Privacy Policy

Food Leads is a service of 402Lab, based in Alkmaar, the Netherlands. VAT ID: NL003335599B18 · KvK: 78482089. We are the data controller for the personal data described here.

Questions or requests: mg@402lab.nl.

Application and audit forms. When you apply to become a client or request a free review, we collect the details you enter: name, email address, phone number, business name and city, business type, website and ads status, monthly budget range, your goal, preferred contact method and the plan you were interested in.

Website usage. We record anonymous, cookieless usage events on our own servers: page views, scroll depth, which sections you reach, button clicks, form starts and submissions, referrer and campaign parameters (utm_*), plus a random session id that is discarded when you close the page. These events are not linked to your identity.

Advertising identifiers. If you arrive from a Meta (Facebook/Instagram) ad, the click identifier in the URL (fbclid) is stored in your browser for up to 90 days so we can tell which campaign brought you here.

Technical data. Standard server data such as your IP address and browser user agent is processed when you submit a form.

• To respond to your application and send you the review you asked for — necessary to take steps at your request before entering a contract (GDPR Art. 6(1)(b)).
• To understand how the site performs using our own privacy-friendly, cookieless measurement — our legitimate interest in running and improving the site (Art. 6(1)(f)).
• To measure and improve our advertising — based on your consent, given through the cookie banner, for cookie-based and identifier- based tracking (Art. 6(1)(a)).

Our own analytics run without cookies and without storing anything that identifies you. The following tools only run as described below:

• Meta Pixel and Conversions API (Meta Platforms Ireland Ltd.) — loaded after you accept the banner. When you submit a form we also send a server-side event to Meta containing a hashed (irreversible) version of your email, phone and first name, plus your IP address, browser user agent and any Meta click identifier, so Meta can match the conversion to the ad you clicked. Meta acts as an independent controller for this data.
• PostHog (EU hosting) — product analytics. Without your consent it runs in memory only, sets no cookies and keeps nothing between page loads.

You can change your mind at any time by clearing this site's data in your browser, which brings the consent banner back.

We do not sell your data. We share it only with the service providers that make this site work: our hosting and database provider, our email delivery provider (for notification and reply emails), Meta as described above, and PostHog for analytics. Each processes data on our instructions or, in Meta's case, as an independent controller under its own policy.

Some of these providers may process data outside the EU/EEA. Where that happens, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

Applications and enquiries: up to 24 months after our last contact, unless you ask us to delete them sooner. Anonymous usage events: up to 24 months. Advertising identifiers stored in your browser: up to 90 days.

You can ask us to access, correct, delete or export your data, to restrict or object to processing, and to withdraw consent at any time. Email mg@402lab.nl and we will respond within 30 days. You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

Data is stored on access-controlled infrastructure and transmitted over encrypted connections. Only people who need it to answer your application can see it. If we change this policy we will update the date at the top of this page.