Privacy Policy

1. Who we are

Sidrlabs is a coaching practice operated by KR Ventures, registered with the Dutch Chamber of Commerce (KVK) under number 84778156 and based in the Netherlands. For the purposes of the General Data Protection Regulation (GDPR), Sidrlabs is the data controller for the personal data described in this policy.

You can reach us at kr@sidrlabs.com.

2. What we collect

We only collect what we need to respond to you and to deliver coaching.

When you contact us

The contact form has two paths, and each asks only what it needs.

Requesting a conversation: who the conversation is for, the type of support, your timing and how it would be funded, plus your name and email address. Your role, organisation, LinkedIn profile and any context you add are optional.
Asking a question: your question and your email address. Your name is optional. Nothing else is asked.

We ask you not to put confidential or sensitive information in the form, and the form says so at the point of writing. Anything personal is better discussed in the conversation itself.

When you become a client

Contact and billing details
Session notes and coaching goals, kept only as long as the engagement requires
Where an organisation sponsors your coaching, the goals agreed with that organisation

When you simply visit this site

Nothing. This website sets no cookies, runs no analytics and makes no third-party requests. Your visit is not tracked or logged by us.

3. Why we use it

To reply to your enquiry and assess whether we are a good fit
To deliver and administer coaching engagements
To issue invoices and meet our accounting obligations
To send you information you have specifically asked for

We do not sell your data, and we do not use it for automated decision-making or profiling.

4. Legal basis

Consent: when you submit a form or ask to be contacted. You may withdraw consent at any time.
Contract: where processing is necessary to deliver a coaching engagement you have entered into.
Legal obligation: for invoicing and tax records, which Dutch law requires us to retain.
Legitimate interests: to keep records of our correspondence and to protect the practice against disputes, balanced against your rights.

We keep the number of processors deliberately small.

Cloudflare: hosts this website and runs the small function that receives a form submission, validates it and passes it straight on. The submission is not written to any database, and this site keeps no record of it.
Resend: delivers that submission to us as a single email. Once it reaches the inbox, the inbox is the only record of your enquiry.
Our email and accounting providers: to correspond with you and to issue invoices.
Sponsoring organisations: where a company pays for your coaching, we share agreed goals and progress against them. Session content is never shared. That boundary is set at the start with all parties present, and it is not negotiable.

We do not share your data with anyone else unless we are legally required to.

6. International transfers

Some of our processors may store data outside the European Economic Area. Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision. You may request details of the safeguards in place.

7. How long we keep it

Enquiries that do not become engagements: up to 12 months, then deleted.
Coaching records: for the duration of the engagement and up to 2 years afterwards.
Invoices and financial records: 7 years, as required by Dutch tax law.

8. Cookies & analytics

This website currently sets no cookies of any kind: not for analytics, not for advertising, not for preferences. It loads no third-party scripts, fonts or embeds. Because nothing is stored on your device and no tracking takes place, no consent banner is required.

If we introduce privacy-friendly analytics in future, we will update this policy first and, where the law requires it, ask for your consent before anything is set.

The contact form opens in a panel on this site and sends nothing to a third-party form host. Following a link to LinkedIn takes you to a third party with its own cookies and privacy policy, which we do not control.

9. Your rights

Under the GDPR you have the right to:

Access the personal data we hold about you
Have inaccurate data corrected
Have your data erased
Restrict or object to processing
Receive your data in a portable format
Withdraw consent at any time, without affecting processing already carried out

Email kr@sidrlabs.com and we will respond within one month.

10. Security

We use reputable providers, keep access limited to those who need it, and hold coaching notes confidentially. No system is perfectly secure, but we take the confidentiality of coaching seriously, it is the core of the work.

11. Children

Our services are intended for working professionals. We do not knowingly collect data from anyone under 16.

12. Changes

If we change this policy we will update the date at the top of this page. Material changes will be highlighted clearly.

13. Contact & complaints

For any question about this policy, or to exercise your rights, contact kr@sidrlabs.com.

If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, or with the supervisory authority in your country of residence.