Privacy Policy

1. Who we are

This website is operated by Rodrigo Kato Marketing Digital, trading as Watermouse. We provide Google Ads management services to European eCommerce brands.

For the purposes of the General Data Protection Regulation (GDPR), we are the data controller for personal data collected through this website. If you have any questions about how we handle your data, see Section 9.

2. What data we collect

We only collect data that you actively provide to us. We do not collect data passively through tracking scripts beyond those described in Section 7.

Data you may provide includes:

• Contact details — your name, email address, company name, and website URL, submitted through our booking or enquiry forms.
• Quiz and assessment responses — answers you submit through our free assessment tools, along with your email address if you request results.
• Communications — any messages you send us directly by email.

We do not collect payment information. We do not collect sensitive personal data (such as health, financial, or identity information).

3. How we use your data

We use the data you provide only for the purposes for which you gave it:

• To respond to enquiries — if you book a call or send us a message, we use your contact details to get back to you.
• To deliver assessment results — if you complete a quiz or assessment and provide your email, we use that address to send your results.
• To send relevant follow-up communications — with your consent, we may add your email to our mailing list to share insights, updates, or relevant offers. You can unsubscribe at any time via the link in any email we send.
• To manage our client relationship — if you become a client, we use your data to fulfil our service agreement.

We do not use your data for automated profiling, automated decision-making, or targeted advertising. We do not sell your data to any third party, ever.

4. Legal basis for processing

Under the GDPR, we need a legal basis to process your personal data. We rely on the following:

• Legitimate interests — responding to enquiries you initiate and following up with prospective clients who have expressed interest in our services.
• Contract performance — processing data necessary to deliver services to clients under a signed agreement.
• Consent — for email marketing communications, analytics cookies, and sending assessment results. You can withdraw consent at any time — use the unsubscribe link in any email, adjust your cookie preferences, or contact us directly.

5. How long we keep your data

We keep your data only for as long as necessary:

• Enquiries that don't convert — we retain your contact details for up to 12 months after our last communication, then delete them.
• Assessment responses — retained for up to 6 months unless you become a client.
• Client data — retained for the duration of the engagement plus 3 years, in line with standard business record-keeping requirements.

You can request deletion of your data at any time (see Section 8).

6. Third parties

We do not share your personal data with third parties for marketing purposes. We may share data with the following categories of service providers strictly to operate our business:

• Email marketing platform — we use an email marketing tool (such as Mailchimp or ActiveCampaign) to manage our mailing list and send follow-up communications. Your email and name may be stored in this platform if you opt in. You can unsubscribe at any time.
• Internal records — lead and client data may be stored in Google Drive for business administration. Google processes this data on our behalf under their data processing terms.
• Analytics — we use Google Analytics to understand how visitors use our site. Google Analytics collects anonymised usage data (pages visited, time on site, approximate location) via cookies. No personally identifiable information is shared. You can opt out via your cookie preferences or using the Google Analytics opt-out browser add-on.
• Hosting — this website is hosted on Netlify. Netlify may process technical data (such as IP addresses) as part of serving the site. See Netlify's privacy policy.

We do not sell your data to any third party. If we introduce additional tools that process personal data, we will update this policy before doing so.

7. Cookies

We use the following cookies on this site:

• Cookie consent preference — stores whether you have accepted or declined our cookie notice. This is a functional cookie and does not track you.
• Google Analytics — if you accept cookies, we use Google Analytics to collect anonymised data about how visitors use our site (pages visited, session duration, approximate location by country). These are analytics cookies set by Google. No personally identifiable information is included. You can decline analytics cookies using the cookie banner when you first visit the site.

You can change your cookie preferences at any time by clearing your browser cookies and revisiting the site. You can also use the Google Analytics opt-out browser add-on to prevent analytics tracking across all sites.

8. Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Access — you can request a copy of the personal data we hold about you.
• Rectification — you can ask us to correct inaccurate or incomplete data.
• Erasure — you can ask us to delete your data, subject to any legal obligations we have to retain it.
• Restriction — you can ask us to restrict how we use your data while a complaint is being resolved.
• Portability — you can request your data in a structured, machine-readable format.
• Objection — you can object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@agency.thewatermouse.com. We will respond within 30 days.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with your national data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.

9. Contact

For any questions about this policy or how we handle your data: