GDPR Compliance

Who this page is for

This page is for visitors in the European Economic Area, the United Kingdom and Switzerland, and it sits alongside our Privacy Policy rather than replacing it. The Privacy Policy says what we collect. This one says what you can do about it.

We are a small United States company. We have written this to the standard the GDPR sets because it is the right standard, not because volume forced us to.

Controller and contact

The data controller is Holland Tech, LLC, Tulsa, Oklahoma, United States.

All requests and questions go to hello@hollandtech.com, which reaches us directly. We have not appointed a data protection officer; our processing is not of a scale or kind that requires one, and the address above reaches the person who decides these things.

What we process, and why we are allowed to

We process very little, and each thing has a basis.

• Contact form details you send us, being name, email, message and two optional dropdowns, used to reply and scope work. Basis: pre-contractual steps at your request, and legitimate interests.
• Tool run records, being the options you selected and the scores produced, with no name attached. Basis: legitimate interests in operating and improving our own tools.
• An email address, only where you asked us to save or send your results. Basis: consent.
• Inclusion of a run in any published aggregate. Basis: consent, off by default.
• A one-way hash of your IP address, kept briefly as a counter to enforce rate limits. Basis: legitimate interests in security and availability.

International transfers

We are based in the United States and our service providers process data there, so information you send us leaves the EEA and the UK.

We rely on the data processing terms and transfer safeguards each provider offers, and we use providers that offer them. We share the minimum each one needs: our email provider receives your enquiry and any results you ask us to send, our database provider holds run records, and the model provider receives resolved labels and scores with no name or address attached.

If you would like to know which safeguard applies to a particular provider, ask us and we will tell you.

Your rights in full

Under the GDPR and UK GDPR you have the following rights. They are free to exercise.

• Access: to be told whether we hold anything about you, and to receive a copy.
• Rectification: to have anything inaccurate corrected, and anything incomplete completed.
• Erasure: to have what we hold deleted, where no overriding reason to keep it applies.
• Restriction: to have us pause processing while a dispute about accuracy or basis is resolved.
• Portability: to receive what you gave us in a structured, commonly used, machine-readable form, or to have it sent onward where technically feasible.
• Objection: to object to processing based on legitimate interests, including profiling. We stop unless we can show compelling grounds that override your interests.
• Withdrawal of consent: at any time, where consent is the basis. This does not affect what was lawful before you withdrew.
• Not to be subject to a decision based solely on automated processing that produces a legal or similarly significant effect. We make no such decisions: the tools score your answers and show you the result, and no one is accepted or refused as a client by software.

How to make a request

Email hello@hollandtech.com and say what you want. Plain language is fine and you do not need to cite an article.

We reply within one month. If a request is unusually complex we may extend that by two further months, and we will tell you inside the first month if that happens.

We may ask you to confirm your identity where we cannot otherwise tell that a request is yours. For a saved result, replying from the address the result was sent to is normally enough. We ask for no more than we need to be sure.

Requests are free. We will only charge, or refuse, where a request is manifestly unfounded or excessive, and we will explain our reasoning if we ever do.

Consent, and taking it back

Three things here run on consent, and all of them are off until you act: sending your results to an email address, telling you when a free file you asked about exists, and letting a run count towards a published statistic.

You can withdraw either at any time by emailing us. Withdrawing consent to statistics does not delete your run record, though you can ask for that too; withdrawing consent to email means we delete the address.

Nothing on this site is gated behind consent. Every tool gives you its complete result without an address, so declining costs you nothing.

How long we keep things

Enquiries are kept for up to 24 months after we last heard from you. Tool run records are kept for up to 24 months. Saved email addresses are kept until you ask to be removed. Rate-limit counters expire within the hour.

You do not have to wait for a period to end. Ask us to delete something and we will, unless the law requires us to keep it.

Processors we use

Each of these processes data on our documented instructions and none may use it for its own purposes.

• Cloudflare: hosting, delivery and rate-limit counters.
• Supabase: the database holding run records and saved addresses.
• Resend: sending the enquiry your contact form produces, the results you ask a tool to send you, any message telling you a free file you asked about is ready, and the note telling us you asked.
• Anthropic: generating the explanation text beside Scanner results, and running the sample extraction on Proof.

Complaints, breaches and changes

If you think we have handled your information badly, please tell us first, because it is usually the fastest way to fix it. You do not have to. You may complain directly to the supervisory authority in the country where you live or work, or to the Information Commissioner's Office if you are in the United Kingdom.

If a breach is likely to result in a risk to your rights we will notify the relevant supervisory authority within 72 hours of becoming aware of it, and we will tell you directly where the risk is high.

We update this page when our practices change, and the date at the top changes with it. Questions go to hello@hollandtech.com.