Updated: Oct 2026
Privacy policy
1. Who I am
CANDDS is the one-person studio of Coen Janssen, registered in the Netherlands as a sole proprietorship (eenmanszaak).
CANDDS, Paddestoelenlaan 69, 3903 GE Veenendaal, the Netherlands. Chamber of Commerce (KvK) 85294438. VAT NL004085657B17. Email: hello@candds.studio.
This policy covers candds.studio and the way I handle data from people who contact me and from clients. I keep it short, because I collect very little.
2. What I collect and why
• You visit the site. Data: Anonymous usage data: pages viewed, referrer, device type, country. Purpose: See which pages work and keep the site running. Legal basis: Legitimate interest. Kept for: Only as combined statistics that can’t be traced back to you.
• You contact me (email, form, WhatsApp, LinkedIn). Data: Name, email, phone, company, your message. Purpose: Reply and discuss a possible project. Legal basis: Steps before a contract, or legitimate interest. Kept for: 12 months after the last contact, unless we start working together.
• You become a client. Data: Contact details, company details, project communication and files. Purpose: Do the work, plan and communicate. Legal basis: Performance of the contract. Kept for: Duration of the contract plus 2 years.
• Invoicing. Data: Company name, address, VAT and KvK number, invoice details. Purpose: Bookkeeping. Legal basis: Legal obligation. Kept for: 7 years (Dutch tax law).
I don’t sell data, I don’t use it for advertising and I don’t make automated decisions about you.
3. Cookies and analytics
The site uses Framer’s built-in analytics, which measures visits without tracking cookies and without building a profile of you. There are no other analytics tools or embeds that set cookies. Because of that, there is no cookie banner. If I ever add tools that need consent, I’ll ask for it first.
4. Who else handles your data
I use a small number of services to run the studio. Each only gets what it needs.
• Framer: Website hosting, forms and analytics (Netherlands / EU and US).
• My domain and email host: Email sent to and from hello@candds.studio.
• WhatsApp (Meta): Messages, if you choose to use it (EU and US).
• Linear: Planning and tracking client requests (US).
• Google (Sheets): Invoices and bookkeeping, which I keep myself (EU and US).
Some of these services are based in the US. Data goes there only under the EU-US Data Privacy Framework or the EU standard contractual clauses. I share data with others only when the law requires it.
5. How long I keep it
No longer than needed for the purposes above. See the overview in section 2. After that I delete it or make it anonymous.
6. Your rights
You can ask me to see, correct or delete your data, to limit how I use it, or to send it to you in a common format. You can object to use based on legitimate interest, and withdraw consent at any time. Email me and I’ll reply within one month. If you think I handle your data wrongly, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
7. Security
I keep data in accounts protected with strong passwords and two-factor authentication, and only on my own devices. Client files are shared only with people working on the project.
8. Changes
I may update this policy. The date at the top shows the latest version. Big changes I’ll also mention to clients by email.
9. Contact
Questions about privacy? Email hello@candds.studio.