Privacy
Privacy policy
This statement describes which personal data Anwar Consulting processes, why it happens and what rights you have.
Last updated: 10 August 2026Version: 2.1
1. Who is responsible for your data?
Anwar Consulting is the controller for personal data that it processes for its own purposes, including website enquiries, quotations, client administration, invoicing, correspondence and compliance with its own legal obligations.
Where Anwar Consulting processes personal data solely on behalf of a client as part of bookkeeping, administrative or related services, the client may be the controller and Anwar Consulting may act as a processor. Where required, the applicable data-processing arrangements are recorded contractually.
- Anwar Consulting, based in Utrecht, the Netherlands
- Email: info@anwarconsulting.nl
- Telephone and WhatsApp: 06 34025269
- Chamber of Commerce (KvK) number: 99511215
- VAT identification number: NL005390075B68
2. Which personal data are processed?
Which data are processed depends on your relationship with Anwar Consulting.
- Data from the contact form: your name, email address, optionally your business name, telephone number, preferred language, sector, your situation as an entrepreneur, whether you have staff, the services you are interested in and the content of your message.
- Technical data on submission: the IP address and the time of sending, recorded by the form processor for security and abuse prevention.
- Correspondence: the content of email, WhatsApp messages and telephone conversations you have with Anwar Consulting.
- Client data: the administrative and tax data required to carry out the agreed bookkeeping and filing services. These are not collected through this website, but through agreed channels after you become a client.
3. Personal data concerning other persons
In performing bookkeeping, administrative or tax-related services, Anwar Consulting may receive personal data concerning persons other than the client.
Depending on the engagement, this can include employees, customers, suppliers, contractors, fiscal partners or other persons appearing in a client’s administration or documents.
Such information is generally obtained from the client or from documents and records supplied in connection with the engagement. Depending on the circumstances, Anwar Consulting processes this information either for its own legitimate and lawful purposes or as a processor on behalf of the relevant client.
Clients are responsible for providing personal data concerning other persons to Anwar Consulting lawfully.
4. What are your data used for?
- Answering your question or request and getting in touch.
- Preparing and issuing a quotation.
- Entering into and performing an agreement, including setting up your file.
- Carrying out the bookkeeping, VAT and tax return work you engage Anwar Consulting for.
- Meeting legal obligations, including the statutory tax administration and retention duties.
- Securing the website and preventing misuse of the contact form.
- Business correspondence and file management.
5. On which legal basis?
Each processing activity rests on its own GDPR legal basis. Consent is not used as a blanket basis.
- Steps prior to entering into a contract: handling your enquiry and issuing a quotation happens at your request, before any agreement.
- Performance of a contract: once you are a client, your data are processed to deliver the agreed services.
- Legal obligation: the statutory tax retention duty and other obligations under tax and accounting rules.
- Legitimate interest: securing the website, preventing spam and abuse, and maintaining business contacts. In each case it has been weighed whether your interests do not outweigh this.
- Consent: only where it genuinely applies. You can withdraw consent at any time.
6. The contact form and Formspree
The contact form on this website is technically processed by Formspree, Inc. Formspree receives the data you enter and forwards it to the Anwar Consulting mailbox. Formspree acts as a processor in this respect.
On submission, Formspree also records the IP address and the time, among other things to counter spam and abuse.
Formspree is based in the United States, which means your data may be processed outside the European Economic Area. Formspree states that it relies on the European Commission’s Standard Contractual Clauses for such transfers.
If you would rather not use the form, you can reach Anwar Consulting directly by email, telephone or WhatsApp.
7. Communication by email and WhatsApp
Follow-up contact usually takes place by email. Ordinary email is not designed for exchanging highly sensitive data and is not end-to-end encrypted.
WhatsApp messages pass through the servers of that service provider. Use WhatsApp for short questions rather than for sharing confidential documents.
8. Highly sensitive data: what you should never send
Never send your DigiD username or password, banking passwords, PIN codes, card details or authentication codes to Anwar Consulting, through any channel. Anwar Consulting will never ask you for these.
Please also do not share identity documents, tax returns, payslips, bank statements or other highly sensitive documents through the contact form. Once we are in contact, we will agree a suitable way to deliver confidential documents.
Anwar Consulting does not currently operate its own secure client portal. This statement will be updated once such a solution has been selected.
9. How long are your data kept?
Data are not kept longer than necessary for the purpose for which they were collected, or than legally required.
| Type of data | Retention period |
|---|---|
| Enquiries that do not lead to an engagement | Up to 12 months after the last contact |
| Prospects with an ongoing conversation | For as long as contact continues, then up to 12 months |
| Client data and file records | For the duration of the agreement and afterwards as long as needed for settlement and liability |
| Administration, invoices and tax records | The statutory tax retention period of 7 years, and 10 years for data on immovable property |
| Business correspondence | For as long as relevant to the file, then deleted |
| Technical data around form submissions | According to the form processor’s retention periods |
10. Who are data shared with?
Your data are not sold and not used for advertising. They are shared only where necessary for the service or legally required.
- The hosting provider of this website, which makes the site technically available.
- Formspree, as processor of the contact form.
- The email provider hosting the business mailbox.
- Bookkeeping and tax filing software used in delivering the service, insofar as applicable to your file.
- The Dutch Tax Administration and other government bodies, where legally required or necessary to perform the engagement.
11. Transfers outside the European Economic Area
Processing takes place within the EEA as far as possible. With the form processor, processing may take place outside the EEA. Such transfers rely on the European Commission’s Standard Contractual Clauses, supplemented by the measures taken by the provider concerned.
12. Security
Appropriate technical and organisational measures are in place to protect your data. For security reasons, no details of the configuration are published here.
- The website is reachable only over an encrypted connection (HTTPS).
- Access to systems and data is limited to those who need it.
- Multi-factor authentication is used where the service in question supports it.
- Systems are securely configured and kept up to date.
- No more is requested than necessary (data minimisation).
- Backups are made to prevent loss of data.
13. Cookies and browser storage
This website uses no analytics cookies, no advertising cookies and no tracking cookies. There is no Google Analytics, Google Tag Manager, Meta Pixel, Hotjar or comparable service on the site.
The website sets no cookies of its own. If you choose a language yourself, one preference is stored locally in your browser under the name ac-lang. It contains only the chosen language code (nl, en or ar). No identifier, profile or personal data is stored in it, and the value is never sent to a server. You can clear this storage through your browser settings.
Because no non-essential cookies or trackers are used, no cookie banner is required.
14. The income tax calculator
The calculator on this website runs entirely in your own browser. The amounts you enter, such as your turnover, costs and any other income, are not sent to Anwar Consulting, not sent to an external service, not placed in the URL and not stored in your browser.
As soon as you close or reload the page, the entered amounts are gone. The result is an estimate and not a tax assessment of your situation.
15. Automated decision-making
Anwar Consulting does not use personal data to make decisions based solely on automated processing that produce legal effects concerning an individual or similarly significantly affect that individual.
The income tax calculator is a user-initiated calculation tool and does not make decisions about users.
16. Your rights
You have a number of rights under the GDPR. You can submit a request via info@anwarconsulting.nl.
Anwar Consulting will normally respond within one month of receiving a request. Where permitted by the GDPR, this period may be extended for complex or multiple requests. You will be informed if that applies.
To protect personal data against unauthorised disclosure or deletion, you may be asked to make your identity plausible. This is done proportionately and with as little additional personal data as reasonably possible.
- Access to the personal data processed about you.
- Rectification of inaccurate or incomplete data.
- Erasure of your data, insofar as no statutory retention duty applies.
- Restriction of processing.
- Objection to processing based on legitimate interest.
- Portability of data you provided yourself, insofar as that right applies.
- Withdrawal of consent, where processing is based on consent.
17. Filing a complaint
If you disagree with how your data are processed, please get in touch first so we can resolve it together.
You also always have the right to lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch data protection authority.
18. Changes to this statement
This statement is updated when working methods or the services used change. The date and version number at the top indicate when the text was last revised. Existing clients are informed of significant changes.
