Privacy policy

Your information should make sense too.

Last updated: 15 October 2026

ARCUHN handles personal data with care. This policy explains what we collect, why we collect it, how long we keep it, and what rights you have.

01Who we are

ARCUHN is responsible for the personal data processed through this website and our services.

Trade name
ARCUHN
Owner
Maryam Hichou
Based in
The Hague, the Netherlands
KvK
42183261
VAT
NL005563299B36

02What we collect

When you contact us

  • Your name, email address and, if you share it, your organisation
  • Your message and anything you choose to add, such as a sketch, screenshot, image or document
  • Whether you would like a video call or an in-person meeting

When you join a video call

  • Calls take place in Whereby, in your browser. We do not record calls.
  • Whereby processes technical call data, such as your IP address and device information. See section 06.

When you ask us to call you

  • Your name and phone number and, if you share them, your company and the time that suits you
  • Whether you would like a phone call or a WhatsApp message
  • Your tick in the consent box, so we can show that you agreed

When you join a waitlist or early access list

  • Your name and email address
  • The service you are interested in, when you would ideally like to start and what type of organisation you are
  • A short description of what you are struggling with and, if you choose to share it, what made you interested
  • Whether you would like to receive updates about this service and future ARCDESIGN pilot rounds (optional, never ticked in advance)
  • The date and the page on which you signed up

When you become a client

  • The contact and billing details we need to do the work and send invoices

When you visit the website

  • Limited technical data needed to run the site securely, such as your IP address and browser type. This is processed by our hosting provider.
  • Anonymous visit statistics: which page was opened, how the visitor arrived (the referrer), and the browser, system, language, screen width and country. We use GoatCounter for this. It does not use cookies and does not store your IP address.

Please don’t send sensitive information, such as health data, or information about other people unless it is needed for your question.

03Why we use it

PurposeLegal basis (GDPR)
Replying to your message and understanding your questionSteps at your request before a possible agreement, or our legitimate interest in replying to general questions
Holding a video call you asked forSteps at your request before a possible agreement
Calling or messaging you, only because you asked us to and left your phone numberConsent (the box you tick in the form)
Contacting you about the specific service whose waitlist or early access list you joined, for example when a new round opensSteps at your request before a possible agreement
Sending updates about that service and future ARCDESIGN pilot rounds, only if you ticked the box for thisConsent
Carrying out an assignmentPerformance of a contract
Invoicing and bookkeepingLegal obligation
Keeping the website secure and workingLegitimate interest
Counting visits to see which pages are read, without cookies or personal profilesLegitimate interest

Your phone number

We only process a phone number if you leave it yourself and ask us to contact you. We use it only to contact you about that call, never for anything else, and we never share it. You can withdraw your consent at any time by emailing hello@arcuhn.com, and we will delete the number.

Waitlist and updates

If you join a waitlist or early access list, we only use your details to contact you about that specific service.

Broader updates about ARCDESIGN and future pilot rounds are separate: we only send them if you ticked the box for this when signing up.

You can unsubscribe from these updates at any time by replying to an update or emailing hello@arcuhn.com. You can also ask us to remove you from the waitlist itself.

04Your sketches, files and visual notes

A sketch doesn’t have to be pretty. But it can contain personal data.

We only use the files you upload for the reason you shared them: to understand your question, prepare a conversation or carry out an agreed assignment.

Files for a project are stored in Adobe Creative Cloud, in one folder per client.

We never publish your files or use them as a case study without your written permission.

We use AI tools (Claude from Anthropic and ChatGPT from OpenAI) to support our own work, such as brainstorming and structuring ideas. We never put your files, personal data or confidential information into AI tools without your permission.

If a document you share contains personal data of other people, such as names of employees, we only use it to carry out the assignment. Where needed, we sign a data processing agreement with you.

05How long we keep it

Contact requests that don’t lead to an assignment
Up to 12 months after our last contact, then deleted.
Phone number from a call request
Deleted when the project ends. If no project follows, it is deleted together with your request (see above).
Client and invoicing data
7 years, as required by Dutch tax law.
Uploaded files
Deleted once they are no longer needed, at the latest 12 months after the assignment ends.
Waitlist and early access sign-ups
Up to 12 months after registration, unless you ask us to remove them sooner.
Consent for ARCDESIGN updates
Valid until you withdraw it. We only use it for updates about ARCDESIGN services and pilot rounds, never for unrelated marketing.
Video calls
We do not record them. Technical call data is kept by Whereby under its own policy.
Visit statistics
GoatCounter only keeps totals per page, per day or hour, such as how many visits came from a country or browser. It keeps no data about individual people.
Technical website data
Our hosting provider (mijn.host) keeps IP addresses and server logs for up to 12 months, unless longer is needed for a security incident or a legal obligation.

06Who else processes your data

We never sell your personal data.

We work with a small number of service providers to run our website and services:

Hosting
mijn.host
Email and domain
TransIP
Contact form
FormSubmit (formsubmit.co, based in the United States)
Video calls
Whereby AS (Norway)
Visit statistics
GoatCounter (servers in Finland and Germany, operated from Ireland)
Search visibility
Google Search Console (we receive search statistics from Google. It places nothing on your device.)
Client files
Adobe Creative Cloud
AI tools
Claude (Anthropic) and ChatGPT (OpenAI), only for our own work, see section 04
Notes and planning
Notion
Bookkeeping
e-Boekhouden.nl
Banking and payments
bunq
Waitlist
mijn.host (stored on our own web hosting)

Where required, we make agreements with these providers about how they handle and protect your data.

Visit statistics (GoatCounter)

We use GoatCounter to count visits. It does not use cookies, does not store anything on your device, and does not store your IP address or any tracker ID. It only keeps totals per page, for example how many visits a page had, from which country or with which browser. We cannot see what one individual visitor does. We use it because we want to know which pages are read.

We only share your data with others if the law requires us to.

07Cookies

ARCUHN only uses cookies and similar technology that are needed for the website to work. Our visit statistics work without cookies and without storing anything on your device.

Cookie status: essential only

More detail in our Cookie Policy.

08Security

We take appropriate technical and organisational measures to protect your data against loss, unauthorised access and misuse. We also keep the data we collect to a minimum and don’t store it longer than needed.

09Your rights

Under the GDPR, you can ask us to:

  • show you the personal data we have about you
  • correct it
  • delete it
  • limit how we use it
  • stop using it (objection)
  • send it to you or to another party

If we use your data based on your consent, you can withdraw that consent at any time.

Send your request to hello@arcuhn.com. We will respond within one month. We may ask you to confirm your identity first.

You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

10Automated decisions

We don’t make decisions about you based only on automated processing.

11Changes

As our website and services develop, this policy may change. The latest version is always on this page, with the date it was last updated.