Privacy Policy

Who we are

San A Jong IT Solutions is an IT solutions provider based in Amsterdam, Netherlands. This policy explains how we handle information when you visit sanajong.net, contact us through this website, or use the San A Jong Client Portal to manage services, domains, DNS settings, invoices, billing details, support requests, and account security. For privacy questions, contact us at privacy@sanajong.net.

Information we collect

• Contact details you submit through our contact form: your name, email address, the service you are interested in, and your message.
• Application details you send us by email when responding to a vacancy.
• Account information in the client portal, such as name, email address, phone number, login method, and security settings.
• Client and billing information, such as company details, billing address, invoices, payments, and service history.
• Service information, such as domains, DNS records, hosting services, support tickets, and service requests.
• Authentication and security information, such as session data, login events, passkeys, multi-factor settings, and technical logs.
• Technical information processed automatically when you visit our sites, such as your IP address and browser characteristics, used for security and abuse prevention.

How we use information

• To respond to your inquiry and communicate about services you request.
• To provide and secure access to the client portal.
• To manage services, domains, DNS settings, invoices, payments, and support requests.
• To communicate about account activity, service changes, invoices, security, and support.
• To prevent abuse, troubleshoot issues, comply with legal obligations, and improve reliability.

Sign-in with Google or Apple

You can sign in to the client portal with third-party accounts such as Google or Apple. When you sign in with Google, we use Google OAuth to authenticate you and may receive basic profile information provided by Google, such as your name, email address, profile image, and Google account identifier. When you sign in with Apple, we receive the name and email address you choose to share; if you use Apple's Hide My Email feature, we receive a private relay address instead of your personal email. In all cases we use this information only to sign you in, link your account, protect access to the portal, and provide support. The portal does not request access to Gmail, Google Drive, Google Calendar, iCloud, or other account content, and we do not sell this data or use it for advertising. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Payments and saved payment methods

Payments in the client portal are processed by our payment processor, Stripe. Card details are entered directly into Stripe's secure payment form and are never stored on our systems; we receive only limited information needed to display and manage your payment methods, such as the card brand, last four digits, and expiry date. If you choose to save a payment method, or a subscription requires automatic collection, it is stored securely with Stripe and may be used to automatically charge invoices for your active services. You can view and remove saved payment methods at any time in your billing settings.

Bot protection (Cloudflare Turnstile)

Our contact form is protected by Cloudflare Turnstile, which verifies that submissions come from real visitors. Turnstile runs in invisible mode, meaning verification happens in the background without a visible challenge. As part of this verification, Cloudflare processes technical information such as your IP address and browser characteristics. This processing is described in the Cloudflare Turnstile Privacy Addendum. Turnstile does not use this data for advertising and does not track you across other websites.

Sharing and disclosure

We do not sell personal information or Google user data. We share information only when needed to operate our website and portal, process payments, provide infrastructure, deliver email, support client requests, comply with law, or protect the security of San A Jong IT Solutions, our clients, and our systems. Our service providers include Stripe (payment processing), Cloudflare (hosting, domains, DNS infrastructure, and bot protection), Resend (email delivery), and Google Fonts (font files loaded from Google servers, which involves Google processing your IP address). Some providers may process data outside the European Economic Area; where they do, transfers are covered by appropriate safeguards such as standard contractual clauses.

Storage, security, and retention

We use administrative, technical, and organizational safeguards to protect your data. Contact form submissions are delivered to our business mailbox and retained as business correspondence. Portal data is kept for as long as needed to provide services, maintain business records, resolve disputes, enforce agreements, and meet legal or accounting requirements. You may request correction or deletion of personal account data, subject to records we must keep for billing, security, or legal reasons.

Cookies and sessions

This website does not use analytics or advertising cookies; Cloudflare Turnstile may use limited local storage or cookies strictly for security verification. The client portal uses cookies and similar storage for authentication, session management, security, language preferences, theme preferences, and client preview state for authorized administrators.

Your rights and choices

You can update account and billing details in the portal where available. Under the GDPR you may also request access to, correction of, export of, or deletion of personal information we hold about you by contacting privacy@sanajong.net. You also have the right to lodge a complaint with the Dutch data protection authority (Autoriteit Persoonsgegevens).

Changes to this policy

We may update this policy when our website, services, or legal requirements change. The updated version will be posted on this page with a new last-updated date.