SOMEHO

PRIVACY

Privacy policy

Last updated: 5 September 2026

You can reach us through the enquiry form, email, phone or WhatsApp. Below we explain what information we process, how we use it and how to contact us about your data. This website uses no analytics or advertising cookies.

Resend may process information in the United States. Further information is available in Resend’s privacy policy. Resend ↗

Who processes your data

Someho is the hospitality arm of M&A Marketing. M&A Marketing is the data controller for the personal data that reaches us through this website and our contact channels.

A question about this policy, or about the data we hold on you? Use the details below — you'll get an answer from a person.

SOMEHO
M&A Marketing · Cruquiuszoom 55, Cruquius

What we process

When you submit the form, we receive your name, restaurant name, email address or phone number and the message you enter. Your selected service, language and page accompany the enquiry. If the link includes campaign information, we also receive its source, medium and campaign name, plus the referring website’s domain name. This helps us understand your enquiry and how you found us.

  • If you reach us on WhatsApp, by email or by phone: your name, your phone number or email address, the name of your venue and whatever you put in the message.
  • If you book an intro call through our calendar link: your name, your email address and the slot you pick. That appointment runs through Google Calendar.
  • If we work together: what we need to do the work and invoice it — company name, address, VAT number, contact person and access to the accounts we manage for you.
  • Our hosting provider processes technical logs, such as IP addresses and request times. To limit abuse and duplicate enquiries, the website temporarily uses technical identifiers and hashed contact details.

Why we process it

Each of these rests on a legal basis under the GDPR.

  • Answering your question and making a proposal — at your request, as the run-up to a contract.
  • Doing the work and invoicing it — to perform that contract.
  • Keeping our books — because tax law requires it.
  • Keeping the site working and secure — our legitimate interest.

Cookies and measurement

This website sets no tracking, analytics or advertising cookies. There's no Google Analytics on it, no Meta pixel and no TikTok pixel.

There's one cookie: NEXT_LOCALE. It records which language you're viewing the site in. It holds nothing but “nl”, “en” or “es”, it disappears when you close your browser, and it's purely functional — cookies like that need no consent, which is why there's no cookie banner here either.

The videos sit on our own server rather than on YouTube or Vimeo, and the fonts ship with the site itself. So opening a page sends no request to a third party.

If you do click through to WhatsApp, Instagram, TikTok, LinkedIn, Facebook or our calendar link, you leave this site and that party's privacy policy applies from then on.

If we ever do start measuring, we'll update this policy and ask for consent up front wherever that's required.

Who else sees it

We don't sell data and we don't share it for commercial purposes. We do use the service providers we need in order to work:

  • Resend, to deliver your form enquiry to us by email, and our hosting and email provider;
  • Google, for the calendar link you book an intro call through;
  • WhatsApp (Meta), if you message us there;
  • our bookkeeper and accounting software, for invoicing;
  • advertising platforms such as Google, Meta and TikTok, but only for clients' campaigns — never with anything from a conversation with you.

Some of these — Google, Meta and TikTok — also process data outside the European Economic Area, as a rule in the United States. That happens under the EU-US Data Privacy Framework where the party is certified for it, and otherwise under the European Commission's standard contractual clauses. We have a data processing agreement with anyone who processes personal data on our behalf.

How long we keep it

We keep nothing longer than we need to.

  • Enquiries that don't turn into a project: twelve months at most.
  • Client data: up to two years after the work ends.
  • Invoices and the rest of our books: seven years, because Dutch tax law says so.
  • Footage made for a venue: as long as that venue uses it, or until they ask us to take it down.

Footage with recognisable people in it

We film and photograph inside our clients' venues. Guests or staff are sometimes recognisable in the result. That footage is made on the venue's instructions, for its own channels, and sometimes shown on this site as an example of our work.

Are you in a shot and would you rather not be? Tell us using the details at the top of this page. We'll take it off our own channels and ask the venue in question to do the same. You don't have to give a reason.

How we secure it

The site runs entirely over https. Access to our systems and to the accounts we manage for clients is limited to the people who work with them, with strong, unique passwords and two-factor authentication wherever the platform supports it. Think something has gone wrong with your data? Tell us and we'll pick it up straight away.

Your rights

You stay in charge of your own data. You can ask us at any time for:

  • access: an overview of what we hold on you;
  • correction: fixing or completing anything that's wrong;
  • erasure: deleting your data, unless the law requires us to keep it;
  • restriction: pausing the processing;
  • objection: objecting to processing based on our legitimate interest;
  • portability: receiving your data in a common file format;
  • withdrawal: wherever you gave consent, you can take it back again.

Send your request to the contact details at the top of this page; you'll have an answer within a month. To make sure data never reaches the wrong person, we may ask you to confirm the request from the address or number we already know.

Changes to this policy

If the way we work changes — a measurement tool, a new channel, a different provider — we'll update this policy and change the date at the top. For anything far-reaching we'll tell the clients it affects.

Making a complaint

If you think we're not handling your data carefully, tell us first — that usually settles it. If we can't work it out together, you have the right to lodge a complaint with the Dutch data protection authority.

Autoriteit Persoonsgegevens