Last updated: September 4, 2026
Birch Labs B.V. (“Birch Labs”) processes personal data in connection with its business and website. This Privacy Notice explains how Birch Labs processes that personal data where it acts as controller.
1.APPLICABILITY
1.1.This Privacy Notice applies to personal data processed by Birch Labs in connection with:
(i)applications for, provision of and administration of services to legal-entity clients, including personal data relating to individuals acting on their behalf;
(ii)Birch Labs’ ordinary business development and communications with actual, former or prospective business clients and other business counterparties; and
(iii)the operation, use and security of Birch Labs’ website.
1.2.This Privacy Notice concerns personal data relating to individuals. It does not apply to information concerning legal entities as such.
2.PERSONAL DATA WE PROCESS
2.1.Depending on the relevant interaction, Birch Labs may process the following categories of personal data:
(i)identity and business contact data, such as name, professional role, organization, business email address and business telephone number;
(ii)application and engagement data, including personal data contained in an application and in communications or records relating to an application, client engagement or services;
(iii)business development data, including professional role, business affiliation, publicly available professional information and records of communications or interactions with Birch Labs; and
(iv)website, technical and security data, such as IP address, browser and device information, website activity, server and access logs, and information used to operate, protect and secure Birch Labs’ website and systems.
2.2.Birch Labs may obtain personal data directly from you, from the organization you represent, from publicly available or professional sources, or automatically through use of Birch Labs’ website and systems.
2.3.Certain personal data may be necessary for Birch Labs to evaluate an application or provide services to the organization you represent. If that data is not provided, Birch Labs may be unable to process the application or provide the relevant services.
3.PURPOSE OF PROCESSING PERSONAL DATA
3.1.Birch Labs processes your personal data for the following purposes:
(i)to receive and evaluate applications, establish and administer engagements with clients, provide services and communicate with persons acting on their behalf. Birch Labs processes this personal data on the basis of its legitimate interests in conducting and administering its business and providing services to its clients;
(ii)to manage relationships with current, former and prospective business clients and other business counterparties, and to develop and promote Birch Labs’ business, including marketing its services where permitted by applicable law. Birch Labs processes this personal data on the basis of its legitimate interests in developing its business and maintaining business relationships;
(iii)to operate, maintain, protect and improve Birch Labs’ website and systems, including preventing fraud, misuse, security incidents and other harmful activity. Birch Labs processes this personal data on the basis of its legitimate interests in operating and securing its business and systems; and
(iv)to comply with applicable legal and regulatory obligations and to establish, exercise or defend legal rights and claims. Birch Labs processes this personal data where necessary to comply with a legal obligation or on the basis of its legitimate interests in protecting its business and legal rights.
3.2.Where applicable law requires consent for a particular processing activity, Birch Labs will request that consent separately.
4.INTERNATIONAL TRANSFERS
4.1.Birch Labs is established in the Netherlands and processes personal data in the European Economic Area. Personal data may also be transferred to, or processed in, countries outside the European Economic Area in connection with the purposes described in this Privacy Notice.
4.2.Where applicable law requires safeguards for such transfers, Birch Labs will use an applicable lawful transfer mechanism, such as an adequacy decision of the European Commission or the European Commission’s standard contractual clauses. In that case, Birch Labs will state how a copy of this transfer mechanism can be obtained.
5.RECIPIENTS OF PERSONAL DATA
5.1.Birch Labs may disclose personal data where reasonably necessary for the purposes described in this Privacy Notice, including to:
(i)service providers that support Birch Labs’ hosting, communications, storage, security, accounting, payment processing and other business operations;
(ii)professional advisers, including legal and accounting advisers; and
(iii)governmental, regulatory, judicial or other competent authorities where required by applicable law.
5.2.Birch Labs requires service providers processing personal data on its behalf to handle that data in accordance with applicable data protection requirements.
6.RETENTION PERIOD
6.1.Birch Labs retains personal data for as long as reasonably necessary for the purposes for which it is processed, taking into account applicable legal and regulatory requirements, the nature of the relevant business relationship or processing activity, and the need to establish, exercise or defend legal rights or claims.
7.COMPLAINTS AND RIGHTS
7.1.Subject to the conditions and exceptions provided by applicable data protection law, you may have the right to access, rectify or erase your personal data, restrict or object to its processing, and receive or transfer certain personal data in a portable format.
7.2.If Birch Labs processes your personal data for direct marketing, you may object to that processing at any time. If you object, Birch Labs will stop processing your personal data for that purpose.
7.3.Where Birch Labs processes personal data on the basis of your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn.
7.4.To exercise an applicable right or ask a question about this Privacy Notice, you may contact Birch Labs at:
Birch Labs B.V. Koornmarktpoort 25 C 8253 TE Dronten The Netherlands contact@birchlabsbv.com
7.5.You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or another competent supervisory authority. You may contact the Dutch Data Protection Authority via: www.autoriteitpersoonsgegevens.nl.
8.CHANGES TO THIS PRIVACY NOTICE
8.1.Birch Labs may update this Privacy Notice from time to time. The current version will be published on Birch Labs’ website with the date of the latest update.
8.2.Birch Labs will provide additional notice of changes where required by applicable law.