Privacy

Privacy policy

How we handle your personal data — clear and GDPR-compliant.

Home  /  Privacy

Who we are

Premium Houses is the premium label of Tommy’s Service, based at Noorddammerweg 50b, 1187 ZT Amstelveen (KvK 62541536). For questions about this policy, contact our contact form or +31 6 44779805. We are the data controller for the processing of your personal data.

What data we process

When you complete our contact form or get in touch, we process the data you provide yourself:

  • first and last name;
  • phone number and e-mail address;
  • city;
  • the content of your message and any attachments (photos or documents);
  • the indicative budget you specify.

In addition, on every visit our hosting provider processes technically necessary data, such as your IP address, the time of the visit, the page requested and the browser type (server logs). To prevent abuse of the contact form, when you send a request we store a pseudonymised (hashed) derivative of your IP address for no more than 48 hours.

How we use your data

We use your data solely to answer your request, prepare a no-obligation consult or quote and communicate with you about your project. After sending the form you receive an automatic confirmation by e-mail. We do not send you newsletters or other marketing e-mails without your separate consent. We do not use your data for automated decision-making or profiling.

Legal basis

We process your data on the following legal bases (Article 6(1) GDPR):

  • answering your request and preparing a consult or quote: steps taken at your request prior to entering into a contract (point b);
  • keeping the website technically available and secure, including preventing abuse of the contact form: our legitimate interest (point f);
  • analytics and marketing cookies: your consent (point a), which you can withdraw at any time.

Retention period

We do not keep your data longer than necessary for the purpose for which it was collected. Requests (the e-mail to our team and the contact in Brevo) that do not lead to an assignment are deleted no later than 24 months after the last contact. Data that becomes part of an assignment is kept for as long as the law requires, such as the seven-year tax retention obligation. Server logs are deleted automatically by the hosting provider after a short period; the hashed IP data used to prevent abuse after no more than 48 hours.

Processors and recipients

We do not sell your data and do not share it with third parties for their own commercial purposes. We use the following service providers:

  • Netlify, Inc. (United States): hosting of the website and running the contact form on the server. Netlify processes IP addresses, server logs and the data and attachments you send via the form, solely to deliver the website and forward your request to us.
  • Brevo (Sendinblue SAS, France): sending e-mail (the notification to our team and the confirmation to you) and storing your request as a contact in our customer database.
  • Google Analytics 4 (Google Ireland Ltd.): visitor statistics; only with your consent.
  • Microsoft Clarity (Microsoft Ireland Operations Ltd.): usage analysis, such as heatmaps and session recordings in which entered text is automatically masked; only with your consent.
  • Meta Pixel (Meta Platforms Ireland Ltd.): measuring advertising results and showing relevant ads on Facebook and Instagram; only with your consent.

Netlify, Google, Microsoft and Meta may (also) process data in the United States. Such transfers take place on the basis of the EU-US Data Privacy Framework (where the party concerned is certified under it) and/or the standard contractual clauses of the European Commission. Appropriate (data processing) agreements are in place with our processors.

We retrieve the weather shown in the contact section through our own server from the Norwegian Meteorological Institute (MET Norway). Your browser does not connect to MET Norway and no visitor data is shared.

Cookies and local storage

We store your cookie choice in your browser’s local storage (localStorage) under the name ph-consent-v2. This is necessary to remember your choice; no data is sent to us or to third parties in the process.

Analytics and marketing cookies from Google Analytics, Microsoft Clarity and the Meta Pixel are loaded and placed only after you click ‘Accept’ in the cookie banner. Before you make a choice, and if you decline, our website does not connect to these services. With your consent, Google may also use the statistics data for advertising measurement.

You can change your choice or withdraw your consent at any time via the Cookie settings link at the bottom of every page. If you withdraw your consent, we delete the relevant cookies from our domain (such as _ga, _gid, _clck, _clsk and _fbp) and these services are no longer loaded.

Your rights

You have the right to access, correct or delete your personal data, to object to or restrict processing, and to data portability. You can withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal. Contact us via our contact form.

Security

We take appropriate technical and organisational measures to protect your data against loss or unlawful processing. The form is sent over an encrypted connection (HTTPS).

Complaints

If you believe we are not handling your data carefully, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

We may update this privacy policy from time to time. The most current version is always available on this page.

Last updated: 6 October 2026