Legal

Privacy statement

Last updated: 15 August 2026. This statement explains how Sugarlump processes personal data of visitors, clients and sponsors.

1. Who we are

Sugarlump — Zoltan Sipos (eenmanszaak), Schietspoel 38, 1251 XV Laren, Netherlands. KvK 93076134, BTW-id NL004998160B92. Contact: info@sugarlump.nl, (06) 29 56 82 23. We are the “verwerkingsverantwoordelijke” (controller) for the processing described here.

2. What data we collect & why

  • Email enquiries — your name, email address and whatever you write to info@sugarlump.nl. Purpose: to respond to your enquiry. Legal basis: our legitimate interest / steps prior to a contract.
  • Client & billing data — if we work together: contact details and invoice data. Legal basis: performance of an agreement + legal (tax) retention.
  • Technical logs — IP address, browser and request data kept by our host Cloudflare for security and reliability. Legal basis: legitimate interest.
  • Cookies / analytics — none. The site sets no cookies and runs no analytics; only a theme preference is stored locally on your device. See the cookie statement.

The site currently has no contact form and processes no online payments. If either is introduced (e.g. sponsorship payments via Stripe, Tikkie or Revolut), this statement will be updated first.

3. Sharing & processors

We share data only with processors acting on our behalf: Cloudflare (hosting & CDN) and Apple iCloud Mail (email). Processing agreements (“verwerkersovereenkomst”) or equivalent contractual safeguards apply to each. Where a processor operates outside the EEA (e.g. Cloudflare, US), transfers rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses. We do not sell your data.

4. Retention

We keep data no longer than necessary: enquiries up to 24 months; invoices and payment records 7 years (Dutch tax law).

5. Your rights

You may request access, rectification, erasure, restriction, portability, and object to processing. Email info@sugarlump.nl. You can also complain to the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

6. Security & changes

The site is served over HTTPS and we take appropriate measures to protect your data. We may update this statement; the “last updated” date reflects the latest version.