Privacy policy

1. Who is responsible?

Xander Consultants B.V., trading under the name Patrick van der Meulen, is responsible for the processing of personal data through this website and the related business activities. Xander Consultants B.V. is registered with the Dutch Chamber of Commerce under number 63044390.

Privacy questions or requests can be submitted through the contact form.

2. What data is collected?

When you use a contact or pitch-deck form, we may process your name, email address, company, website, role, the reason for contacting us, your message and any pitch deck or other file you submit. The website also records privacy-friendly analytics events such as page views, a temporary random session identifier, referring domain, campaign parameters, broad device category and interactions such as article opens, contact clicks and form submissions. The analytics implementation does not store your IP address, full user agent, name or email address.

3. Why is data processed?

Data is used to respond to enquiries, assess potential assignments, mentorships, speaking engagements, partnerships or investments, prepare or perform an agreement, protect the website against abuse and meet legal obligations. Processing is based on steps requested before entering into a contract, performance of a contract, legitimate business interests or a legal obligation, depending on the situation.

4. Service providers

This website and its anonymous analytics records are hosted through OpenAI Sites. Forms are forwarded by FormSubmit to a private Gmail inbox. FormSubmit states that submissions may be retained for up to 30 days; uploaded files are not available through its archive. Google processes the resulting email in Gmail. These providers process data only to deliver their services and under their own privacy and security terms.

5. International transfers

Some technology providers may process data outside the European Economic Area. Where this occurs, the relevant provider is expected to use an accepted transfer mechanism or other safeguards required by applicable data-protection law.

6. Retention

General enquiries are normally deleted within 24 months after the last meaningful contact. Pitch decks that do not lead to further discussions are normally deleted within 12 months. Anonymous analytics events are retained for no more than 14 months. Data that becomes part of a contract or financial administration is retained for the period required by law, generally seven years for Dutch business records.

7. Your rights

You may request access, correction, deletion, restriction or portability of your personal data, and you may object to certain processing. You may also withdraw consent where consent is the basis for processing. Submit your request through the contact form. You may lodge a complaint with the Dutch Data Protection Authority or another competent supervisory authority.

8. Cookies and analytics

The website uses first-party, cookie-free analytics to understand aggregate use and improve its content. A random session identifier is stored only for the duration of the browser tab and is not used to recognise you across visits or other websites. Do Not Track and Global Privacy Control signals are respected. No advertising profiles or cross-site tracking are used.

9. Changes

This policy may be updated when the website, services or legal requirements change. The current version and update date will always be published on this page.