Privacy

Privacy statement

This statement explains what personal data Start 2 Scale processes when you visit this website, book an introduction or become a client. Questions? Email hans@start2scale.nl.

Last updated: October 2026

1. Who is responsible

Start 2 Scale (Hans van der Zande), registered with the Dutch Chamber of Commerce under number 77099257, is the data controller. A data protection officer is not required at this size; privacy questions can go to hans@start2scale.nl.

2. What data and why

  • Booking an introduction (Microsoft Bookings): name, email address, optionally company and phone number, and the time slot. To schedule the call.
  • Online meetings: with your consent, a recording and transcript via the AI note-taker Fireflies. For accurate notes and follow-up. I mention this upfront; if you prefer not, the note-taker stays off.
  • Email and phone: your contact details and the content of your message. To answer your question or send a proposal.
  • Engagements: the data needed for the work, such as financial records, reports and names and roles of people involved. To deliver the service.
  • Website visits: anonymised, aggregated page statistics. To improve the site. See also "Cookies and statistics".

3. Legal basis

  • Performance of a contract for clients and engagements.
  • Consent for recording and transcribing meetings.
  • Legitimate interest for answering questions, scheduling calls and website statistics.
  • Legal obligation for invoices and statutory tax retention.

4. How long

  • Contact without an engagement: up to two years after the last contact.
  • Engagement files, invoices and records: seven years (statutory tax retention).

5. Who we share it with

Data is never sold. It only goes to parties needed to do the work:

  • Microsoft 365: email, calendar and Bookings.
  • Fireflies: notes of online meetings (only with your consent). Fireflies processes data in the United States, under the EU standard contractual clauses.
  • Vercel: hosting of this website and the cookieless statistics.
  • AI services used in engagements, such as Claude by Anthropic. Client data is not used to train AI models; this is set out in the engagement letter.
  • Accountant: for invoices and our own bookkeeping.

6. Security

Accounts with access to client data use two-factor authentication. AI connections to your systems are read-only by default, and passwords or personal data are kept out of the context of AI assistants. In case of a data breach, I notify the Dutch Data Protection Authority within 72 hours, and you if your data is involved.

7. Cookies and statistics

This site sets no tracking cookies and uses no advertising networks. Visitor statistics come from Vercel Web Analytics, which works without cookies and does not track individual visitors. That is why there is no cookie banner.

8. Your rights

You can access, correct or delete your data (except what must be retained by law), restrict processing, object, or request your data in a common format. Email hans@start2scale.nl; you will get an answer within 30 days. If we cannot resolve it together, you can file a complaint with the Dutch Data Protection Authority.