Privacy.

Oliver Higgins, operating as higgi, based in Amsterdam, the Netherlands, is the data controller for this website and the services offered through it. For anything in this statement, including a request about your data, the contact is oliver@higgihq.com, and it reaches a person, usually within one business day.

Two things, and only when you choose to give them.

When you run a free scan or request a demo, the form captures: your business name, your current website or address, your branche and the one thing you want the site to do better, your email, and optionally a phone number. When you write to higgi, it captures your message and your email so a reply can be sent.

The public pages set no advertising or analytics cookies. There are no tracking pixels and no profiling.

Each use rests on a ground under the GDPR (AVG):

• To produce the scan or demo you asked for and to reply about it: performance of, or steps toward, an agreement at your request (Art. 6(1)(b)), and our legitimate interest in answering you (Art. 6(1)(f)).
• To keep the service working and secure, prevent abuse, and meet legal duties such as bookkeeping: legitimate interest and legal obligation (Art. 6(1)(f) and (c)).
• Anything beyond the above happens only with your consent (Art. 6(1)(a)), which you can withdraw at any time.

Your data is never sold, rented, or handed to a third party for marketing. To run the service, higgi uses a small set of processors, each bound by a processing agreement and chosen to keep data in the EU/EEA:

• EU-region website hosting.
• An EU-region database for storing the scan request.
• An email-delivery provider to send the reply and confirmation.
• An automation tool, on a private EU server, that notifies Oliver so the work gets built.

Inside the EU. The site runs in an EU region, the scan request is stored on a private server in Germany, and a private notification goes to Oliver. No transfer outside the EU/EEA is made for these purposes; if that ever changed, it would be covered by an appropriate safeguard (such as EU Standard Contractual Clauses) and noted here first.

The public pages set no cookies at all, so there is no consent banner, there is genuinely nothing to consent to. One strictly necessary sign-in cookie exists only inside the private client area, and only if you have a login there. The full detail is on the cookie statement.

Kept while your request is active and for a short follow-up window after, then removed. Records kept for a legal duty (such as an invoice) are held for as long as that duty requires and no longer. Sooner on request.

Under the GDPR (AVG) you can ask what is held about you, have it corrected, have it deleted, restrict or object to its use, and receive a copy in a portable form. Where a use rests on consent, you can withdraw it at any time. One email to oliver@higgihq.com handles it, no forms, no friction. You also have the right to complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).