WhatsApp Bellen Prijzen

Privacy Statement

Last updated: 22 October 2026

Locksmith BV values your privacy. This statement explains which personal data we process, why, how long we keep it and what rights you have.

1. Who we are

Locksmith BV
Koninginneweg 1, 1312 AW Almere, the Netherlands
Email: info@locksmith.nl
Phone: 085 4000 911

For any question about your privacy or about this statement, please contact us at the email address above.

2. What data we process

  • Contact and job details: your name, the address of the job, phone number, email address, a description of your problem and the time of the appointment.
  • Phone calls: your phone number, the number you called, and the time and duration of the call. Calls with our locksmiths may be recorded; we turn those recordings into a written transcript and a short summary so we can handle the job properly.
  • Messages: what you send us through the contact form, the chat on our website, WhatsApp, SMS or email.
  • Job execution: photos of the situation, the work order, what was done and which materials were used.
  • Payment details: the amount, the payment status and the invoice number. Your card or bank details go to our payment provider, not to us.
  • Website data: data recorded through cookies if you consent to them, such as visitor statistics and the advertisement you arrived through. See section 7.
  • Contact details as an unreadable code for ad measurement: an unreadable code (hash) of your phone number and email address, if you have given consent for this. See section 7.

3. Why we use this data, and on what legal basis

  • To carry out your job — sending a locksmith, keeping you informed, completing the work and invoicing. Basis: performance of the contract.
  • To keep our records. Basis: legal obligation.
  • To monitor and improve our service — for example by listening back to a call after a complaint, or by measuring how many jobs go well. Basis: legitimate interest, namely the quality and safety of our service.
  • To prevent misuse and fraud and to secure our systems. Basis: legitimate interest.
  • To measure which advertisements work. Basis: your consent, which you give or refuse through the cookie notice.
  • To measure which advertisements lead to a paid job, even if no ad click was recorded. For this we share your phone number and email address with Google, converted into an unreadable code (hash) (see section 7). Basis: your consent, which you give or refuse through the cookie notice.
  • To see, per request, which advertising campaign brought you to us. For this we only keep the campaign details that were in the link you used to reach our website (for example “Facebook, campaign Moving”), without a cookie. Basis: legitimate interest, namely knowing which advertisements work.
  • To see, per request, from which page and through which button you opened our request form or sent us a WhatsApp message (for example “the Locksmith Amsterdam page, button in the menu”). For this we only keep the address of that page and a fixed code for the button with your request, without a cookie and without storing anything on your device. For WhatsApp this works through a short reference in the pre-filled message (see section 7). Basis: legitimate interest, namely knowing which pages and buttons work.

4. Who we share data with

We do not sell your data. We only share it with parties that help us deliver the service, and only what is needed for that.

  • The locksmith who visits you. They receive your name, address, phone number and the description of the job.
  • Our software suppliers for storing and processing jobs, email, telephony, chat and automation.
  • Our payment provider for handling payments.
  • Our bookkeeping for creating and processing invoices.
  • Advertising and statistics measurement services (Google, Meta, OpenAI, AdCalls, Microsoft Clarity), if you have given consent. After your consent, Google also receives an unreadable code (hash) of your phone number and email address (see section 7). Without consent Google only receives limited signals without cookies; see section 7.

We have agreements with these parties about how they handle your data. Some of them are established outside the European Economic Area, in particular in the United States. For those transfers we rely on the applicable safeguards, such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

5. How long we keep data

  • Job and customer data: for as long as the job is running, and after that for as long as needed for warranty, complaints and our records.
  • Campaign details and the page and button from which you made your request: 13 months after the request. After that we erase them.
  • The separate record of a WhatsApp reference: 48 hours. If a request follows within 24 hours, the page, the button and the campaign details are added to that request (see above).
  • Ad click codes and the browser codes of Meta and Google Analytics stored with a job: 13 months after the request. A newer click from the same platform replaces an older one. After that we remove them.
  • The unreadable code (hash) of your phone number and email address for ad measurement, and the notification itself (time, job number and value of our fee): 13 months after it was sent to Google. After that we delete them. How long Google keeps the data it receives is decided by Google; see Google’s privacy policy.
  • Invoices and bookkeeping: seven years, because Dutch tax law requires it.
  • Call recordings and transcripts: no longer than needed to handle the job and monitor quality.
  • Cookies: the retention period differs per cookie and is listed in the cookie overview you can open through the “Cookie settings” button.

6. How we protect your data

We secure our systems with encrypted connections, role-based access and personal accounts, and we limit access to the people who need it for their work. Our website and our customer environment sit behind a security layer that filters attacks. We make regular backups.

7. Cookies

We use cookies on our website. Necessary cookies make the site work and cannot be switched off. For statistics, preference and advertising cookies we ask your consent in advance through the cookie notice.

You can change or withdraw your choice at any time through the Cookie settings button at the bottom of every page. There you will also find a full overview of the cookies we place, with their purpose and retention period.

If you have accepted advertising cookies and click a call button on our website, we record which number you clicked, the page and which button on that page (a fixed code, for example “call button at the bottom”), the code of the ad click (from Google, OpenAI or Meta, if you came through an ad), the campaign details from the link (see section 3) and the browser code that Meta places in your browser. We record no other data about you or your device here. If you call within a few minutes, we link that click to your job. If there is any doubt, for example because someone else calls the same number within the same minutes, we link nothing. A click that is not linked to a job is deleted after 7 days, or after 24 hours if it contains no Google click code. A linked click is kept for 90 days. The click code and browser code added to your job are kept for 13 months; a newer click from the same platform replaces an older one.

WhatsApp button. If you tap a WhatsApp button on our website or in our customer environment, we add a short reference to the pre-filled message, for example “(ref K7Q2)”. You may keep or remove that reference. With that reference we record on which page and which button you tapped (a fixed code, for example “WhatsApp button in the sidebar”) and the campaign details from the link (see section 3), without placing a cookie for this. If you have accepted advertising cookies, we also record the code of the ad click (from Google, OpenAI or Meta, if you came through an ad) and the browser code that Meta places in your browser. On pages where we use Meta’s measurement tag, that tag then also reports to Meta that you tapped the WhatsApp button; your name, your phone number and the content of your message are not sent to Meta. We also record the language of the page and whether you had accepted advertising cookies; we record no other data about you or your device here. The reference goes to our own database at Supabase; like any website visit, Supabase briefly keeps the IP address and browser details of the request in its log files. If your message with the reference arrives within 24 hours, we link those details to your request; after that, the retention periods in section 5 apply. We delete our separate record of the reference, with the details belonging to it, after 48 hours. The reference itself stays with your request.

If you came through a Meta ad and accepted advertising cookies, we also use the click code to record on which platform you saw it (Facebook, Instagram or Messenger) and keep this with your job. If the platform is already part of the campaign details in the link, we also keep it without a cookie (see section 3). We only use this to measure which ads work and do not pass it on to Meta or anyone else.

If you have accepted advertising cookies, we remember the campaign details from the link for up to 90 days in a cookie on locksmith.nl, so they are included if you later submit a request, click a call button or tap a WhatsApp button from another page. If you withdraw your consent, we delete that cookie.

Notification after payment. When you pay for your job, we tell the advertising platforms that an ad led to a paid job: Google Ads and OpenAI (ChatGPT) if you came through their ad, and Meta (Facebook and Instagram) if you came through Meta or Meta’s browser code is in your browser. With your consent we also report to Google Ads paid jobs for which we have no click code; in that case only as an unreadable code (hash) (see “Notification with unreadable code after payment” below). We send that click or browser code, the time, our job number and the value of our fee, not your name and not your address. We send phone number and email address only as an unreadable code (hash) and only to Google, under the conditions below in “Notification with unreadable code after payment”. If you have accepted statistics cookies, we also report the payment to Google Analytics, with the code Google Analytics places in your browser. Without the relevant consent, this does not happen.

Notification of a request. If you came through a Meta ad (Facebook or Instagram) and then request a locksmith via one of our request pages, call us after tapping the call button, or send us a message after tapping the WhatsApp button, we tell Meta that the ad led to a request. We only send Meta’s click code, Meta’s browser code if present, the time, the address of that page and a request number, not your name, address, phone number or email address. This only happens if you accepted advertising cookies, and only within two days of your request. For that reason, when you submit a request form, we also record whether you accepted advertising cookies, refused them or had not yet made a choice. If you later withdraw your consent, we send no new notifications; a notification already sent cannot be withdrawn.

If you have accepted advertising cookies and submit a request form, your own browser turns your email address and phone number into an unreadable code (a hash). Only that code is passed to Google on the thank-you page, to measure whether an ad led to a request. Your name and address are not included. Without your consent this does not happen.

Notification with unreadable code after payment. If you have accepted advertising cookies (through the cookie notice, also when it appears at checkout) and pay for your job, we tell Google, besides our job number, the time and the value of our fee, also your phone number and email address, but only as an unreadable code (hash). We first convert them ourselves into an unreadable code (a hash); the readable number and address are not sent to Google. Google can compare that code with the data of its own users to see whether an ad led to your job. We do this for Google Ads, also for jobs where we have no click code from a Google ad. The recipient is Google. Your name and address are not included. An unreadable code is still personal data. We keep the code and the notification for 13 months (see section 5). Without your consent for advertising cookies, no phone number or email address is sent to Google, not even as an unreadable code (hash). If you withdraw your consent, we send no new notifications; a notification already sent cannot be withdrawn. You change or withdraw your choice through the Cookie settings button. With your job we record when you made your choice, which version of the cookie notice you saw and which categories you accepted.

Which measurement services we use. If you have accepted advertising cookies, we load measurement tags from Meta (Facebook and Instagram), OpenAI (ads in ChatGPT) and AdCalls (call tracking), and Google Ads sets cookies. If you have accepted statistics cookies, Google Analytics sets cookies and we use Microsoft Clarity to see how visitors use our website and the start page of our customer environment. These services see which pages you view, whether you submit a request and whether you click a call or WhatsApp button; they also receive your IP address and information about your browser and device. We do not pass your name, address, phone number or email address to them; only Google receives the unreadable codes described above (at a request and after payment). Phone numbers or email addresses contained in a link from us are removed from the web address as soon as the page loads, so no measurement service sees them. Google’s tags also load without your consent, but they then set no cookies and only send limited signals without cookies (Google Consent Mode). Without your consent, Meta, OpenAI, AdCalls and Clarity do not load. The exact cookies and how long they are kept are listed under Cookie preferences.

Counting cookie choices. On a number of pages of our customer environment (dashboard.locksmith.nl) we count, per day and per page, how many visitors accepted advertising cookies, refused them or have not chosen yet. This is only a total: we do not store a cookie ID, IP address or any other identifier of you, and we do not build a profile. To avoid counting you twice, the page places two temporary notes in your browser’s session storage; they disappear as soon as you close the tab. Because this is only an anonymous count with no or minor impact on your privacy, we do not ask your consent for it. The count is kept in our own database at Supabase. Like any website visit, Supabase briefly keeps the IP address and browser details of the request in its log files.

Your choice applies to locksmith.nl as well as to our customer environment dashboard.locksmith.nl, where you follow and pay for your job. We apply the same choice on both addresses.

8. Your rights

You have the right to:

  • access your data;
  • have incorrect data corrected;
  • have your data deleted, unless we are legally required to keep it;
  • object to processing based on legitimate interest;
  • withdraw your consent, for example for cookies and for sharing an unreadable code (hash) of your phone number and email address with Google;
  • receive your data in a common file format, or have it transferred.

Send an email to info@locksmith.nl. We respond within one month. To prevent us from giving data to the wrong person, we may ask you to make your identity plausible.

You can withdraw your consent for advertising cookies, and with it for sharing an unreadable code (hash) of your phone number and email address with Google, at any time through the Cookie settings button at the bottom of every page, or by email to info@locksmith.nl. Withdrawal works for the future; what has already been sent cannot be recalled.

If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl.

9. Changes

We update this statement when our service or our systems change. The date of the latest change is shown at the top.