked for and, if you opted in, the newsletter.
• Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with the unsubscribe link in every email.
• Retention: until you unsubscribe. After that, your address may be kept on a suppression list so you are not mailed again.

Free tools

The Product Feed Checker, Misrepresentation Checker and Product Title Optimizer process the feed URL, store address or product titles you enter. That input is fetched and analyzed to produce your result and is not stored afterwards. Parts of the text (product titles, or text from public pages of the store you check) are sent to Google's Gemini API to generate the analysis. Do not enter personal data in these tools; they are built for product and store data.

To stop abuse, the tools count requests per IP address. Those counters are held by Upstash and expire automatically, within at most one day.

• Legal basis: my legitimate interest in offering the tools and protecting them against abuse (Art. 6(1)(f) GDPR).

Clients

When you hire me, I process the contact and billing details of you and your team (names, email addresses, company details, VAT number) and get access to your Google Merchant Center, Google Ads and, where agreed, your store platform. I only use that access for the agreed work.

• Legal basis: performance of the agreement (Art. 6(1)(b) GDPR) and legal obligations such as bookkeeping (Art. 6(1)(c) GDPR).
• Retention: invoices and related records are kept for 7 years, as Dutch tax law requires. Other project data is deleted or returned within 12 months after the project ends, unless we agree otherwise.

Where my work involves personal data that you control (for example customer data inside your store or ad accounts), I act as your processor. We can sign a data processing agreement on request.

Business contacts I approach

I sometimes contact online retailers by email about a specific problem I noticed in their Google Shopping setup. For that I use business contact details that the store publishes itself (on its website or LinkedIn), together with the store name, website and what I observed. These details are kept in my CRM.

• Purpose: offering a relevant service to businesses.
• Legal basis: my legitimate interest in direct marketing to businesses (Art. 6(1)(f) GDPR), within the limits of the e-privacy rules of the recipient's country.
• Retention: up to 2 years after the last contact. If you ask me to stop, I stop immediately and keep only what is needed to make sure you are not contacted again.

Analytics and performance

• Google Analytics 4 measures how visitors use the site (pages visited, approximate location, device and browser type, how you arrived). It uses cookies and pseudonymous identifiers. I use it to see which pages and tools help visitors, not to identify individuals.

Your choice. When you first visit, a small banner asks whether you accept analytics cookies. Google Analytics runs in Google Consent Mode and sets no cookies until you click Accept. If you click Decline, or make no choice, no analytics cookies are set and Google only receives basic, cookieless signals (such as that a page was viewed) without an identifier that recognises you on a later visit. Your choice is saved in your browser's local storage, so the banner does not return on every page. You can change or withdraw it at any time with the "Cookie settings" link in the footer of every page.

• Vercel Web Analytics and Speed Insights measure page views and loading speed without cookies.

• Legal basis: your consent for Google Analytics cookies (Art. 6(1)(a) GDPR and article 11.7a of the Dutch Telecommunications Act), and my legitimate interest in understanding and improving the site (Art. 6(1)(f) GDPR) for the cookieless measurements.

Storage in your browser

Some features save a small amount of data in your own browser (local storage): your cookie choice, whether you closed the newsletter popup, your progress in the feed audit checklist and how many free title checks you used today. This data stays on your device and is not sent to me. You can clear it at any time in your browser settings.

Who receives your data

I do not sell personal data. I share it only with the service providers that run this site and the business:

Provider	What for	Location
Vercel	Website hosting, cookieless analytics	USA / EU
Resend	Delivering form submissions and report emails	USA
Kit	Newsletter and report email list	USA
Google (Analytics, Gemini API, Workspace)	Analytics, AI analysis in the free tools, email	USA / EU
Upstash	Rate limiting of the free tools	EU / USA
Attio	CRM for business contacts and clients	EU / USA

I may also share data with my accountant or the authorities when the law requires it.

Transfers outside the European Economic Area

Some providers above are based in the United States. Where data leaves the EEA, the transfer is covered by the EU-US Data Privacy Framework where the provider is certified, or by the European Commission's Standard Contractual Clauses.

Security

I protect personal data with appropriate technical and organizational measures, including encrypted connections (HTTPS), two-factor authentication on the accounts I use, and access limited to what the work requires.

Your rights

Under the GDPR you have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To use any of these rights, email auke [at] aukemarketing [dot] com. I respond within one month.

If you believe your data is not handled properly, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl or with the supervisory authority in your own country. I would appreciate the chance to fix it first.

Children

This site and the services are meant for businesses. I do not knowingly collect data from anyone under 16.

Changes to this policy

I update this policy when the site, the tools or the law change. The date at the top shows the latest version.