SOMEHO

PRIVACY

Privacy policy

Last updated: 18 October 2026

This policy covers someho.nl, our contact channels and SOMEHO Hub, our internal workspace for managing clients’ social media channels. It explains what data we process, why we use it and how to request access or deletion. The public website uses no analytics or advertising cookies.

Resend may process information in the United States. Further information is available in Resend’s privacy policy. Resend ↗

Who processes your data

Someho B.V. (SOMEHO) takes care of the personal information you share with us through this website and our contact channels. For questions about how your data is processed, reach us using the contact details below.

When managing social media channels, we process data on the instructions of the client responsible for the channel. That client determines the purpose of this processing. SOMEHO is a contact point for data in SOMEHO Hub and coordinates requests with the client where necessary. SOMEHO determines the processing for its own contact records, user accounts and security.

A question about this policy, or about the data we hold on you? Use the details below — you'll get an answer from a person.

Someho B.V.
Cruquiuszoom 55, Cruquius
Chamber of Commerce (KvK)
42192816
VAT
NL870119321B01

SOMEHO Hub: data from Facebook and Instagram

An authorised account administrator connects a client’s channels through Meta. The available data depends on the permissions granted, account type and platform capabilities. We receive data through the official integration, including when someone has not contacted SOMEHO directly.

  • Account, page and profile data: identifiers, names, usernames, profile links and the associated client; access tokens and granted permissions that enable the connection. We do not ask for your Facebook or Instagram password.
  • Posts and ads: identifiers, text, publication times, media or media links, links to the original publication and available comments. Ad data is only retrieved for connected ad accounts.
  • Comments, private messages and available message requests: content, sender name or username, platform identifier, time, related publication and any attachments or references. This may include information the sender chooses to share.
  • Mentions and tags, including available story mentions: accounts involved, text, time and a reference to the content. We do not download or store the media files of story mentions. A link supplied by Meta may be displayed temporarily; expired or deleted stories are no longer available.
  • Work records: employee name and account, assignment, handling status, internal notes and a log of management actions with their time and reason.

How we use social media data

We use this data to manage client channels: handle comments and messages, follow up mentions, prepare and schedule content, find earlier publications and review duplicate content. Where a platform allows it, an authorised employee can reply, edit the account’s own comments, hide comments or block a user. These actions are selected by an employee; the inbox does not automatically block visitors.

For channel content, we follow the client’s instructions and service agreement. The client is responsible for an appropriate legal basis for communications on its channels. For our own user and client administration, we use data to provide our services; access control and reviewing management actions serve our legitimate interest in providing secure services.

Only authorised staff within the relevant organisation have access to the workspace. Private messages are not published as public website content. A selected public reply is visible on the social media platform; a selected private reply is sent to the intended recipient. We do not sell this data.

Retention and disconnecting social media data

We retain SOMEHO Hub data for as long as it is needed for the service, handling conversations and reviewing management actions. The client-data period below applies: at most two years after the service ends, and less if the data is no longer needed earlier or a valid deletion request is fulfilled. A legal retention duty may apply to separate administrative records; this is not a reason to retain every message.

You can revoke SOMEHO Hub’s access through the connected apps or business integrations settings on Facebook or Instagram. You can also ask info@someho.nl to disconnect the account. This stops further access through that connection. Revoking access does not automatically erase data already stored; you can submit the request described below.

Request deletion of SOMEHO Hub data

Email info@someho.nl with the subject “SOMEHO Hub data deletion”. You can do this even if you do not have a SOMEHO Hub account. Include the relevant Facebook page or Instagram account, your own username or contact address and the data you want deleted. A link to the comment or the conversation date helps us find your data. Do not send a password, access token or copy of your identity document.

We acknowledge your request and, where necessary, verify in an appropriate way that the data relates to you. You will receive a substantive response within one month. If the client responsible for the channel needs to decide on the request, we coordinate with that client and explain how it will be handled.

Following a valid request, we delete or anonymise the relevant data in our workspace, including associated message content and identifying work records, unless a legal obligation or another valid exception prevents this. In that case, we explain what must be retained and why. We confirm completion by email.

This request concerns data processed by SOMEHO. Deleting our copy does not delete an original post, comment, private message or account at Meta. For those, also use Facebook’s or Instagram’s deletion or privacy options, or ask the relevant channel administrator for help.

What we process

When you submit the form, we receive your name, restaurant name, email address or phone number and the message you enter. Your selected service, language and page accompany the enquiry. If the link includes campaign information, we also receive its source, medium and campaign name, plus the referring website’s domain name. This helps us understand your enquiry and how you found us.

  • If you reach us on WhatsApp, by email or by phone: your name, your phone number or email address, the name of your venue and whatever you put in the message.
  • If you book an intro call through our calendar link: your name, your email address and the slot you pick. That appointment runs through Google Calendar.
  • If we work together: what we need to do the work and invoice it — company name, address, VAT number, contact person and access to the accounts we manage for you.
  • Our hosting provider processes technical logs, such as IP addresses and request times. To limit abuse and duplicate enquiries, the website temporarily uses technical identifiers and hashed contact details.

Why we process it

Each of these rests on a legal basis under the GDPR.

  • Answering your question and making a proposal — at your request, as the run-up to a contract.
  • Doing the work and invoicing it — to perform that contract.
  • Keeping our books — because tax law requires it.
  • Keeping the site working and secure — our legitimate interest.

Cookies and measurement

This website sets no tracking, analytics or advertising cookies. There's no Google Analytics on it, no Meta pixel and no TikTok pixel.

There's one cookie: NEXT_LOCALE. It records which language you're viewing the site in. It holds nothing but “nl”, “en” or “es”, it disappears when you close your browser, and it's purely functional — cookies like that need no consent, which is why there's no cookie banner here either.

The videos sit on our own server rather than on YouTube or Vimeo, and the fonts ship with the site itself. So opening a page sends no request to a third party.

If you do click through to WhatsApp, Instagram, TikTok, LinkedIn, Facebook or our calendar link, you leave this site and that party's privacy policy applies from then on.

If we ever do start measuring, we'll update this policy and ask for consent up front wherever that's required.

SOMEHO Hub is a separate, restricted workspace. It uses functional session and security cookies for login and access control. The information above about the public website does not describe the cookies Meta or other platforms use within their own services.

Who else sees it

We don't sell data and we don't share it for commercial purposes. We do use the service providers we need in order to work:

  • Resend, to deliver your form enquiry to us by email, and our hosting and email provider;
  • Google, for the calendar link you book an intro call through;
  • WhatsApp (Meta), if you message us there;
  • our bookkeeper and accounting software, for invoicing;
  • advertising platforms such as Google, Meta and TikTok, for campaigns on clients’ instructions. We do not use information from enquiries or private conversations to build advertising audiences;
  • Meta (Facebook and Instagram), to connect authorised accounts, retrieve available channel data and carry out selected management actions in SOMEHO Hub; our hosting and database providers process the data needed for this.

Some of these — Google, Meta and TikTok — also process data outside the European Economic Area, as a rule in the United States. That happens under the EU-US Data Privacy Framework where the party is certified for it, and otherwise under the European Commission's standard contractual clauses. We have a data processing agreement with anyone who processes personal data on our behalf.

How long we keep it

We keep nothing longer than we need to.

  • Enquiries that don't turn into a project: twelve months at most.
  • Client data: up to two years after the work ends.
  • Invoices and the rest of our books: seven years, because Dutch tax law says so.
  • Footage made for a venue: as long as that venue uses it, or until they ask us to take it down.

Footage with recognisable people in it

We film and photograph inside our clients' venues. Guests or staff are sometimes recognisable in the result. That footage is made on the venue's instructions, for its own channels, and sometimes shown on this site as an example of our work.

Are you in a shot and would you rather not be? Tell us using the details at the top of this page. We'll take it off our own channels and ask the venue in question to do the same. You don't have to give a reason.

How we secure it

The site runs entirely over https. Access to our systems and to the accounts we manage for clients is limited to the people who work with them, with strong, unique passwords and two-factor authentication wherever the platform supports it. Think something has gone wrong with your data? Tell us and we'll pick it up straight away.

Your rights

You stay in charge of your own data. You can ask us at any time for:

  • access: an overview of what we hold on you;
  • correction: fixing or completing anything that's wrong;
  • erasure: deleting your data, unless the law requires us to keep it;
  • restriction: pausing the processing;
  • objection: objecting to processing based on our legitimate interest;
  • portability: receiving your data in a common file format;
  • withdrawal: wherever you gave consent, you can take it back again.

Send your request to the contact details at the top of this page; you'll have an answer within a month. To make sure data never reaches the wrong person, we may ask you to confirm the request from the address or number we already know.

Changes to this policy

If the way we work changes — a measurement tool, a new channel, a different provider — we'll update this policy and change the date at the top. For anything far-reaching we'll tell the clients it affects.

Making a complaint

If you think we're not handling your data carefully, tell us first — that usually settles it. If we can't work it out together, you have the right to lodge a complaint with the Dutch data protection authority.

Autoriteit Persoonsgegevens