Privacy policy
Your information should make sense too.
Last updated: 5 November 2026
ARCUHN handles personal data with care. This policy explains what we collect, why we collect it, how long we keep it, and what rights you have.
01Who we are
ARCUHN is responsible for the personal data processed through this website and our services.
- Trade name
- ARCUHN
- Owner
- Maryam Hichou
- Based in
- The Hague, the Netherlands
- hello@arcuhn.com
- KvK
- 42183261
- VAT
- NL005563299B36
02What we collect
When you contact us
- Your name, email address and, if you share it, your organisation
- Your message and, if you choose, a sketch you draw in our request form. A sketch is saved as lines, not as an image file. Files, such as screenshots or documents, are only shared later, through our client portal, once we work together.
- Whether you would like a video call or an in-person meeting
When you join a video call
- Calls take place in Whereby, in your browser. We do not record calls.
- Whereby processes technical call data, such as your IP address and device information. See section 06.
When you join a waitlist or early access list
- Your name and email address
- The product you are interested in, when you would ideally like to start and what type of organisation you are
- A short description of what you are struggling with and, if you choose to share it, what made you interested
- Whether you would like to receive updates about this product (optional, never ticked in advance)
- The date and the page on which you signed up
When you become a client
- The contact and billing details we need to do the work and send invoices
When you visit the website
- Limited technical data needed to deliver the site, such as your IP address and browser type. Our own web server, at Hetzner in Germany, uses it to send you the page and does not keep a log of visits.
- Anonymous visit statistics: which page was opened, how the visitor arrived (the referrer), and the browser, system, language, screen width and country. We use GoatCounter for this. It does not use cookies and does not store your IP address.
Please don’t send sensitive information, such as health data, or information about other people unless it is needed for your question.
03Why we use it
| Purpose | Legal basis (GDPR) |
|---|---|
| Replying to your message and understanding your question | Steps at your request before a possible agreement, or our legitimate interest in replying to general questions |
| Holding a video call you asked for | Steps at your request before a possible agreement |
| Contacting you about the specific product whose waitlist or early access list you joined, for example when it opens | Steps at your request before a possible agreement |
| Sending updates about that product, only if you ticked the box for this | Consent |
| Carrying out an assignment | Performance of a contract |
| Invoicing and bookkeeping | Legal obligation |
| Keeping the website secure and working | Legitimate interest |
| Counting visits to see which pages are read, without cookies or personal profiles | Legitimate interest |
Waitlist and updates
If you join a waitlist or early access list, we only use your details to contact you about that specific product.
Broader updates about ARCUHN are separate: we only send them if you ticked the box for this when signing up.
You can unsubscribe from these updates at any time by replying to an update or emailing hello@arcuhn.com. You can also ask us to remove you from the waitlist itself.
04Your sketches, files and visual notes
A sketch doesn’t have to be pretty. But it can contain personal data.
We only use the files you upload for the reason you shared them: to understand your question, prepare a conversation or carry out an agreed assignment.
A sketch you draw in our request form is stored in Well of Truth as lines, not as an image file.
Files are only shared once we work together, through the client portal in Well of Truth. Every file is checked for viruses and stored on our own server in Germany. For design work we may also keep project files in Adobe Creative Cloud, in one folder per client.
We never publish your files or use them as a case study without your written permission.
We use AI tools (Claude from Anthropic and ChatGPT from OpenAI) to support our own work, such as brainstorming and structuring ideas. We never put your files, personal data or confidential information into AI tools without your permission.
If a document you share contains personal data of other people, such as names of employees, we only use it to carry out the assignment. Where needed, we sign a data processing agreement with you.
05How long we keep it
- Contact requests that don’t lead to an assignment
- Up to 12 months after our last contact, then deleted.
- Client and invoicing data
- 7 years, as required by Dutch tax law.
- Uploaded files
- Deleted once they are no longer needed, at the latest 12 months after the assignment ends.
- Waitlist and early access sign-ups
- Up to 12 months after registration, unless you ask us to remove them sooner.
- Consent for product updates
- Valid until you withdraw it. We only use it for updates about ARCUHN products, never for unrelated marketing.
- Video calls
- We do not record them. Technical call data is kept by Whereby under its own policy.
- Visit statistics
- GoatCounter only keeps totals per page, per day or hour, such as how many visits came from a country or browser. It keeps no data about individual people.
- Technical website data
- Our web server does not keep a log of visits. Our request system, Well of Truth, keeps a security log of what happens in it: the full IP address is erased after 12 months, and log entries are deleted after 2 years.
06Who else processes your data
We never sell your personal data.
We work with a small number of service providers to run our website and services:
- Hosting
- Hetzner Online GmbH (Germany): our own server, for the website and for Well of Truth
- Email and domain
- TransIP
- Emails from Well of Truth
- Lettermint (confirmations and notifications)
- Requests, waitlist, call-backs and the client portal
- Well of Truth, ARCUHN’s own client system, on that server
- Video calls
- Whereby AS (Norway)
- Visit statistics
- GoatCounter (servers in Finland and Germany, operated from Ireland)
- Search visibility
- Google Search Console (we receive search statistics from Google. It places nothing on your device.)
- Client files
- Adobe Creative Cloud
- AI tools
- Claude (Anthropic) and ChatGPT (OpenAI), only for our own work, see section 04
- Notes and planning
- Obsidian, stored locally on our own devices; Notion
- Bookkeeping
- e-Boekhouden.nl
- Banking and payments
- bunq
Where required, we make agreements with these providers about how they handle and protect your data.
Visit statistics (GoatCounter)
We use GoatCounter to count visits. It does not use cookies, does not store anything on your device, and does not store your IP address or any tracker ID. It only keeps totals per page, for example how many visits a page had, from which country or with which browser. We cannot see what one individual visitor does. We use it because we want to know which pages are read.
We only share your data with others if the law requires us to.
07Cookies
ARCUHN only uses cookies and similar technology that are needed for the website to work. Our visit statistics work without cookies and without storing anything on your device.
Cookie status: essential only
More detail in our Cookie Policy.
08Security
We take appropriate technical and organisational measures to protect your data against loss, unauthorised access and misuse. We also keep the data we collect to a minimum and don’t store it longer than needed.
09Your rights
Under the GDPR, you can ask us to:
- show you the personal data we have about you
- correct it
- delete it
- limit how we use it
- stop using it (objection)
- send it to you or to another party
If we use your data based on your consent, you can withdraw that consent at any time.
Send your request to hello@arcuhn.com. We will respond within one month. We may ask you to confirm your identity first.
You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
10Automated decisions
We don’t make decisions about you based only on automated processing.
11Changes
As our website and services develop, this policy may change. The latest version is always on this page, with the date it was last updated.