Privacy Policy

1. Who We Are

The data controller for this website is Watson Tulley Klein, based in the Netherlands. Our postal address is Smaragdweg 38, 1812 RJ Alkmaar, Netherlands. For privacy questions, you can reach us at hello@herarbor.com.

2. Data We Process

We process the following categories of personal data:

• Server log data. When you visit the site, our hosting provider records standard technical information, including your IP address, browser type and version, operating system, referring page, date and time of access, and the pages you view.
• Click-tracking and referral data. Our server-side click-tracking system uses the cookies _vid, _sm, _ft, and _rt to associate visits and referral clicks for traffic measurement and advertising attribution. Tracking data can include cookie identifiers, click identifiers and campaign parameters received in the page URL, including gclid and utm_*.
• Email correspondence. If you write to us, we receive your email address, the content of your message, and any information you choose to include.

We do not operate user accounts, newsletters, or comment systems. We do not knowingly collect information from children.

3. Why We Process Data

• To operate and secure the website and maintain its availability.
• To measure visits and outbound sponsored-link clicks and attribute referrals to advertising campaigns.
• To respond to enquiries, corrections, and requests sent to us by email.
• To meet legal obligations where they apply to us.

4. Legal Bases

Where the General Data Protection Regulation applies, we rely on the following legal bases:

• Legitimate interests — to operate the website, maintain security, and respond to enquiries.
• Consent — required for non-essential tracking cookies where applicable law requires it. This policy is a disclosure, not a request for consent; continuing to browse does not constitute consent.
• Legal obligation — where we must retain information by law.
• Contract or steps prior to contract — where you contact us with a request.

Applicability of specific privacy laws is determined by the operator's location, the audience we serve, and the actual processing described above.

5. Service Providers

We use a limited number of service providers to run the site:

• Hosting provider — stores the website files and server logs.
• Email provider — receives and stores messages sent to our published addresses.
• Google Fonts. Loading fonts sends connection information, including your IP address, to Google.
• Click-tracking infrastructure. The server-side tracking system processes visit and click identifiers to measure traffic and attribute referrals.
• Sponsored links and partner websites. When you click a video preview or a video button on our advertising page, the link opens a partner website. The page copies any gclid (Google click identifier) and utm_* campaign parameters from its URL into the outgoing video link. The redirect system also passes a tracking click identifier to the partner in the destination link. The partner and any tracking service handling the redirect can receive these URL parameters, together with connection information such as your IP address and browser information, to associate the referral with its source. The destination processes information under its own privacy and cookie policies. Passing URL parameters is separate from setting cookies; blocking cookies alone does not remove those parameters from a link.

External providers may also process information under their own privacy policies.

6. Retention

We keep personal data only as long as necessary for the purposes described above:

• Server logs — retained for a limited period, then deleted or anonymised.
• Email correspondence — retained for as long as needed to handle the enquiry and for a reasonable period afterwards.
• Tracking cookies — _vid, _sm, _ft, and _rt each have a configured browser lifetime of 30 days from being set. You can delete them sooner in your browser. This cookie lifetime is not a retention limit for server-side click records or data received by partners; those records are subject to their separate retention settings and policies.

For cookie details and browser controls, see our Cookie Policy. Contact us for information about retention of a particular tracking record.

7. Security Measures

We take reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls on our systems, and limiting the number of people who can access data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict processing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a supervisory authority.