Privacy Policy
Last updated: 19 July 2026
HCP Compass B.V. (“HCP Compass”, “we”, “us”) is a marketing agency registered in the Netherlands. This policy explains what personal data we collect through hcpcompass.com and in the course of our services, why we collect it, and the rights you have over it. It is written for the two groups of people whose data we handle: visitors to this website, and the people at client and prospective client companies we work with.
1. Who is responsible for your data
HCP Compass B.V. is the data controller for the processing described in this policy.
HCP Compass B.V., Leo Lashleylaan 42D, 3075 RP Rotterdam, the Netherlands. Chamber of Commerce (KVK) number: 94608822. Contact for privacy matters: hello@hcpcompass.com.
2. What we collect and why
Contact and consultation forms. When you submit a form or book a call, we collect your name, work email address, company, role, and anything you write in your message. We use this to respond to your inquiry and to prepare for the conversation you requested. Legal basis: taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR), and our legitimate interest in following up on business inquiries (Art. 6(1)(f)).
Meeting bookings. If you book a meeting through the site, we process the details you provide (name, email, chosen time) to schedule and hold that meeting. Legal basis: Art. 6(1)(b) GDPR.
AI chat assistant. Our website offers an AI support assistant. The content of your conversation is processed to generate answers and to improve the assistant’s responses. Do not share sensitive personal information in the chat. Legal basis: our legitimate interest in providing website support (Art. 6(1)(f)).
Website analytics. With your consent, we use Google Analytics 4 to understand how visitors use the site (pages visited, approximate location, device type). Legal basis: your consent (Art. 6(1)(a)), collected via the cookie banner and withdrawable at any time — see our Cookie Policy at hcpcompass.com/cookies.
Client engagements. When we work with a client, we process the business contact details of the client’s team members (name, work email, role) to deliver the engagement. Legal basis: performance of a contract (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)).
We do not sell personal data, and we do not use the data above for automated decision-making that produces legal effects.
3. Who receives your data
We share personal data only with service providers (processors) that help us run the website and our business, under data processing agreements:
- SiteGround — website hosting
- Google (Analytics, Search Console) — website analytics, with consent
- The providers of our meeting-scheduling software and AI chat assistant — operating those features of the website
Business inquiries are stored in our email and website systems until we adopt a dedicated CRM; if we do, this policy will be updated to name the provider category.
We may also disclose data where the law requires it, or in connection with a business transaction such as a merger or acquisition, in which case this policy continues to apply to the data transferred.
4. Transfers outside the EEA
Some of our providers process data in the United States or other countries outside the European Economic Area. Where they do, we rely on the European Commission’s adequacy decision for providers certified under the EU–U.S. Data Privacy Framework, or on Standard Contractual Clauses, so that your data receives an equivalent level of protection.
5. How long we keep data
- Business inquiries and correspondence: [24 months] after our last contact, unless an engagement follows.
- Client engagement records: for the duration of the engagement and [7 years] thereafter, to meet Dutch tax and bookkeeping obligations.
- Analytics data: 14 months, after which Google Analytics deletes it.
- Chat conversations: [12 months].
6. Your rights
Under the GDPR you can ask us for access to the personal data we hold about you, correction of inaccurate data, deletion, restriction of processing, a portable copy of data you provided, and you can object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, email hello@hcpcompass.com. We respond within one month. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or the supervisory authority in your own EU member state.
If you are visiting from outside the EU, you may have similar rights under your local law (for example, California residents under the CCPA/CPRA). We honor access and deletion requests from all visitors regardless of location.
7. Cookies
This site uses cookies and similar technologies. Which cookies we set, what they do, and how to manage them is described in our Cookie Policy at hcpcompass.com/cookies. Non-essential cookies are set only with your consent.
8. Security
We protect personal data with appropriate technical and organizational measures, including encrypted connections (HTTPS), access controls, and contractual obligations on our processors. No system is perfectly secure; if a breach affects your rights, we will notify you and the supervisory authority as the GDPR requires.
9. Children
Our website and services are directed at professionals. We do not knowingly collect data from anyone under 16.
10. Changes to this policy
When we change this policy, we update the date at the top of this page. If a change materially affects how we use data you have already given us, we will notify you directly where we can.
11. Contact
HCP Compass B.V. · Leo Lashleylaan 42D, 3075 RP Rotterdam, the Netherlands · hello@hcpcompass.com
