Privacy Policy

Who I am

I’m Julian Smits, freelance SEO and GEO specialist behind JSResults. I live and work from the Philippines for clients in the Netherlands, Belgium and the rest of the world. My practice is not registered with the Dutch Chamber of Commerce (KvK), because I’m not based in the Netherlands.

• Data controller: Julian Smits, trading as JSResults
• Postal address: Seblante Road, Nursery, Masbate City, Philippines
• Email: [email protected]

International scope

The General Data Protection Regulation (GDPR) applies to the processing of data from visitors and clients in the European Union, even though I’m based outside the EU. For users in the Philippines, the Data Privacy Act of 2012 (Republic Act 10173) applies in addition. Where these rules differ, I always apply the highest level of protection.

What data I process

I only process data you actively share:

• Email or WhatsApp: anything you send me through these channels, such as your name, company name, website and the content of your message.
• Contact form: the form on this site is technically ready but does not currently submit automated messages. Contact is handled via email or WhatsApp. As soon as the form actively sends data, I will update this policy.
• During a project: data needed to perform the work, such as access to Google Search Console, your website, analytics and possibly billing details.

I don’t process special categories of personal data and never ask for data I don’t need.

What I use your data for

• To respond to your question or request.
• To deliver a project and report on it.
• To send invoices and keep my records.

I don’t use your data for marketing and don’t share it with third parties for commercial purposes.

Retention periods

• Messages via the contact form or email are kept as long as useful for ongoing or future collaboration, in principle no longer than two years.
• Invoices and related data are kept for seven years, in line with Dutch fiscal retention rules.
• On request I delete your data earlier, unless I’m legally required to retain it.

Who I share data with

JSResults runs on a few external services that may technically come into contact with your data:

• Cloudflare Pages hosts this website. Log files and any form submissions pass through their infrastructure.
• Google Fonts delivers the typefaces. Your IP address is processed by Google in the process.
• Email provider that runs my [email protected] mailbox.
• Accounting tool used to draft and store invoices.

With parties that process personal data on my behalf, I sign a Data Processing Agreement (DPA) as soon as legally required or reasonable.

Cookies and analytics

At the moment I don’t place tracking cookies and don’t use analytics. I may later add a privacy-friendly stats tool, such as Plausible or Fathom. Those tools work without cookies and without collecting personal data. If I switch this on, I will update this page accordingly.

Your rights

Under the GDPR you have the right to:

• Know which data I process about you.
• Have incorrect data corrected.
• Have your data deleted.
• Object to processing.
• Receive your data in a common file format.

Send an email to [email protected] with your request. I reply within one business day and handle the request within four weeks. If you disagree with how I handle it, you can file a complaint with a supervisory authority:

• Netherlands and EU: Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl.
• Philippines: National Privacy Commission, privacy.gov.ph.
• Other countries: the supervisory authority in your country of residence.

EU representative

Article 27 GDPR may require data controllers outside the EU to designate a representative within the EU. JSResults relies on the exemption: processing is occasional, limited in scale, does not include special categories of personal data on a large scale, and does not present a significant risk to the rights and freedoms of data subjects. If the practice grows into structural, large-scale processing, I will appoint a representative and update this policy accordingly.

Security

I use strong passwords, two-factor authentication and a password manager. Access to client systems uses separate accounts that I revoke after the project ends.

Changes

I update this privacy policy when practice or legislation requires it. The last update date is shown at the top of this document.