Privacy Policy
Last updated: August 2026
Who we are
Den Hartogh Solutions, KVK 93891237, is responsible for the processing of personal data as described in this policy. Questions? Email info@denhartogh.solutions.
Data we collect
We collect data you provide directly, for example when you use the diagnostic chat or contact us: - Name, email address, phone number, company name - Chat conversation content and your answers during the diagnostic session - Website visit data: IP address, browser, OS, referring page We do not collect payment information directly; payments are handled by third-party processors.
How we use your data
We use your data to: - Provide the diagnostic chat and follow up on your assessment - Improve the quality of our services and AI systems - Fulfill legal and administrative obligations - Contact you when you have requested it We do not sell your data or use it for unsolicited marketing.
Cookies and analytics
Necessary (always on): your language and security, plus your route and plan from the tools on the site. The latter stays in your own browser (localStorage) and is not sent to us until you send a message yourself. Analytics (only with your consent): per visit we store a random session id in your browser (sessionStorage) and log in our own database which pages you view, for how long and how far you scroll, the referring site, your IP address with an estimated location (country, region, city), browser, operating system and device type. We use this only for our own dashboard. Marketing: we use no advertising or retargeting cookies and no third-party tracking is placed. Your choice is kept in your browser. You can change it any time via “Cookie settings” at the bottom of every page. We also count anonymously how often each choice is made, without an id or any other data.
Third-party processors
We share data with the following processors under data processing agreements: - Vercel (hosting, Netherlands/US): serves the website and stores access logs - Supabase (database, EU): stores chat sessions and visit analytics - Anthropic (AI, US): processes chat messages to generate AI responses - Resend (email, US): sends email notifications All processors are bound by GDPR-compliant data processing agreements.
Data retention
Chat sessions and contact data are retained for a maximum of 2 years, or until you request deletion. Visit analytics (without personal identifiers) may be retained longer for trend analysis. Invoice and contract data is retained for 7 years per Dutch tax law.
Your rights
Under GDPR you have the right to access, correct, or delete your personal data, to object to processing, and to data portability. Send your request to info@denhartogh.solutions. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
Security
We apply appropriate technical and organizational measures: encrypted connections (TLS), access controls, and regular security reviews. Our processors maintain SOC 2 or equivalent certifications.
Changes
We may update this policy. The date at the top of this page reflects the most recent revision. For material changes we will notify active clients directly.