How personal data is processed on this domain.

The controller for the processing described in this statement is eCommerce Services B.V., a private limited company incorporated in the Netherlands, with registered office at Waddenring 207, 2993 VC Barendrecht, the Netherlands, registered with the Dutch Chamber of Commerce under KvK 93538367.

Questions concerning this statement or the processing of personal data may be addressed to legal@brandhelp.net.

This statement applies to personal data processed by eCommerce Services B.V. in two specific contexts:

• Visits to the website at brandhelp.net, including any sub-pages.
• The operation of mail infrastructure issued on the brandhelp.net namespace, to the extent personal data is processed by the operator in its role as infrastructure provider.

The content of correspondence sent from or to mailboxes on the brandhelp.net namespace is processed by the third-party businesses that operate those mailboxes through authorized partner platforms. Those businesses act as independent data controllers for the content of their correspondence, and have their own privacy disclosures applicable to that processing. This statement does not extend to their controller activities.

When you access this website, the following categories of personal data may be processed for the limited purpose of delivering and securing the website:

• Server access logs: IP address, user-agent string, requested URL, HTTP status, timestamp, and referrer. These are recorded by the hosting infrastructure for security, troubleshooting, and abuse prevention.
• Font delivery: typography on this website is served by Google Fonts (Google Ireland Ltd.). When your browser requests font files, your IP address is transmitted to Google. No cookies are set by this font delivery, and no personal identification beyond network metadata is involved.

This website does not set cookies, does not use analytics scripts, and does not embed tracking pixels.

Mailboxes on the brandhelp.net namespace are provisioned and operated by third-party businesses through authorized partner platforms. In its capacity as infrastructure operator, eCommerce Services B.V. processes a limited set of personal data necessary to route and secure mail traffic on the namespace:

• Envelope and header metadata: sender and recipient addresses, message identifiers, routing timestamps, and SPF/DKIM/DMARC verification results.
• Transport diagnostics: originating IP, transport status codes, and bounce notifications, used for deliverability monitoring and abuse detection.
• Abuse-handling records: reports received at the abuse contact, including any headers and content voluntarily submitted by the reporter.

The substantive content of messages (subject lines, body text, attachments) is processed by the partner platform on behalf of the business that operates the mailbox, and is not used by the operator for any purpose other than secure transmission and storage.

Each category of processing is carried out on one of the following legal bases under Article 6(1) GDPR:

• Legitimate interest (Art. 6(1)(f)): operating, securing, and maintaining the website and the mail infrastructure, including the prevention of fraud, phishing, and unauthorized use of the namespace. The operator considers its legitimate interest in operating a secure infrastructure to be balanced against the limited and routine nature of the data processed.
• Performance of a contract (Art. 6(1)(b)): processing necessary to provide infrastructure services to authorized partner platforms under written agreements.
• Compliance with a legal obligation (Art. 6(1)(c)): retention or disclosure required by Dutch law, including obligations under tax legislation and lawful requests by competent authorities.

Personal data is retained only for as long as necessary for the purposes for which it was collected, or for as long as required by applicable law. Indicative retention periods are:

• Server access logs: up to 90 days, after which records are aggregated or deleted.
• Mail envelope and routing metadata: up to 180 days for deliverability and abuse investigation; aggregated thereafter.
• Abuse-handling records: up to 24 months from the date of report, to enable trend analysis and recurrence detection.
• Legal correspondence: retained for the duration required by Dutch civil and commercial law, generally up to seven years for records with a fiscal component.

eCommerce Services B.V. does not sell personal data and does not share it for marketing purposes. Personal data may be disclosed to the following categories of recipients:

• Processors acting under a data-processing agreement, including hosting providers, mail-transport providers, and security and abuse-monitoring services.
• Authorized partner platforms to the extent necessary to provision and operate the mailboxes they administer on the namespace.
• Competent authorities where disclosure is required by Dutch or applicable EU law, by a lawful order, or for the protection of vital interests.

Personal data is primarily processed within the European Economic Area. Where processing necessarily involves a transfer to a third country (for example, when fonts are served by Google or when an authorised processor operates infrastructure outside the EEA), the transfer is conducted under safeguards permitted by Chapter V GDPR, in particular Standard Contractual Clauses adopted by the European Commission, supplemented where necessary by additional technical and organisational measures.

Where eCommerce Services B.V. acts as the controller for processing your personal data, you have the following rights under the GDPR:

• Right of access (Art. 15): to obtain confirmation of whether personal data concerning you is processed, and a copy of that data.
• Right to rectification (Art. 16): to have inaccurate personal data corrected, or incomplete data completed.
• Right to erasure (Art. 17): to have personal data erased where one of the conditions in Article 17 applies.
• Right to restriction (Art. 18): to restrict processing under the circumstances set out in Article 18.
• Right to data portability (Art. 20): where processing is based on consent or contract and carried out by automated means.
• Right to object (Art. 21): to processing based on legitimate interest, on grounds relating to your particular situation.

To exercise any of these rights, contact legal@brandhelp.net. To verify your identity, the operator may request additional information. Requests are answered without undue delay, and in any event within one month, in accordance with Article 12(3) GDPR.

Where the content of correspondence is at issue, requests should ordinarily be addressed to the business that operates the relevant mailbox, since that business is the controller for the content of its correspondence.

Without prejudice to any other administrative or judicial remedy, you have the right under Article 77 GDPR to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

The competent supervisory authority for eCommerce Services B.V. is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority), reachable at autoriteitpersoonsgegevens.nl.

This statement may be updated from time to time to reflect changes in processing activities, applicable law, or supervisory guidance. The current version is identified by the "Last reviewed" date in the footer of this page. Material changes will be reflected in the canonical version published on this URL.

For any question concerning this statement, or to exercise any right under the GDPR, contact:

• By e-mail: legal@brandhelp.net
• By post: eCommerce Services B.V., Waddenring 207, 2993 VC Barendrecht, the Netherlands

Last reviewed: June 2026. Version 1.0.