Privacy policy
Last updated: 7 October 2026
Dutch Tax House (Chamber of Commerce 42088592, VAT identification number NL005486676B70, based in Utrecht) takes the protection of your personal data seriously. This privacy policy explains which data is processed, why, and what rights you have under the General Data Protection Regulation (GDPR).
This privacy policy applies to visitors of the website, to anyone who gets in touch, and to clients of Dutch Tax House. It also applies to people about whom a client provides information, such as a tax partner, family members, employees or business contacts.
This is a translation of the Dutch text for your convenience. In case of any difference, the Dutch version prevails.
Who is responsible?
Dutch Tax House is the controller for the processing described in this privacy policy. When keeping the books, preparing and filing tax returns and annual accounts and giving advice, Dutch Tax House itself determines which data is needed and how it is processed, partly on the basis of legal obligations. In doing so, Dutch Tax House acts as an independent controller, not as the client's processor.
Per processing activity: purpose, data, legal basis and retention
The table below describes each processing activity separately. More about cookies can be found in the cookie policy.
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Responding to a callback request, contact message, email or WhatsApp message | Name, phone number, email address and your message | Legitimate interest in answering your question; where there is an engagement: performance of the contract | Up to twelve months after the last contact, where no engagement follows |
| Intake and preparation of an engagement | Information from the intake form, such as your business, the service you need and the firms you worked with before | Steps taken at your request before entering into a contract | Up to twelve months after the last contact, where no engagement follows |
| Carrying out the engagement: bookkeeping, tax returns, annual accounts, opening balance sheets, advice and contact with authorities | The data needed for the engagement, such as financial data, details of your business and, for tax returns, your citizen service number (BSN). Health data only where needed for your tax return, for example when deducting specific healthcare costs | Performance of the contract; for the BSN and tax records, a legal obligation | Seven years after the end of the engagement |
| Client due diligence under the Dutch Anti-Money Laundering and Anti-Terrorist Financing Act (Wwft) | A copy of your identity document, details of ultimate beneficial owners and representatives, and your answer to the question whether you hold a prominent public position | Legal obligation | The retention period required by the Wwft |
| Checking whether Dutch Tax House may accept an engagement, where it has an obligation towards a third party in that respect | Your name and the fact that you got in touch; no other data is shared | Legitimate interest in meeting that obligation | As long as needed for that obligation, and no longer than the retention period of your contact details |
| Showing a client review on the website | Name, rating and text, and optionally town, country, company name and website | Consent | Until you withdraw your consent |
| Protecting the forms against spam and abuse | Technical data, such as your IP address, through Cloudflare Turnstile | Legitimate interest in securing the website | In line with the periods Cloudflare applies |
| Analysing website use and measuring which advert leads to an enquiry | Technical data about your visit, through cookies | Consent, given through the cookie banner | In line with the retention periods Google applies for Analytics and Ads |
Automated decisions
Dutch Tax House does not take decisions about you based solely on automated processing. Software supports the work; the assessment is always made by Dutch Tax House.
Who receives your data?
Dutch Tax House does not sell your data and only shares it with others where needed for the purposes above.
Authorities: the Dutch Tax Administration, the Immigration and Naturalisation Service (IND), the Chamber of Commerce and comparable bodies, in so far as the engagement requires it, and the Financial Intelligence Unit-Netherlands where the law requires Dutch Tax House to report.
Third parties engaged by Dutch Tax House: in case of illness, absence or for specialist work, Dutch Tax House may engage another bookkeeping or tax professional, who is bound by confidentiality.
Service providers
Dutch Tax House uses the following service providers, which process data in so far as needed for their service. The callback form and contact form are not stored in a database: the submission arrives as an email in the Dutch Tax House mailbox.
- Informer — accounting software for keeping clients' books.
- Google Workspace — email and document storage, including the personal folders in which clients provide documents.
- Blinqx (eBlinqx Fiscaal) — tax software for preparing tax returns.
- Vercel — hosting of the website.
- Supabase — the review database, in an EU region.
- Resend — sending callback and contact form submissions by email.
- Cloudflare — protection of the forms (Turnstile).
Independent parties
Google processes data for Analytics and Ads as an independent party, and only where you have given consent. If you get in touch through WhatsApp, WhatsApp (Meta) processes your data under its own privacy policy.
Processing outside the European Economic Area
Some service providers may process data partly outside the European Economic Area (EEA), for example in the United States. This only happens with appropriate safeguards, such as an adequacy decision or the standard contractual clauses of the European Commission. If you would like to know which safeguard applies in a specific case, ask at info@dutchtaxhouse.nl.
Security
Dutch Tax House takes appropriate technical and organisational measures to protect your data against loss and unauthorised use. For example, email and document storage are protected with two-step verification, client files are kept in an in-house application that runs only locally and that only Dutch Tax House can access, and you provide identity documents and other records through a personal Google Drive folder that only you and Dutch Tax House can access. Please do not send an identity document as an ordinary email attachment.
Your rights
You have the right to access, correct or erase your personal data, to object to processing, to restriction of processing and to data portability. Some data must be retained by law, such as tax records and client due diligence data; that data cannot be erased earlier.
Where you have given consent, you can withdraw it at any time, and as easily as you gave it. For a published review an email to info@dutchtaxhouse.nl is enough: the review is then removed from the website. You can withdraw your cookie consent through the “Cookie preferences” link at the bottom of every page.
You can submit a request at info@dutchtaxhouse.nl. Dutch Tax House will respond within one month. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Contact
Questions about this privacy policy? Get in touch at info@dutchtaxhouse.nl or +31 85 401 94 13.
Changes
Dutch Tax House may update this privacy policy. The current version is always on this page, with the date of the last change. Clients are informed of significant changes.