Last updated: 18 October 2026
This Privacy Policy explains how Dam Writers processes personal data when you visit our website, use the Content Audit, pay, receive a report or contact us. It applies to the English website and the English Content Audit. We process personal data under the EU General Data Protection Regulation (GDPR) and, for people in the United Kingdom, the UK GDPR.
1. Data controller
Dam Writers VOF, trading as Dam Writers, is the data controller.
| Address | Commelinstraat 59-2, 1093 TK Amsterdam, the Netherlands |
|---|---|
| Dutch Chamber of Commerce (KvK) | 77938798 |
| VAT identification number | NL861206162B01 |
| Email for privacy questions | info@damwriters.com |
| Telephone | +31 6 57062683 |
For card purchases, Link (a Stripe service) is the merchant of record. Stripe and Dam Writers are then independent controllers: Stripe decides for itself how it uses the payment data you give it, under its own privacy policy, and passes us the order data we need (see sections 2 and 5).
2. What data we process
Website and security data
- IP address, date and time, requested page, referring page, browser and device information, and technical log data;
- technical cookies, browser storage and security features needed to make an audit, the return from the payment page and access control work securely;
- abuse, rate-limit, error and diagnostic results.
Audit input and public website evidence
- the URL and the normalised domain you enter;
- the language, industry and other form options you choose;
- publicly accessible page content, page titles, metadata, headings, links, screenshots and technical rendering data from the website you submit;
- job, evidence and report IDs, progress, error codes, scores, observations and recommendations;
- the generated web report and the PDF.
The tool is intended only for public pages. Do not enter passwords, private links, special categories of personal data or other confidential information. Public web pages may contain personal data of third parties. You are responsible for having a valid reason to have the website you submit analysed.
Payment, contract and contact data
- the order data you enter on the payment page and that Stripe or Link passes to us: your email address, name, phone number (if given), billing address, country, any business and VAT or tax ID details, and the order details;
- amount, currency, payment method category, payment status and Stripe or Link identifiers; we do not receive or store full card or bank account details;
- whether you buy as a consumer or a business, separate consents, timestamps, legal snapshots, order and payment references, and the delivery status of the order confirmation;
- data about the iDEAL payment or card reservation, the charge, refunds, withdrawal, disputes and settlement;
- messages you send us, including a request for a manual audit or an invoice, and information needed to resolve your question.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Displaying the website and tool, validating a request and fixing technical faults | Legitimate interest in a secure, working service; steps taken at your request before entering into a contract |
| Collecting public website evidence, carrying out the audit, delivering the report and PDF, and restoring access | Performance of the contract |
| Processing the payment, card reservation or charge, refunds and the order confirmation | Performance of the contract and legal obligations |
| Keeping verifiable records of consents, legal texts, withdrawals, complaints and disputes | Legal obligation and legitimate interest in establishing, exercising or defending legal claims |
| Preventing abuse, fraud, duplicate settlement and security incidents | Legitimate interest in security and fraud prevention; legal obligation where necessary |
| Meeting administrative, tax and accounting obligations | Legal obligation |
| Handling your question or privacy request | Performance of the contract, legal obligation or legitimate interest, depending on the request |
| Measuring visits to the website (analytics) | Your consent, where the law requires it; otherwise legitimate interest in understanding how the website is used |
Where we rely on a legitimate interest, we weigh that interest against your interests and fundamental rights. You can object on grounds relating to your particular situation; see section 9.
4. Automated processing and AI
Before payment, the Content Audit uses the URL and form options you enter only for free safety, configuration and availability checks. The paid collection of website data starts only after your payment (or card reservation) has been confirmed and our email service has accepted the order confirmation. The tool then uses automated browser technology to collect and render public pages, and an AI model from OpenAI to analyse that limited evidence and write a report.
The report gives content recommendations and does not in itself have any legal or similarly significant effect on individuals. Dam Writers does not take any solely automated decision about your rights or access based on the content scores. Payment and security checks may run automatically, and they are needed to perform the contract safely. Contact us if you would like an outcome explained or suspect a technical error.
5. Recipients and processors
| Provider/category | Role | Data |
|---|---|---|
| Automattic / WordPress.com | Processor for hosting, website infrastructure, security, spam filtering, logging, site statistics and sending our emails | Website traffic, technical data, stored tool, contract and email data |
| Stripe | Processor for iDEAL payments, invoicing and refunds on our instructions; independent controller for its own fraud prevention, security and legal compliance | Contact, billing, payment and transaction data |
| Link (Stripe) | Merchant of record for card purchases (including Apple Pay, Google Pay and Link), through Sold through Link, LLC; Link’s consumer services are provided by Stripe Technology Company Limited (Ireland) for buyers outside the Americas. Processes the payment, issues receipts and invoices, handles tax, transaction support, refunds and disputes as an independent controller under its own privacy policy | Contact, billing, payment, tax and transaction data you enter on the payment page |
| Browserless | Processor for automated opening and rendering of public web pages | Submitted URLs, public page content, rendering and screenshot data |
| OpenAI | Processor for automated analysis and writing of the audit report, through its API | Limited public website evidence, context and technical instructions; no payment details |
| Traffic measurement through the Google tag (Google Analytics), only where enabled and, where the law requires it, after your consent | Page, referrer, browser, device, approximate location and identifier data, depending on configuration and consent | |
| Professional advisers and competent authorities | Legal, tax, security or regulatory matters, where necessary | Only the data needed for the purpose concerned |
We do not sell your personal data, and we do not share it for targeted advertising. Providers may process the data only for the agreed service, their own legal obligations and security, in line with the applicable contracts and privacy terms. Link and Stripe, where they act as independent controllers, use your data under their own privacy policies.
6. Transfers outside the EEA and the UK
Some providers, including Stripe, Link, Browserless, OpenAI and Google, may process data in the United States or other countries outside the European Economic Area and the United Kingdom. When that happens, we rely on a lawful transfer mechanism: an adequacy decision (for the United States, the EU-US Data Privacy Framework and its UK Extension, where the provider is certified) or standard contractual clauses approved by the European Commission (with the UK Addendum for UK data), and we assess additional safeguards where needed. You can ask for information about the mechanism that applies by emailing info@damwriters.com.
7. Retention periods
| Data | Normal period |
|---|---|
| Raw website evidence and screenshots | 24 hours after collection |
| Technical AI and error diagnostics | 7 days |
| Unpaid, cancelled or failed audit jobs and report status | Up to 30 days, unless an unresolved payment or security matter requires them to be kept |
| Published paid report, PDF source and job data | Report and PDF access ends 30 days after publication; the report and its job data are then deleted in the daily clean-up, unless a payment, refund or dispute is still open |
| Encrypted order reference stored with the payment record | Removed about 90 days after the report is published, unless a dispute or legal hold applies |
| Expired or used one-time recovery and confirmation links | Removed in the daily clean-up after they expire, are used or are revoked |
| Content of a closed manual support request in the tool | Redacted 30 days after closure |
| Operational payment and webhook events | 180 days as a rule; longer where needed for an open refund, dispute, security investigation or legal retention obligation |
| Contract, payment, invoice and core accounting records | 7 years, to the extent they form part of the records we must keep by law |
| General correspondence | Up to 24 months after the matter is closed, unless a longer period is needed for an ongoing contract, complaint or legal claim |
We may keep data separately for longer when a legal retention obligation, ongoing dispute, refund, fraud investigation or legal hold requires it. After that, we delete or anonymise the data. Backups may continue to exist for a short time under the secure backup cycle and are not used again for ordinary purposes. Stripe and Link keep the payment data they control for the periods set out in their own privacy policies.
8. Cookies and browser storage
dwfcc5_owner: a strictly necessary, secure cookie that links this browser to a guest audit; maximum duration one year.dwfcc5_return_bind_…: a strictly necessary security cookie for the return from the payment page; lasts about two hours and is then deleted.dwfcc5_human_access_…: a strictly necessary cookie that gives this browser access to a manual audit request you started; up to 90 days.dwfcc5_checkout_recoveryand limited audit and recovery states in session storage: keep the audit linked to the same tab during a payment redirect and are deleted after use or when the session ends.- WordPress.com/Jetpack site statistics and a Google tag (Google Analytics) may measure visits and, depending on configuration, process page, referrer, browser, device, approximate location and identifier data. Where EU or UK law requires consent for non-essential measurement technology, we only use it after you have given that consent, and you can withdraw your consent at any time.
- WordPress.com may also process strictly necessary security, session and infrastructure data.
- On the payment page, Stripe and Link set their own cookies under their own policies.
You can block or clear cookies and similar browser storage. This may limit traffic measurement and the browser may lose its link to an active or saved audit, but a confirmed payment does not disappear from our records.
9. Your privacy rights
- access to your personal data;
- correction of inaccurate data;
- erasure, where there is no valid reason to keep the data;
- restriction of processing;
- objection to processing based on a legitimate interest;
- portability of data you provided that is processed by automated means on the basis of consent or a contract;
- withdrawal of consent, without affecting processing that was lawful before then;
- information about a relevant international transfer.
Send your request to info@damwriters.com. We may ask for limited additional information to verify your identity. We normally respond within one month. For a complex request, we may extend that period as allowed by the GDPR or UK GDPR, and we will let you know if we do. We handle requests from people outside the EU and the UK, including the United States, in the same way.
You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or with the supervisory authority in the EU country where you live or work. If you are in the United Kingdom, you can complain to the Information Commissioner’s Office (ICO). We would appreciate the chance to resolve your concern first, but you are not required to give us that chance.
10. Security
We use appropriate technical and organisational measures, including TLS, access restrictions, secure tokens, encrypted storage of sensitive audit evidence, rate limits, signed payment notifications, logging, and separation of admin and public functions. No method is completely free of risk. Report a suspected vulnerability to info@damwriters.com, without making sensitive information public.
11. Children
The website and Content Audit are aimed at adults and business users, not at children. We do not knowingly ask for personal data from children. Contact us if you think a child has given us data.
12. Changes and contact
We may update this Privacy Policy when the service, our providers or the law changes. The date of the latest version is shown at the top. The legal snapshot recorded with an order remains available for handling that contract.
Questions or requests: Dam Writers VOF · Commelinstraat 59-2 · 1093 TK Amsterdam · the Netherlands · info@damwriters.com · +31 6 57062683
See also the Terms of Service for information about the product, payment, delivery and withdrawal.