Privacy Policy

Adam El Hadidy, under the HadidyLabs brand, is the controller for the processing described in this policy.

• Business location: Amsterdam
• Dutch Chamber of Commerce: 87069601
• VAT ID: NL004351974B34
• Email: info@hadidylabs.com
• Phone and WhatsApp: +31 6 27 20 31 27

Depending on the interaction, we process names, email addresses, phone numbers, company details, roles, appointment information, project information, correspondence, invoice details and payment status. IP addresses, browser and device data, logs and error reports may also be processed for security and technical management.

Data is used to answer questions, schedule meetings, prepare quotations, perform agreements, host and maintain websites, provide support, process invoices and accounts, monitor security and comply with legal obligations. Depending on the processing, the legal basis is contract or pre-contractual steps, a legal obligation, consent or a legitimate interest such as security and business operations.

Data is only shared where necessary with providers of hosting, email, scheduling, accounting, backups and technical services. Hosting is mainly arranged through STRATO. Cal.eu is used for appointments and a WhatsApp link opens a Meta service. After consent, Google Analytics 4 may be used for statistics and conversion measurement. Google Tag Manager is technically prepared for possible future campaign measurement, but its container remains inactive until approved tags have been published. Website fonts are hosted locally and do not connect to Google Fonts. Processor terms are put in place where required. Personal data is never sold.

If a provider processes data outside the European Economic Area, HadidyLabs checks whether a valid transfer mechanism is available, such as an adequacy decision or appropriate contractual safeguards. External services may also be subject to their own privacy terms.

Contact and appointment data that leads to no follow-up is generally deleted within twelve months. Project and client files are retained during the agreement and, where needed for evidence, warranty and legal claims, for up to three years after termination. Core tax records are generally retained for seven years or longer where required by law. Technical logs are kept as briefly as reasonably possible for security and troubleshooting. Personal data managed solely as a processor for a client is returned or deleted at the end in accordance with the data processing agreement.

HadidyLabs applies appropriate technical and organisational safeguards, including encrypted connections, access restrictions, backups, updates and secure account invitations. Passwords are not shared through ordinary chat or email.

You can request access, correction, deletion, restriction, portability or object to processing. Consent can be withdrawn at any time. Send requests to info@hadidylabs.com. A proportionate identity check may be required to prevent abuse. Requests are normally handled within one month. You may also lodge a complaint with the Dutch Data Protection Authority.

This policy may be updated when services, providers or laws change. The date above shows the latest revision.