Your privacy is important to us. Learn how we collect, use, and protect your data.
Last updated: April 2026
First Time Right ("we," "us," "our," or "Company") is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and all applicable EU data protection laws. This Privacy & Cookies Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at firsttimeright.net (the "Website") and related services.
As an EU-based company, we are legally required to:
Please read this Privacy & Cookies Policy carefully. By accessing and using the Website, you acknowledge that you have read and understood this policy. We will not process any personal data without your explicit consent.
We only collect data that you explicitly provide. We will NOT process any data without your consent and will NOT use data for any purpose other than what is stated below.
What we collect: Name, email address, phone number, company name, message content
Why (Purpose): To respond to your inquiry and provide project quotes/information
How long we keep it: 30 days after final response. After this period, your data is automatically deleted unless you request otherwise.
Your consent: By submitting a contact form, you consent to us processing this data solely for responding to your inquiry.
What we DON'T do: We do NOT use this data for marketing, will NOT add you to mailing lists without explicit separate consent, and will NOT share it with third parties without your permission.
What we collect: Email address
Why (Purpose): To send you project updates and company information (only if you explicitly opt-in)
How long we keep it: Until you unsubscribe. You can unsubscribe at any time with a single click in any email.
Your consent: You must explicitly check a box and confirm your subscription (double opt-in). We will send a confirmation email.
What we DON'T do: We do NOT sell or share your email with third parties. We do NOT profile you or make automated decisions based on your subscription.
What we collect: IP address, pages visited, time spent, device type, browser type, referral source
Why (Purpose): To understand how visitors use our website and improve user experience
How long we keep it: 13 months (Google's default). After this, analytics data is automatically deleted.
Your consent: You control this via cookie consent banner. Essential cookies cannot be disabled, but you can reject analytics tracking.
What we DON'T do: We do NOT use analytics data to profile you or create marketing lists. We anonymize and aggregate data.
What we collect: Browsing behavior on our site
Why (Purpose): To show you relevant ads on other websites (only if you consent)
How long we keep it: 90 days maximum from your last visit
Your consent: OPTIONAL - YOU DECIDE. You must explicitly accept marketing cookies. We will never use them without your consent.
What we DON'T do: We respect "Do Not Track" signals. If your browser has DNT enabled, we will NOT set marketing cookies even if you initially consented.
We only process your data based on one of these legal grounds:
You can withdraw consent at any time without providing a reason or any penalty.
Cookies are small files stored on your device that enable websites to remember information about your visit. Under GDPR, we must obtain your explicit consent before storing cookies (except for essential cookies that are strictly necessary for the website to function).
We respect browser "Do Not Track" (DNT) signals. If you enable DNT in your browser:
We share your information with third-party service providers who perform services on our behalf, including:
All service providers are contractually obligated to use your information solely for the purposes we specify and to maintain the confidentiality and security of your data.
We do not sell, trade, or rent your personal information to third parties for marketing purposes. However, we may disclose your information in the following circumstances:
If your information is transferred to countries outside the EU/EEA, we implement appropriate safeguards in compliance with GDPR, including Standard Contractual Clauses.
You have the right to request and receive a copy of ALL personal data we hold about you. We will provide this in a clear, accessible format within 30 days of your request.
How: Email info@firsttimeright.net with subject "DATA ACCESS REQUEST"
If any of your personal data is inaccurate or incomplete, you can request that we correct it immediately.
How: Email info@firsttimeright.net with subject "DATA CORRECTION REQUEST" and specify what needs to be corrected
This is your strongest right. You can demand the deletion of your personal data. We must delete it within 30 days unless we have a legal reason to keep it.
When you can use this:
Limitations: We may need to keep data if required by law (e.g., tax records for 10 years).
How: Email info@firsttimeright.net with subject "DELETE MY DATA" and we will confirm deletion within 30 days
You can ask us to stop processing your data temporarily (e.g., while you contest its accuracy).
How: Email info@firsttimeright.net with subject "RESTRICT DATA PROCESSING"
You can request your data in a machine-readable format (e.g., CSV) and transfer it to another service provider. We will provide this within 30 days.
How: Email info@firsttimeright.net with subject "DATA PORTABILITY REQUEST"
You can object to how we use your data (e.g., for analytics or marketing). We will stop processing unless we have a compelling legal reason.
How: Email info@firsttimeright.net with subject "OBJECT TO DATA PROCESSING"
If you consented to something (cookies, newsletters, contact forms), you can withdraw that consent at any time. It's as easy as clicking "unsubscribe" in an email or changing your cookie settings.
How: Use the unsubscribe link in emails, or email info@firsttimeright.net
If you believe we have violated your privacy rights, you can file a complaint with your national data protection authority:
To exercise ANY of these rights, contact us:
Email: info@firsttimeright.net
Subject Line: Clearly state your request (e.g., "DELETE MY DATA", "DATA ACCESS REQUEST")
Response Time: We will respond within 30 days (or 60 days for complex requests)
Verification: We may ask for identification to verify your request
If you have questions, concerns, or requests regarding this Privacy & Cookies Policy or our privacy practices, please contact us:
Email: info@firsttimeright.net
Website: www.firsttimeright.net
General Inquiries: info@firsttimeright.net
Response Time: Within 30 days for data requests, 14 days for other inquiries
If you believe we have violated your data protection rights, you have the right to file a formal complaint with your local data protection authority (supervisory authority). You do NOT need to contact us first.
For residents in the Netherlands:
Autoriteit Persoonsgegevens (AP)
www.autoriteitpersoonsgegevens.nl
For residents in other EU countries:
Find your supervisory authority at: European Data Protection Board (EDPB)
Name: First Time Right
Location: Netherlands (EU)
Data Protection Officer / Privacy Contact: info@firsttimeright.net
Regulatory Framework: GDPR and Dutch Data Protection Laws
We are classified as a "Data Controller" under GDPR. This means we are responsible for how your data is processed and must ensure compliance with all GDPR requirements.
We commit to these six principles:
We use the following approved sub-processors (service providers) who are bound by Data Processing Agreements:
Important: All sub-processors are contractually required to protect your data and can ONLY use it for the service they provide. We perform regular audits to ensure compliance.
Our website is not directed to children under 16 years old (or the applicable age in your country). We do not knowingly collect personal information from children. If we discover we have collected information from a child, we will delete it immediately.
Parents/Guardians: If you believe we have processed a child's data without parental consent, please contact us immediately at info@firsttimeright.net.
We implement industry-standard security measures:
If a data breach occurs: We will notify you within 72 hours as required by GDPR Article 33, explaining what happened and what steps we're taking to protect you.
Our website may contain links to third-party websites and social media. We are NOT responsible for their privacy practices. We urge you to review their privacy policies before providing personal information.
We do NOT use automated decision-making or profiling. We will never:
We treat you as an individual, not an algorithm.
We may update this Privacy & Cookies Policy periodically. When we make changes, we will:
Continued use of the website after updates = acceptance of the new policy. If you disagree with changes, you can contact us to delete your data.