Privacy Policy
Â
Last updated 07 July, 2025
Â
About UsÂ
We act as the data controller for all processing described below.
Â
2. What data do we collect?
| Category | Examples |
|---|---|
| Identity & Contact | name, business name, billing / shipping address, e-mail, telephone, social-media handles |
| Financial | payment-token, last 4 digits of card, IBAN – stored by Stripe / Kajabi Payments |
| Purchase | order ID, product, price, VAT rate, invoice number |
| Usage / Technical | IP address, device, browser, pages visited, timestamps, click-stream (cookies, Microsoft Clarity) |
| Assignment materials | documents shared during consulting / coaching (may include employees’ names, roles, assessments) |
| Marketing preferences | newsletter opt-in status, consent tags |
| User-generated | comments, testimonials, survey responses, support tickets |
We do not collect special-category data (Art 9 GDPR) unless you voluntarily provide it.
Â
3. Why do we process your data & on what legal basis?
| Purpose | Data | Legal basis (Art 6 GDPR) |
|---|---|---|
| Process / deliver orders & create invoices | Identity, Contact, Purchase, Financial | Contract 6(1)(b); Legal obligation 6(1)(c) |
| Provide downloads & customer support | Identity, Purchase, User-generated | Contract 6(1)(b) |
| Deliver consulting, training & coaching engagements | Identity, Assignment materials | Contract 6(1)(b); Legitimate interest 6(1)(f) |
| Send marketing e-mails & EcoVadis tips | Identity, Marketing preferences | Consent 6(1)(a) |
| Site analytics, security & fraud-prevention | Usage / Technical | Legitimate interest 6(1)(f) |
| Publish testimonials | User-generated | Consent 6(1)(a) |
| Comply with legal / regulatory requests | All categories | Legal obligation 6(1)(c) |
We do not use automated decision-making or profiling that produces legal or similarly significant effects (Art 22 GDPR).
Â
4. How long do we keep your data?
| Data | Retention period |
|---|---|
| Invoices & accounting records | 8 years (Dutch tax law) |
| Support e-mails & contact forms | 5 years after last interaction |
| Newsletter subscriber list | Until you unsubscribe or 2 years of inactivity |
| Analytics raw logs (Microsoft Clarity) | 26 months |
| Testimonials & blog comments | Until removal request or content deletion |
| Assignment materials | Engagement duration + 2 years (quality assurance / dispute resolution) |
| Encrypted backups | Deleted within 30 days |
Â
5. Who has access to your data?
We share data only with trusted processors acting under our instruction:
| Processor | Service | Safeguard |
|---|---|---|
| Kajabi LLC (USA) | Website & customer platform | Standard Contractual Clauses (SCCs) |
| Stripe Payments Europe Ltd (IE/USA) | Payments & invoicing | SCCs · ISO 27001 |
| Microsoft Clarity (USA) | Behaviour analytics | SCCs |
| Apple Inc. (iCloud EU/USA) | E-mail alias & cloud storage | SCCs / EU datacentres |
| Calendly LLC (USA) | Appointment scheduling | SCCs |
| OpenAI L.L.C. (USA) | ChatGPT drafting & call summaries | SCCs + content redaction |
| Dutch chartered accountant | Financial compliance | EU-based · NDA |
Transfers outside the EEA are protected by the European Commission’s Standard Contractual Clauses plus supplementary security measures (encryption in transit & at rest, access controls).
Â
6. Your rights
You may exercise these rights at any time by e-mailing [email protected]:
- Access · Rectification · Erasure
- Restriction of processing
- Objection (incl. direct marketing)
- Portability (machine-readable copy)
- Withdraw consent (unsubscribe link in every e-mail)
- Lodge a complaint with the Autoriteit Persoonsgegevens
We respond within 30 days.
Â
7. Security
- TLS encryption for all web traffic
- Role-based access controls & MFA on admin accounts
- Encrypted backups
- Annual security review of processors
Â
8. Cookies & tracking technologies
We use cookies to:
- recognise repeat visitors and save preferences (functional)
- generate anonymous statistics (analytics – Google Analytics 4, Microsoft Clarity)
- enable appointment-booking embeds (Calendly)
Full details and a live cookie inventory are available in our Cookie Notice. You can manage preferences at any time via the banner or your browser settings.
Â
9. External links
Our website may contain links to external sites. We are not responsible for their privacy practices; please review their policies before submitting personal data.
Â
10. Changes to this policy
We may revise this policy from time to time to reflect legal or operational updates. We will post the new version here and notify registered customers by e-mail if changes are material.
Questions? Contact [email protected].