Naar hoofdinhoudSkip to main content
Last updated · 23 August 2026Privacy notice

Privacy notice.

Orange King is a trade agency in textile and pet products, founded by Ed de Bever. This page sets out what personal data we process when you visit the site or send a message through the contact form, and the rights you have under the GDPR.

01

Who we are

Name
Orange King
Entity
Trade name of Lex en Max B.V.
CoC
18089889
VAT
NL818.315.106.B01
02

What we collect

Through the contact form: your name, company name, type of enquiry, email address and the content of your message.

Server logs: our hosting provider Cloudflare keeps automatic security logs containing your IP address, browser type and the time of your visit. We don't actively collect these; they're part of the hosting platform.

Spam check on the contact form: the form uses Cloudflare Turnstile to stop automated spam. To do so, Turnstile evaluates technical characteristics of your browser and your IP address. It sets no cookies and builds no profile of you.

03

Why we process this data

Messages from the contact form are used to reply to your question. Server logs are there to keep the site secure and running. We don't use this data for anything else.

We don't send newsletters and don't run advertising pixels. For visitor statistics we use Plausible: cookieless, with no storage of your IP address and no profiling. The figures can't be traced back to an individual.

04

Legal basis

We rely on two grounds under the GDPR:

  • ART 6·FLegitimate interest — to answer your message and maintain business contacts, for server logs that keep our infrastructure secure, and for the spam check (Turnstile) that protects the contact form against automated abuse.
  • ART 6·BPre-contractual steps — if your enquiry leads to an assignment: the steps taken before it, at your request.
05

How long we keep it

Messages from the contact form are kept for at most 24 months after the last contact and then deleted. Server logs are retained by Cloudflare under its own security and retention policy as set out in the Cloudflare Customer DPA. We have no access to those logs ourselves and do not use them for any other purpose; they are deleted automatically once they are no longer needed to keep the site secure.

06

Who we share it with

We don't sell your data and don't share it for marketing. We do work with technical partners that keep the site running:

  • Cloudflare, Inc.United States

    Hosts the website, receives contact form submissions and runs the spam check (Turnstile) on the contact form. Transfers to the US are covered by the EU Standard Contractual Clauses.

  • Resend (Plus Five Five, Inc.)United States

    Delivers contact form messages by email to Orange King, processing your name, email address and the content of your message. Transfers to the US are covered by the EU Standard Contractual Clauses.

  • Plausible Analytics (Plausible Insights OÜ)European Union

    Cookieless visitor statistics. Stores no personal data or IP addresses and sets no cookies; data is processed in the EU.

  • Typefaces — self-hostedNo external connection

    Onest and JetBrains Mono are served from our own server, so your browser never connects to Google, Fontshare or any other font provider.

07

Transfers outside the EU

Cloudflare and Resend are based in the United States. Transfers outside the EEA rely on Standard Contractual Clauses issued by the European Commission, under article 46 GDPR. Apart from those two, no request from your browser reaches a third country: our typefaces are served from our own server and Plausible processes in the EU.

08

Security

The site runs over HTTPS only. We've taken reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access. If a data breach occurs, we report it to the Dutch Data Protection Authority within 72 hours where required.

09

Cookies

This site sets no tracking or marketing cookies. Our visitor statistics (Plausible) work entirely without cookies too, so no cookie banner is needed. For the spam check on the contact form we load a script from Cloudflare Turnstile (challenges.cloudflare.com) — see section 02; it sets no tracking or marketing cookies either. Should that ever change, a banner with opt-in will be added first and this notice updated.

10

Your rights

Under the GDPR you have the right to:

  • Access your data
  • Correct inaccurate data
  • Request deletion
  • Object to processing
  • Restrict processing
  • Receive your data in a portable format

Send a request to info@orangeking.nl. We'll respond within 30 days.

11

Complaints

If you believe we're mishandling your data, you can file a complaint with the Dutch Data Protection Authority.

12

Changes

We may update this notice when our services or the applicable law change. The current version is always on this page, dated at the top.


Last updated · 23 August 2026