- Home
- Privacy
Legal
Privacy statement
What data we collect, why, and what your rights are. Last updated 29 October 2026. This is an English translation; in case of differences, the Dutch version prevails.
Who is responsible?
Northbound Marketing, trading name of Abdelaziz El M’Kadmi, self-employed (autónomo) in Spain.
Passatge de Gutenberg 5, 08025 Barcelona, Spain
VAT number: ESZ0408712F
Email: aziz@northboundmarketing.ai · Phone and WhatsApp: +32 488 79 50 58
What data we process
- Contact and appointments: your name, email address, phone number, company, website and what you tell us, when you book an appointment, email us or send us a WhatsApp message.
- Clients: company and billing details, and access to your advertising and analytics accounts for as long as we work for you.
- Website visits: data about how you use our website, only if you give your consent for this in the cookie banner. See our cookie statement.
Why and on what basis
| Goal | Legal basis |
|---|---|
| Answering your question and scheduling an appointment | Your request, and our legitimate interest |
| Providing and invoicing our services | Performance of the contract and legal obligation |
| Measuring website visits and improving advertisements | Your consent |
Who we share data with
We never sell data. We use the following services, which process data on our behalf:
- Google (Analytics, Tag Manager, Google Ads, Google Calendar and Workspace for email)
- Meta (the Meta pixel, only with consent)
- WhatsApp, if you send us a message that way
- Cloudflare, for the hosting and security of this website
- Our accountant, for invoicing
Some of these services process data outside the European Union, including in the United States. This is done with appropriate safeguards, such as the EU-US Data Privacy Framework or the standard contractual clauses of the European Commission.
How long we keep data
- Contact enquiries that do not lead to working together: up to 12 months after the last contact.
- Client and billing data: six years, as required by Spanish law for accounting purposes.
- Website data: for as long as the retention period set in Google Analytics, up to a maximum of 14 months.
When we work for you
If we work in your advertising or analytics accounts, or connect your CRM, we sometimes come across data relating to your customers. We process that data as a processor: only on your instructions, only for the work we agreed together, and in accordance with a data processing agreement that we conclude with you at the start. If you stop, we hand back the access and do not keep any copies.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict the processing, to object and to transfer your data. You can withdraw your consent at any time. To do so, send an email to aziz@northboundmarketing.ai. We respond within one month.
If you do not agree with how we handle your data, you can lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos, or with the supervisory authority in your own country: the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority) in the Netherlands or the Gegevensbeschermingsautoriteit (the Belgian Data Protection Authority) in Belgium.
