Legal
Privacy Policy
Last updated: 21 August 2026
SecureHabits (KVK 78029260, VAT NL003278436B94, Willemspoort 102, Den Bosch, 5223WV Netherlands) is the controller for personal data processed through this website. We sell training and advisory services to companies; we do not sell personal data, build advertising profiles, or make automated decisions about you. Questions and requests: info@securehabits.nl.
What we process, and why
- Requests you send us. When you book a call, submit a quote request, use the chat, or email us, we receive the details you provide (name, work email, phone, company, your message). We use them to answer you and to prepare the engagement you asked about (legal basis: taking steps prior to a contract, or our legitimate interest in responding). Booking, forms, and chat run on Zoho, hosted in Zoho’s EU data centers, acting as our processor.
- Technical logs. The site is static and served from Scaleway (Amsterdam, EU). Serving requests produces short-lived infrastructure logs (IP address, requested URL, user agent) used for security and operations (legitimate interest).
- Analytics, only with consent. If you choose “Accept all” in the cookie banner, we load Google Tag Manager, Google Analytics 4, and Microsoft Clarity to understand how the site is used (pages visited, interactions; Clarity may record anonymized session replays). Nothing loads if you pick “Essential only”, and you can change your mind at any time via the cookie settings link in the footer (legal basis: consent).
- Embedded videos. Videos are click-to-load through YouTube’s privacy-enhanced domain; YouTube sets cookies only after you press play.
Recipients and transfers
We share personal data only with the processors named above (Zoho, Scaleway, and, with your consent, Google and Microsoft). Zoho and Scaleway process in the EU. Google and Microsoft may transfer data to the United States; both certify under the EU–US Data Privacy Framework and use standard contractual clauses.
Retention
Inquiries and chat transcripts are kept while we are in contact and deleted when no longer needed. Records that become part of a contract (quotes, invoices) follow Dutch bookkeeping retention (seven years). Analytics data follows the vendors’ default retention (Google Analytics: 14 months).
Your rights
Under the GDPR you can request access, correction, deletion, restriction, portability, and object to processing based on legitimate interest; where processing rests on consent you can withdraw it at any time without affecting earlier processing. Write to info@securehabits.nl; we respond within one month. You can also lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.