This Privacy Policy explains how KVHeeren B.V. ("we," "us," or "Lifeureka") collects, uses, and protects your personal data when you use the Lifeureka website (the "Site"). We follow the EU General Data Protection Regulation (GDPR) and the Dutch Implementation Act (UAVG).
1. Who we are
KVHeeren B.V., trading as Lifeureka, is the data controller for the personal data processed through this Site.
- Registered office: Generaal Bothastraat 2B, 5642 NL Eindhoven, the Netherlands
- KvK number: 95271899
- Contact for data protection inquiries: hi@lifeureka.com
We have not appointed a Data Protection Officer because our processing activities do not require one under GDPR Article 37.
2. What data we collect
We only collect data you actively give us:
- Waitlist form: first name, last name, email address, your selected topic preferences, and an optional message.
- Contact form: name, email address, subject, and message.
- Site analytics: we use Fathom Analytics, which collects anonymized visit statistics (page views, referrer, country) without using cookies and without identifying individual visitors.
We do not collect special categories of data (health, religion, political views, etc.), and we do not use automated decision-making or profiling.
3. Legal basis for processing
- Waitlist signup: your consent (GDPR Art. 6(1)(a)). You give consent by submitting the form; you can withdraw it at any time by emailing us.
- Contact form: our legitimate interest in answering your message and managing communications (GDPR Art. 6(1)(f)).
- Analytics: our legitimate interest in understanding how the Site is used so we can improve it (GDPR Art. 6(1)(f)). Because the analytics are anonymized, this processing has minimal impact on your privacy.
4. How long we keep your data
- Waitlist data: until the Lifeureka product launches plus one year, after which we will ask you to re-confirm your interest. If you don't re-confirm, we delete your data.
- Contact form messages: until your inquiry is resolved, plus one year for our records.
- Analytics: aggregated and anonymized data retained by Fathom according to their retention policy. No personal data is stored.
You can ask us to delete your data sooner at any time — see Section 7.
5. Who we share your data with
We do not sell your data. We share it only with the service providers we use to operate the Site. Each provider acts as a "processor" on our behalf and is contractually bound to protect your data:
- Supabase (Supabase, Inc., USA) — stores waitlist and contact form submissions in our database.
- Resend (Resend, Inc., USA) — sends emails (confirmations, replies to contact form messages).
- Fathom Analytics (Conva Ventures Inc., Canada) — provides cookieless website analytics.
- Vercel (Vercel, Inc., USA) — hosts the Site.
We may also share data when we are legally required to (for example, in response to a valid legal request).
6. International transfers
Some of our processors are located outside the European Economic Area (EEA). When we transfer data to them, we rely on appropriate safeguards under GDPR Chapter V, such as the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. [REVIEW: confirm exact transfer mechanism for each processor with counsel.]
7. Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you (Art. 15)
- Have inaccurate data corrected (Art. 16)
- Have your data erased (Art. 17)
- Restrict how we use your data (Art. 18)
- Receive your data in a portable format (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
- Withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal (Art. 7(3))
To exercise any of these rights, email hi@lifeureka.com. We aim to respond within one month.
You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.
8. Cookies and tracking
We do not use cookies for tracking, advertising, or analytics. The Site sets no non-essential cookies. Our analytics provider, Fathom, operates without cookies. Because of this, we are not required to display a cookie consent banner under the ePrivacy Directive.
If we ever add tools that require cookies (for example, advertising pixels), we will update this policy and ask for your consent before any such cookie is set.
9. How we protect your data
We use industry-standard security measures: encrypted connections (HTTPS), access controls on our database, and limited employee access to personal data. No method of transmission over the internet is 100% secure, but we work to maintain strong protections.
10. Children
The Site is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. We will post the new version on this page with an updated "Last updated" date. For material changes that affect how we use your data, we will also notify you by email (where we have it).
12. Contact
Questions about this policy or your data? Email hi@lifeureka.com.