LEGAL
Privacy Policy.
LAST UPDATED · 14.07.2026
What’s in it
01
Who we are.
This website is operated by HYS Enterprise B.V. (KvK 32130233), the data controller. After our spin-off this becomes EpicStaff B.V. — confirm live entity at launch.
EMAIL
contact@epicstaff.com
02
What we collect.
Information you give us
name, work email, company, and anything in your message.
Usage data
pages viewed, referrer, device/browser, approximate location — only after you accept analytics cookies.
Company-level identification
the organisation a visit may come from, worked out from your IP — nothing stored on your device.
Messages to our website assistant
anything you type into the on-site chat or send to our email assistant.
03
Why we use it & lawful basis.
| Respond to your enquiry | legit. int / pre-contractlegit. int / pre-contract |
| Google Analytics | consentconsent |
| Dealfront — cookies (_lfa) | consentconsent |
| Dealfront — company ID from IP | legit. interestlegit. interest |
Company-level identification stores nothing on your device and runs on our legitimate interest in B2B marketing (Art. 6(1)(f) GDPR). Object anytime via contact@epicstaff.com.
If you accept analytics cookies, Dealfront places first-party cookies (like _lfa) to recognize repeat visits. These are only set after your approval and can be withdrawn anytime in settings.
04
Cookies.
Nothing non-essential runs until you choose. A permanent Cookie settings link lets you reopen and change your choice anytime.
05
The website assistant.
Conversations are recorded.Transcript stored in our CRM (HubSpot) for follow-up. Please don't include sensitive personal data.
Our on-site chat and email assistant send what you type to a third-party AI provider (provider + country to be confirmed — likely US, safeguarded transfer, see §7).
06
Who we share with & where.
| Google AnalyticsSite usage | USUnited States |
| HubSpotCRM / leads | USUnited States |
| DealfrontCompany ID | EUEuropean Union |
| Contact formsEnquiries · EU-hosted form tool | EUEuropean Union |
| Website assistantChat / email · AI provider | USUnited States |
Hosting is in the EU. We do not sell your data.
07
Data sent outside the EU.
Google Analytics data goes to Google LLC (USA), certified under the EU–US Data Privacy Framework and safeguarded by the EC's Standard Contractual Clauses. The assistant provider is treated the same way. Everything else stays in the EU.
08
How long we keep data.
| Contact-form data | 24 months24 months |
| CRM — inactive leads | 24 months24 months |
| CRM — customers | 7 years7 years |
| Google Analytics | 14 months14 months |
09
Your rights.
Request access, correction, or deletion; object to processing; withdraw consent anytime. You can also complain to the Dutch authority, Autoriteit Persoonsgegevens.
EMAIL
contact@epicstaff.com