PRIVACY
Privacy policy
Last updated: 18 October 2026
This policy covers someho.nl, our contact channels and SOMEHO Hub, our internal workspace for managing clients’ social media channels. It explains what data we process, why we use it and how to request access or deletion. The public website uses no analytics or advertising cookies.
Resend may process information in the United States. Further information is available in Resend’s privacy policy. Resend ↗
Who processes your data
Someho B.V. (SOMEHO) takes care of the personal information you share with us through this website and our contact channels. For questions about how your data is processed, reach us using the contact details below.
When managing social media channels, we process data on the instructions of the client responsible for the channel. That client determines the purpose of this processing. SOMEHO is a contact point for data in SOMEHO Hub and coordinates requests with the client where necessary. SOMEHO determines the processing for its own contact records, user accounts and security.
A question about this policy, or about the data we hold on you? Use the details below — you'll get an answer from a person.
- Someho B.V.
- Cruquiuszoom 55, Cruquius
- Chamber of Commerce (KvK)
- 42192816
- VAT
- NL870119321B01
- info@someho.nl
- Phone
- +31 6 54 99 03 77
SOMEHO Hub: data from Facebook and Instagram
An authorised account administrator connects a client’s channels through Meta. The available data depends on the permissions granted, account type and platform capabilities. We receive data through the official integration, including when someone has not contacted SOMEHO directly.
- Account, page and profile data: identifiers, names, usernames, profile links and the associated client; access tokens and granted permissions that enable the connection. We do not ask for your Facebook or Instagram password.
- Posts and ads: identifiers, text, publication times, media or media links, links to the original publication and available comments. Ad data is only retrieved for connected ad accounts.
- Comments, private messages and available message requests: content, sender name or username, platform identifier, time, related publication and any attachments or references. This may include information the sender chooses to share.
- Mentions and tags, including available story mentions: accounts involved, text, time and a reference to the content. We do not download or store the media files of story mentions. A link supplied by Meta may be displayed temporarily; expired or deleted stories are no longer available.
- Work records: employee name and account, assignment, handling status, internal notes and a log of management actions with their time and reason.
What we process
When you submit the form, we receive your name, restaurant name, email address or phone number and the message you enter. Your selected service, language and page accompany the enquiry. If the link includes campaign information, we also receive its source, medium and campaign name, plus the referring website’s domain name. This helps us understand your enquiry and how you found us.
- If you reach us on WhatsApp, by email or by phone: your name, your phone number or email address, the name of your venue and whatever you put in the message.
- If you book an intro call through our calendar link: your name, your email address and the slot you pick. That appointment runs through Google Calendar.
- If we work together: what we need to do the work and invoice it — company name, address, VAT number, contact person and access to the accounts we manage for you.
- Our hosting provider processes technical logs, such as IP addresses and request times. To limit abuse and duplicate enquiries, the website temporarily uses technical identifiers and hashed contact details.
Why we process it
Each of these rests on a legal basis under the GDPR.
- Answering your question and making a proposal — at your request, as the run-up to a contract.
- Doing the work and invoicing it — to perform that contract.
- Keeping our books — because tax law requires it.
- Keeping the site working and secure — our legitimate interest.
Cookies and measurement
This website sets no tracking, analytics or advertising cookies. There's no Google Analytics on it, no Meta pixel and no TikTok pixel.
There's one cookie: NEXT_LOCALE. It records which language you're viewing the site in. It holds nothing but “nl”, “en” or “es”, it disappears when you close your browser, and it's purely functional — cookies like that need no consent, which is why there's no cookie banner here either.
The videos sit on our own server rather than on YouTube or Vimeo, and the fonts ship with the site itself. So opening a page sends no request to a third party.
If you do click through to WhatsApp, Instagram, TikTok, LinkedIn, Facebook or our calendar link, you leave this site and that party's privacy policy applies from then on.
If we ever do start measuring, we'll update this policy and ask for consent up front wherever that's required.
SOMEHO Hub is a separate, restricted workspace. It uses functional session and security cookies for login and access control. The information above about the public website does not describe the cookies Meta or other platforms use within their own services.
Who else sees it
We don't sell data and we don't share it for commercial purposes. We do use the service providers we need in order to work:
- Resend, to deliver your form enquiry to us by email, and our hosting and email provider;
- Google, for the calendar link you book an intro call through;
- WhatsApp (Meta), if you message us there;
- our bookkeeper and accounting software, for invoicing;
- advertising platforms such as Google, Meta and TikTok, for campaigns on clients’ instructions. We do not use information from enquiries or private conversations to build advertising audiences;
- Meta (Facebook and Instagram), to connect authorised accounts, retrieve available channel data and carry out selected management actions in SOMEHO Hub; our hosting and database providers process the data needed for this.
Some of these — Google, Meta and TikTok — also process data outside the European Economic Area, as a rule in the United States. That happens under the EU-US Data Privacy Framework where the party is certified for it, and otherwise under the European Commission's standard contractual clauses. We have a data processing agreement with anyone who processes personal data on our behalf.
How long we keep it
We keep nothing longer than we need to.
- Enquiries that don't turn into a project: twelve months at most.
- Client data: up to two years after the work ends.
- Invoices and the rest of our books: seven years, because Dutch tax law says so.
- Footage made for a venue: as long as that venue uses it, or until they ask us to take it down.
Footage with recognisable people in it
We film and photograph inside our clients' venues. Guests or staff are sometimes recognisable in the result. That footage is made on the venue's instructions, for its own channels, and sometimes shown on this site as an example of our work.
Are you in a shot and would you rather not be? Tell us using the details at the top of this page. We'll take it off our own channels and ask the venue in question to do the same. You don't have to give a reason.
How we secure it
The site runs entirely over https. Access to our systems and to the accounts we manage for clients is limited to the people who work with them, with strong, unique passwords and two-factor authentication wherever the platform supports it. Think something has gone wrong with your data? Tell us and we'll pick it up straight away.
Your rights
You stay in charge of your own data. You can ask us at any time for:
- access: an overview of what we hold on you;
- correction: fixing or completing anything that's wrong;
- erasure: deleting your data, unless the law requires us to keep it;
- restriction: pausing the processing;
- objection: objecting to processing based on our legitimate interest;
- portability: receiving your data in a common file format;
- withdrawal: wherever you gave consent, you can take it back again.
Send your request to the contact details at the top of this page; you'll have an answer within a month. To make sure data never reaches the wrong person, we may ask you to confirm the request from the address or number we already know.
Changes to this policy
If the way we work changes — a measurement tool, a new channel, a different provider — we'll update this policy and change the date at the top. For anything far-reaching we'll tell the clients it affects.
Making a complaint
If you think we're not handling your data carefully, tell us first — that usually settles it. If we can't work it out together, you have the right to lodge a complaint with the Dutch data protection authority.
How we use social media data
We use this data to manage client channels: handle comments and messages, follow up mentions, prepare and schedule content, find earlier publications and review duplicate content. Where a platform allows it, an authorised employee can reply, edit the account’s own comments, hide comments or block a user. These actions are selected by an employee; the inbox does not automatically block visitors.
For channel content, we follow the client’s instructions and service agreement. The client is responsible for an appropriate legal basis for communications on its channels. For our own user and client administration, we use data to provide our services; access control and reviewing management actions serve our legitimate interest in providing secure services.
Only authorised staff within the relevant organisation have access to the workspace. Private messages are not published as public website content. A selected public reply is visible on the social media platform; a selected private reply is sent to the intended recipient. We do not sell this data.