Privacy Policy

1. Who we are

Sidrlabs is a coaching practice operated by KR Ventures, registered with the Dutch Chamber of Commerce (KVK) under number 84778156 and based in the Netherlands. For the purposes of the General Data Protection Regulation (GDPR), Sidrlabs is the data controller for the personal data described in this policy.

You can reach us at kr@sidrlabs.com.

2. What we collect

We only collect what we need to respond to you and to deliver coaching.

When you contact us

The contact form has two paths, and each asks only what it needs.

Requesting a conversation: who the conversation is for, the type of support, your timing and how it would be funded, plus your name and email address. Your role, organisation, LinkedIn profile and any context you add are optional.
Asking a question: your question and your email address. Your name is optional. Nothing else is asked.

We ask you not to put confidential or sensitive information in the form, and the form says so at the point of writing. Anything personal is better discussed in the conversation itself.

When you ask to hear about new tools

Your email address, and which page you asked from. Nothing else: no name and no other details. We use it only to tell you when a new tool is published, and you can come off the list at any time by emailing kr@sidrlabs.com or replying to any message we send you.

When you become a client

Contact and billing details
Session notes and coaching goals, kept so that if you come back, we can pick up where we left off
Where an organisation sponsors your coaching, the goals agreed with that organisation

When you use the Systems Reading tools

Your answers to the Systems Reading Diagnostic are never sent to us or stored by us. They stay in your browser, and inside any link you choose to copy and share yourself.

To know whether the tools are useful, the Systems Reading Framework and Diagnostic count how often they are opened, started, completed, retaken, saved or shared, and how often someone ticks one of the diagnostic’s two commitment boxes. Each count is a single anonymous signal naming the event and nothing else. It never includes your answers or your result, sets no cookie, carries no identifier, and your IP address is not kept. We store only a daily total for each event. Nothing is sent when your browser asks sites not to track you.

When you simply visit this site

Nothing. This website sets no cookies, runs no analytics and makes no third-party requests. Your visit is not tracked or logged by us. The only counts are the anonymous tool counts described above.

3. Why we use it

To reply to your enquiry and assess whether we are a good fit
To deliver and administer coaching engagements
To issue invoices and meet our accounting obligations
To send you information you have specifically asked for
To stay in touch with past clients and people we have worked with
To understand how our tools are used, from anonymous totals

We do not sell your data, and we do not use it for automated decision-making or profiling.

4. Legal basis

Consent: when you submit a form or ask to be contacted. You may withdraw consent at any time.
Contract: where processing is necessary to deliver a coaching engagement you have entered into.
Legal obligation: for invoicing and tax records, which Dutch law requires us to retain.
Legitimate interests: to keep records of our correspondence and of our work together, to stay in touch with past clients and people we have worked with, to protect the practice against disputes, and to count, anonymously, how our tools are used, balanced against your rights.

We keep the number of processors deliberately small.

Cloudflare: hosts this website and runs the small function that receives a form submission, validates it and passes it straight on. The submission is not written to any database, and this site keeps no record of it. Cloudflare also holds the anonymous daily totals of tool use described in section 2, which contain no personal data, and the new-tool list: your email address, the tool you signed up on, the date and what you agreed to.
Resend: delivers that submission to us as a single email. Once it reaches the inbox, the inbox is the only record of your enquiry.
Our email and accounting providers: to correspond with you and to issue invoices.
Sponsoring organisations: where a company pays for your coaching, we share agreed goals and progress against them. Session content is never shared. That boundary is set at the start with all parties present, and it is not negotiable.

We do not share your data with anyone else unless we are legally required to.

6. International transfers

Some of our processors may store data outside the European Economic Area. Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision. You may request details of the safeguards in place.

7. How long we keep it

Contact details of clients and people we have worked with: kept while we stay in touch. You can ask us to stop contacting you, or to delete them, at any time.
Enquiries that do not become engagements: the enquiry itself is kept for up to 2 years, then deleted. Your contact details stay only if we keep in touch, and are removed whenever you ask.
The new-tool list: kept in our own Cloudflare account until you ask to come off it, after which your address is deleted.
Session notes and coaching records: kept after the engagement ends, so that if you come back we can pick up where we left off. They stay confidential and encrypted, and you can ask us to delete them at any time.
Invoices and financial records: 7 years, as required by Dutch tax law.
Anonymous totals of tool use: kept while they are useful. They contain no personal data.

8. Cookies & analytics

This website currently sets no cookies of any kind: not for analytics, not for advertising, not for preferences. It loads no third-party scripts, fonts or embeds. Because nothing is stored on your device and no tracking takes place, no consent banner is required.

It runs no third-party analytics. The only measurement is the anonymous count of how the Systems Reading tools are used, described in section 2: made without cookies or identifiers, storing nothing on your device, and skipped when your browser asks sites not to track.

If we introduce any other measurement in future, we will update this policy first and, where the law requires it, ask for your consent before anything is set.

The contact form opens in a panel on this site and sends nothing to a third-party form host. Following a link to LinkedIn takes you to a third party with its own cookies and privacy policy, which we do not control.

9. Your rights

Under the GDPR you have the right to:

Access the personal data we hold about you
Have inaccurate data corrected
Have your data erased
Restrict or object to processing
Receive your data in a portable format
Withdraw consent at any time, without affecting processing already carried out

Email kr@sidrlabs.com and we will respond within one month.

10. Security

We use reputable providers, keep access limited to those who need it, and hold coaching notes confidentially. No system is perfectly secure, but we take the confidentiality of coaching seriously, it is the core of the work.

11. Children

Our services are intended for working professionals. We do not knowingly collect data from anyone under 16.

12. Changes

If we change this policy we will update the date at the top of this page. Material changes will be highlighted clearly.

13. Contact & complaints

For any question about this policy, or to exercise your rights, contact kr@sidrlabs.com.

If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, or with the supervisory authority in your country of residence.