Privacy Policy

1. Introduction

7Lab B.V. ("SevenLab", "we", "us") respects your privacy. This policy explains how we collect, use, and protect your personal data when you visit sevenlab.ai or use our services.

We are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified, you can be assured that it will only be used in accordance with this privacy policy.

2. Data We Collect

We may collect the following types of personal data:

Contact information: name, email address, phone number, and company details provided through our contact forms or during consultations.

Usage data: cookies, analytics data, IP addresses, browser type, and pages visited to help us understand how our website is used.

Project information: details shared during consultations, project briefs, technical requirements, and any other information you provide to us in relation to our services.

3. How We Use Your Data

We use the information we collect for the following purposes:

To respond to your inquiries and provide you with the information or services you request.

To provide, maintain, and improve our services and deliver the projects we are contracted to build.

To improve our website and ensure that content is presented in the most effective manner.

To send you newsletters and marketing communications, but only with your explicit consent.

To comply with legal obligations and protect our legitimate business interests.

4. Legal Basis

We process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):

Consent: when you have given us explicit permission to process your data for specific purposes, such as receiving newsletters.

Legitimate interest: when processing is necessary for our legitimate business interests, such as improving our services and website, provided these interests do not override your rights.

Contractual necessity: when processing is necessary for the performance of a contract with you, or to take steps at your request before entering into a contract.

Legal obligations: when processing is necessary to comply with a legal obligation to which SevenLab is subject.

5. Data Sharing

We do not sell, trade, or rent your personal data to third parties.

We may share your data with trusted third-party service providers who assist us in operating our business. These include:

Hosting providers: EU-based infrastructure providers that store and serve our website and applications.

Analytics tools: services that help us understand website usage patterns and improve our services.

Payment processors: secure payment services for processing transactions related to our services.

All third-party processors we work with are required to comply with GDPR and maintain appropriate security measures to protect your data.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access: you can request a copy of the personal data we hold about you.

Right to rectification: you can request that we correct any inaccurate or incomplete data.

Right to erasure: you can request that we delete your personal data, subject to legal retention requirements.

Right to data portability: you can request to receive your data in a structured, commonly used, and machine-readable format.

Right to restriction: you can request that we restrict the processing of your data under certain circumstances.

Right to object: you can object to the processing of your data based on legitimate interests or for direct marketing purposes.

To exercise any of these rights, please contact us at [email protected].

7. Cookies

Our website uses cookies to enhance your browsing experience.

Essential cookies: these are necessary for the website to function properly and cannot be switched off in our systems.

Analytics cookies: these help us understand how visitors interact with our website by collecting and reporting information anonymously.

Advertising tags (only with your consent): if you choose Accept in our cookie banner, we load the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) and the Meta pixel (Meta Platforms Ireland Limited), and the Apollo.io website tracker (Apollo.io, Inc., United States; it uses the identity service of LiveIntent to recognise the company whose browser visits us, and stores a random visitor id in your browser). The LinkedIn and Meta tags set cookies such as _fbp, _fbc and li_fat_id and let LinkedIn and Meta recognise your browser. Nothing from LinkedIn, Meta or Apollo loads before you choose, and nothing loads if you choose Reject.

Analytics (only with your consent): if you choose Accept, we also load Google Analytics 4 (Google Ireland Limited) to measure which pages are visited and how fast they load (Core Web Vitals). It sets the cookies _ga and _ga_* with a random identifier, and receives the pages you view, the events calendar opened and booking confirmed, and page speed measurements. Google signals and ad personalisation are off, IP addresses are anonymised, data is stored in the EU region and kept for 14 months. Nothing from Google loads before you choose, and nothing loads if you choose Reject. Google may transfer data to Google LLC in the United States under the EU-US Data Privacy Framework.

We use these tags to measure our ads and to build audiences for them. In addition to the pages you view, they report two events: when you open our booking calendar (calendar opened) and when you confirm a booking (booking confirmed). They never receive what you type in a form, in the chat or in the booking calendar, such as your name, email address or message.

LinkedIn and Meta process this data under their own terms and for their own purposes. It is transferred to LinkedIn Corporation and Meta Platforms, Inc. in the United States under the EU-US Data Privacy Framework, as both are certified, and otherwise under Standard Contractual Clauses.

Retention: the cookies the tags set expire as each vendor defines. The data LinkedIn and Meta hold is kept under their own privacy policies and the settings of our accounts with them, not by 7Lab B.V. Withdrawing your consent stops the tags and removes the identifiers they stored on sevenlab.ai. Identifiers on the vendors' own domains can only be cleared in your browser settings.

You can withdraw your consent at any time with the Cookie settings link in the footer of every page. Choosing Reject removes the cookies we can reach and reloads the page without the tags. The legal basis is your consent (Article 6(1)(a) GDPR). Your choice is stored in your browser (localStorage key sevenlab_consent) and asked again when this policy changes.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, as outlined in this policy.

When determining retention periods, we consider the nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, and applicable legal requirements.

When your data is no longer needed, we will securely delete or anonymise it.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

These measures include encryption of data in transit and at rest, regular security assessments, access controls, and employee training on data protection.

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

10. Advertising audiences for business contacts

We use data of business contacts we already hold (from our CRM, outbound contact lists, bookings and replies) to show them ads on LinkedIn and Meta. We also use it to keep customers, people who do not want to be approached and people who replied negatively out of those ads. This concerns contacts at companies in the Netherlands and Flanders.

Data: the name, work email address, job title and company we already had. We add a SHA-256 hash of another (private) email address of the same person. We find it through Clay (Clay Labs, United States, our processor) and its data providers Limadata (hashed email addresses) and Icypeas (LinkedIn profile lookup), first by your work email address. If that gives nothing, we look up a LinkedIn profile URL by name and company domain and search with that. We never receive or store the email address itself in readable form. We use the LinkedIn URL only as a lookup key and do not store it. So this data does not come from you.

Legal basis: legitimate interest (Article 6(1)(f) GDPR), namely bringing our services to the attention of professionals. We have recorded that balancing in writing.

Recipients: LinkedIn Ireland Unlimited Company and Meta Platforms Ireland Limited (hashes only, to match lists; they delete unmatched data) and Clay as processor.

Retention: we replace the audience lists every week and delete the hashes within 90 days. Clay keeps no table of ours.

Your rights: you can ask for access, rectification and erasure, and you can object. The right to object to direct marketing is absolute. One entry on our do-not-contact list removes your work email address and the hash from all audiences at the next weekly run. Email [email protected]. You can also lodge a complaint with the Autoriteit Persoonsgegevens (the Dutch data protection authority).

Because we do not have this data from you, we inform you about it within one month of obtaining it at the latest, by email and in our outbound emails.

11. Contact

If you have any questions about this privacy policy or our data practices, please contact us:

7Lab B.V.

Danzigerbocht 39 G, 1013 AM Amsterdam, The Netherlands

KvK (Chamber of Commerce): 84815515

Email: [email protected]

Phone: +31 20 705 1010

12. Updates

This privacy policy may be updated from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.

We encourage you to review this policy periodically to stay informed about how we protect your data.

Last updated: October 2026.