Privacy policy
Hey Honey is a proudly independent creative agency, providing creative marketing and social media services to brands, organisations, and non-profits across global terriroties.
This website is operated by Hey Honey B.V., company number 70656657 and VAT number NL858410151B01, incorporated in the Netherlands with a registered office at Stationsplein 9, 1012 AB, Amsterdam.
We have developed this privacy notice to inform you of the data we collect, what we do with your information, how we keep it secure, and the rights and choices you have over your personal information.
Contact Details
If you have any questions about this Privacy Notice or our privacy practices, please contact us:
Full name of legal entity: Hey Honey B.V.
Email address: compliance@heyhoneyglobal.com
Postal address: Hey Honey, Stationsplein 9, 1012 AB, Amsterdam.
You have the right to make a complaint at any time to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP) via autoriteitpersoonsgegevens.nl. We would, however, appreciate the chance to deal with your concerns before you approach the AP, so please contact us in the first instance.
What Personal Data Do We Collect And When?
The type of personal information that we collect from you, or that you voluntarily provide to us on this website or as part of a service we provide to you, may include:
Identity Data: First name, last name, title, or similar identifier.
Contact Data: Billing address, delivery address, email address, and telephone numbers.
Financial Data: Bank name, sort code, account number, payment card details, and VAT number.
Transaction Data: Details about payments to and from you, and other details of services you have purchased from us.
Technical Data: Internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this site.
Profile Data: Purchases or orders made by you, your interests, preferences, feedback, and survey responses.
Usage Data: Information about how you use our site and services.
Marketing & Communications Data: Your preferences in receiving marketing from us and our third parties, your communication preferences, and records of correspondence (emails, calls, post) sent or received.
Why And How We Use Your Personal Data
We use your personal data for the following purposes:
To Provide Requested Services: When you use our website or platform, we use your personal data to respond to inquiries, or to manage and fulfill services or events you participate in.
Marketing and Promotions: With your consent, we will send you marketing communications and news concerning our services, events, and promotions. You can opt-out at any time. If you are an existing contact, we may send you marketing communications about similar services, where permitted by applicable law, unless you choose to opt out.
Safety, Security, and Compliance: We may use personal data to prevent, detect, or investigate fraud, abuse, illegal use, or violations of our Terms of Use, and to comply with legal obligations or court orders.
If You Fail To Provide Personal Data
Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract (for example, to provide you with services). In this case, we may have to cancel a service you have with us, but we will notify you at the time.
The Lawful Basis for Processing
We rely on the following lawful bases under data protection law to process your information:
Performance of a Contract: To take steps prior to entering into a contract, manage and perform that contract, assess credit risk, update our records, or manage your account.
Legitimate Interests: Necessary for our business operations, including governance, accounting, market research, analyzing statistics, identifying potential business-to-business customers via publicly available information, and detecting or preventing crime.
Legal Obligation: Necessary for compliance with legal and regulatory requirements, verification of identity, anti-money laundering checks, or handling data protection rights requests.
Consent: Where you have explicitly agreed to a specific type of processing, such as subscribing to our marketing newsletters. You are free to withdraw your consent at any time.
Profiling and Analytics
We may use technical and usage data to build a profile of your preferences to ensure our marketing strategies remain relevant. We do not use automated decision-making processes that produce legal or similarly significant effects on you.
Sharing of Your Personal Data
We do not sell your personal data. We may share your personal data with third parties in the following circumstances:
Legal and Public Authorities: If required by law, regulatory bodies, government agencies, or to establish and defend our legal rights.
Verification and Risk Agencies: External sources of publicly available information, such as the Dutch Chamber of Commerce (Kamer van Koophandel / KvK), Companies House, Dun & Bradstreet, and credit reference agencies.
Financial Networks: Payment systems (e.g., PayPal, Visa, Mastercard) and correspondent banks to process transactions and resolve disputes.
Corporate Affiliates: The Honey Partnership (Ventures) Ltd entities, including subsidiaries and affiliated companies, under the same secure conditions outlined in this notice.
Business Transfers: In the event that we sell, transfer, or merge portions of our business or assets.
Third-Party Data Processors: We use vendors and service providers who handle data strictly on our instructions. They are bound by Data Processor Agreements (DPAs) ensuring they maintain data security and do not use your information for their own purposes.
Cookies
We use functional and marketing cookies to optimize our website, track site performance, and target relevant advertising. For detailed information, please view our Cookie Policy.
International Data Transfers
The personal data we collect is primarily stored within the European Economic Area (EEA). In limited circumstances, your data may be transferred outside the EEA by our third-party service providers.
When this occurs, we ensure equivalent protections are maintained by verifying that:
The destination country has been deemed to provide an adequate level of protection by the European Commission, OR
Standard Contractual Clauses (SCCs) approved by the European Commission are implemented alongside necessary security safeguards.
Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, tax, or reporting requirements.
To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of unauthorized use, the purposes of processing, and statutory limitation periods. In some circumstances, we may anonymize your data for research or statistical purposes, in which case we may use it indefinitely.
Your Data Protection Rights
Under data protection laws, you hold the following rights:
Right to be Informed: The right to clear, transparent information about how we use your data, which we provide via this notice.
Right of Access: The right to request copies of the personal information we hold about you (a "Subject Access Request"). We aim to respond free of charge within 1 month of identity verification.
Right to Rectification: The right to have inaccurate, incomplete, or outdated data corrected.
Right to Erasure: The right to request the deletion of your data where there is no overriding legal or contractual reason for us to keep it (the "right to be forgotten").
Right to Restrict or Object to Processing: The right to block or object to the processing of your data under specific circumstances, such as objecting to direct marketing.
Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, or to have it transferred to another controller.
To exercise any of these rights, please contact us at compliance@heyhoneyglobal.com.
Data Security
We have put in place appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, altered, disclosed, or accessed in an unauthorized way.
Access to your personal data is restricted to employees, agents, contractors, and third parties who have a strict business need to know and are bound by a duty of confidentiality. We maintain strict procedures to handle any suspected personal data breach and will notify you and the appropriate regulator where legally required to do so.