Privacy Policy

Last updated: August 2026

Who we are

Den Hartogh Solutions, KVK 93891237, is responsible for the processing of personal data as described in this policy. Questions? Email info@denhartogh.solutions.

Data we collect

We collect data you provide directly, for example when you use the diagnostic chat or contact us: - Name, email address, phone number, company name - Chat conversation content and your answers during the diagnostic session - Website visit data: IP address, browser, OS, referring page We do not collect payment information directly; payments are handled by third-party processors.

How we use your data

We use your data to: - Provide the diagnostic chat and follow up on your assessment - Improve the quality of our services and AI systems - Fulfill legal and administrative obligations - Contact you when you have requested it We do not sell your data or use it for unsolicited marketing.

Cookies and analytics

We use functional cookies required for the site to work. We log page visits (URL, referrer, country, browser, OS) in our own database for internal analytics only. No third-party advertising cookies are placed.

Third-party processors

We share data with the following processors under data processing agreements: - Vercel (hosting, Netherlands/US): serves the website and stores access logs - Supabase (database, EU): stores chat sessions and visit analytics - Anthropic (AI, US): processes chat messages to generate AI responses - Resend (email, US): sends email notifications All processors are bound by GDPR-compliant data processing agreements.

Data retention

Chat sessions and contact data are retained for a maximum of 2 years, or until you request deletion. Visit analytics (without personal identifiers) may be retained longer for trend analysis. Invoice and contract data is retained for 7 years per Dutch tax law.

Your rights

Under GDPR you have the right to access, correct, or delete your personal data, to object to processing, and to data portability. Send your request to info@denhartogh.solutions. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

Security

We apply appropriate technical and organizational measures: encrypted connections (TLS), access controls, and regular security reviews. Our processors maintain SOC 2 or equivalent certifications.

Changes

We may update this policy. The date at the top of this page reflects the most recent revision. For material changes we will notify active clients directly.