Privacy policy
Last updated: 8 September 2026
This privacy policy explains how This is Hank collects, uses and protects personal data when you visit our website, contact us, work with us or interact with our services.
This is Hank is a creative digital and branding agency based in the Netherlands. We process personal data in accordance with the General Data Protection Regulation, also known as the GDPR, and applicable Dutch privacy laws.
1. Who we are
The data controller responsible for your personal data is:
Hank Digital & Branding B.V.
Herengracht 449A
1017 BR Amsterdam
The Netherlands
KvK number: 83715746
VAT number: NL862967314B01
Email: hello@thisishank.com
Website: thisishank.com
For privacy-related questions, contact us at: hello@thisishank.com
2. Personal data we collect
We may collect and process the following types of personal data.
Contact details
Name, company name, job title, email address, phone number and any other information you choose to share with us when contacting us.
Project and client information
Information needed to prepare proposals, manage projects, deliver creative, branding, digital or marketing services, communicate with your team, invoice our work and maintain our client relationship.
Website usage data
Technical information such as IP address, browser type, device type, pages visited, time spent on the website and general analytics data.
Marketing preferences
Information about whether you have subscribed to our updates, newsletters or marketing communications, and whether you have opted out.
Supplier and freelancer information
Contact details, payment information, portfolio or professional information when we work with suppliers, freelancers or collaborators.
Payment and invoicing information
Information needed for invoicing, accounting, payment processing and financial administration.
We do not intentionally collect special categories of personal data, such as health data, religious beliefs, political opinions or biometric data, unless you choose to provide such information and it is relevant to a specific project.
3. How we collect personal data
We collect personal data when you:
Contact us by email, form, phone or social mediaRequest a proposal or start a project with usSubscribe to updates or marketing communicationsVisit or interact with our websiteWork with us as a client, supplier, freelancer or partner
We may also receive business contact information from public sources, referrals, events, professional networks or platforms such as LinkedIn.
4. Why we use personal data
We use personal data for the following purposes.
To respond to enquiries
We use your contact details to respond when you contact us, request information or ask about working together.
Legal basis: Legitimate interest or steps before entering into a contract.
To prepare proposals and quotes
We use personal data to understand your request, scope potential work, prepare proposals and communicate about possible projects.
Legal basis: Legitimate interest or steps before entering into a contract.
To deliver our services
We use personal data to manage client relationships, run projects, communicate with teams, deliver creative work and provide support.
Legal basis: Performance of a contract or legitimate interest.
To manage our business
We use personal data for administration, accounting, invoicing, supplier management, legal compliance and internal record keeping.
Legal basis: Legal obligation, performance of a contract or legitimate interest.
To improve our website
We may use analytics data to understand how visitors use our website and to improve its content, structure and performance.
Legal basis: Consent where required, or legitimate interest for privacy-friendly analytics.
To send marketing communications
We may send updates, invitations, insights or agency news if you have subscribed, shown interest in our services or are an existing business contact. You can unsubscribe at any time.
Legal basis: Consent or legitimate interest, depending on the relationship and type of communication.
To protect our rights
We may process personal data to prevent misuse, secure our systems, resolve disputes or protect our legal rights.
Legal basis: Legitimate interest or legal obligation.
5. Cookies and tracking technologies
Our website may use cookies and similar technologies.
Cookies are small files placed on your device to help the website function, remember preferences, measure performance or support marketing activity.
We may use necessary cookies, analytics cookies, functional cookies and marketing or tracking cookies.
Necessary cookies may be placed without consent because they are required for the website to work properly. Analytics, marketing and tracking cookies will only be placed with your consent where required by law.
For more information, please see our cookie policy.
6. Who we share personal data with
We may share personal data with trusted service providers who help us run our business and deliver our services, including:
- Website hosting providers
- Email and communication tools
- Analytics providers
- Newsletter or email marketing platforms
- Cloud storage providers
- Project management tools
- Accounting and invoicing software
- Freelancers, collaborators and specialist partners involved in client work
- Legal, financial or professional advisers where needed
We only share personal data where necessary and require service providers to protect personal data appropriately.
We do not sell personal data.
7. International transfers
Some of the tools and service providers we use may process personal data outside the European Economic Area.
Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as an adequacy decision by the European Commission, standard contractual clauses or other legally recognized transfer mechanisms.
8. How long we keep personal data
We keep personal data only for as long as necessary for the purpose for which it was collected, unless we are required to keep it longer by law.
As a general guide:
- Enquiry data is usually kept for up to 24 months
- Client and project records are kept for the duration of the relationship and up to 7 years where required for tax and accounting purposes
- Supplier and freelancer records are kept for the duration of the working relationship and up to 7 years where required for tax and accounting purposes
- Newsletter data is kept until you unsubscribe or ask us to delete it
- Website analytics data is kept according to the settings of the relevant analytics tool
9. How we protect personal data
We take reasonable technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration or destruction.
These measures may include access controls, secure passwords, software updates, limited access to client files, secure cloud tools and confidentiality arrangements with freelancers and suppliers.
No method of transmission over the internet or electronic storage is completely secure, but we take appropriate steps to protect the personal data we process.
10. Your privacy rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete personal data
- Request deletion of your personal data
- Restrict how we process your personal data
- Object to certain processing, including direct marketing
- Request transfer of your personal data where applicable
- Withdraw consent where processing is based on consent
- Lodge a complaint with a supervisory authority
To exercise your rights, contact us at: hello@thisishank.com
We may ask you to verify your identity before responding to a request.
11. Complaints
If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve the issue.
You also have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.
12. Links to other websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices, content or security of those websites. We recommend reviewing their privacy policies before sharing personal data with them.
13. Automated decision-making
We do not use personal data for automated decision-making that produces legal or similarly significant effects.
14. Changes to this privacy policy
We may update this privacy policy from time to time. The latest version will always be available on this page. Where changes are significant, we may take additional steps to inform you.
15. Contact us
If you have any questions about this privacy policy or how we handle personal data, contact us at: