Privacy Policy
1. About Us
Double Your Sustainability operates this website and is the data controller for the personal data processing described in this policy.
If you have questions about this policy or how we use your personal data, contact support@doubleyoursustainability.com.
2. What data do we collect?
| Category | Examples |
|---|---|
| Identity & Contact | Name, business name, e-mail address, telephone number, billing details and other contact information you provide. |
| Purchase & Payment | Order or transaction ID, product or service purchased, price, VAT information, invoice details and payment status. Full payment-card details are handled by the relevant payment provider and are not stored by us. |
| Usage / Technical | IP address, device and browser information, pages visited, timestamps, click-stream information and cookie or consent status. Where you consent, this may include analytics information from Google Analytics 4 and Microsoft Clarity. |
| Assignment materials | Documents and information shared during consulting, training or coaching engagements. These may include employees’ names, roles or assessment-related information. |
| Marketing preferences | Newsletter or resource sign-up status, unsubscribe status, consent records, tags and other preferences used to manage relevant communications. |
| User-generated | Form responses, voluntary survey answers and ratings, optional contact details included with feedback, testimonials, support messages and other information you choose to submit. |
We do not intentionally request special-category personal data under Article 9 GDPR. Please avoid providing such data unless it is genuinely necessary for the service you have asked us to provide.
3. Why do we process your data & on what legal basis?
| Purpose | Data | Legal basis (Art 6 GDPR) |
|---|---|---|
| Process and deliver purchases, services and invoices | Identity, Contact, Purchase & Payment | Contract 6(1)(b); Legal obligation 6(1)(c) |
| Provide downloads, resources, customer support and optional guidance on using purchased products | Identity, Contact, Purchase, User-generated | Contract 6(1)(b) for purchase fulfilment; Legitimate interest 6(1)(f) for optional product guidance, where justified |
| Deliver free resources and email courses that you request, such as the Assessment Start Pack and EcoVadis Essentials | Identity & Contact, sign-up preferences | Consent 6(1)(a) for the requested email delivery |
| Deliver consulting, training and coaching engagements | Identity, Contact, Assignment materials | Contract 6(1)(b); Legitimate interest 6(1)(f) where appropriate |
| Send optional ongoing DYS updates, newsletters and promotional offers | Identity, Contact, Marketing preferences | Consent 6(1)(a), where required by applicable electronic-marketing rules |
| Collect voluntary feedback on courses and resources, improve them and respond when requested | User-generated, optional Identity & Contact | Legitimate interest 6(1)(f), where justified |
| Measure website use with non-essential analytics tools | Usage / Technical | Consent 6(1)(a) |
| Operate, secure and troubleshoot the website and services | Usage / Technical | Legitimate interest 6(1)(f) |
| Publish testimonials | User-generated | Consent 6(1)(a) |
| Comply with legal or regulatory requirements | Relevant categories | Legal obligation 6(1)(c) |
When you request a free resource or email course, we use your details to deliver the material and its accompanying messages. Signing up for a free resource or submitting feedback does not automatically subscribe you to ongoing DYS marketing emails. Those updates and relevant offers have a separate, voluntary signup.
When you submit feedback through a survey, we use your answers to understand what is useful and what could be improved. Providing an email address is optional; if you include one, we may use it to respond to your feedback or question, not to enrol you in marketing.
If you purchase a digital product through Lemon Squeezy, we may use your e-mail address to send a short series of optional, practical messages about using your purchase. We use Zapier and Systeme.io to manage these messages. They do not subscribe you to our general marketing newsletter, and you can opt out of the optional guidance at any time.
We do not use automated decision-making that produces legal or similarly significant effects on you.
4. How long do we keep your data?
| Data | Typical retention period or criterion |
|---|---|
| Invoices and accounting records | At least 7 years where required by Dutch tax and accounting rules, and longer where another legal retention requirement applies. |
| Support e-mails and contact-form enquiries | Up to 5 years after the last relevant interaction, unless a shorter period is sufficient or a longer period is required for a legal claim or obligation. |
| Newsletter and marketing contacts | Until you unsubscribe, withdraw consent or the information is no longer reasonably needed for the purpose for which it was collected. |
| Voluntary course and resource feedback | Reviewed periodically and deleted or anonymised when identifiable responses are no longer necessary for evaluating or improving the resource. Optional contact details are retained only as needed to respond or follow up. |
| Website analytics data | According to the retention settings and policies of the relevant analytics provider and our configured consent settings. |
| Testimonials | Until the testimonial is removed, consent is withdrawn where applicable, or the content is no longer used. |
| Assignment materials | Normally for the engagement plus up to 2 years for quality assurance, continuity and dispute-resolution purposes, unless a different period is agreed or legally required. |
| Backups | According to the normal backup and deletion cycles of the relevant service provider. |
We aim not to keep personal data longer than necessary for the purpose for which it was collected.
5. Which service providers do we use?
We use a limited number of service providers to operate the website, communicate with you, deliver products and services, and run the business. Depending on how you interact with us, these may include:
| Provider | Role |
|---|---|
| Systeme.io / ITACWT Limited (Ireland) | Website platform, forms, contact database, e-mail marketing, automations and digital-product or customer delivery where used. |
| Tally BV (Belgium) | Embedded course and resource feedback forms, survey response collection and analysis, including optional respondent contact details where provided. |
| Lemon Squeezy / Sold through Link, LLC | Digital-product checkout and merchant-of-record services where Lemon Squeezy is used. |
| Zapier, Inc. | Connects Lemon Squeezy purchase information with customer records in Systeme.io for product-specific onboarding. |
| Google Analytics 4 and related website measurement services where enabled and consented to. | |
| Microsoft | Microsoft Clarity website analytics where enabled and consented to. |
| CookieScript / Objectis, UAB (Lithuania) | Cookie-consent and preference management. |
| Apple Inc. | E-mail and cloud-storage services where used. |
| Calendly LLC | Appointment scheduling where used. |
| OpenAI | AI-assisted drafting, analysis or summaries where used. We aim to minimise personal or confidential information shared with AI services. |
| Dutch accountant / financial adviser | Accounting, tax and financial-compliance services. |
We do not sell your personal data.
Some providers or their subprocessors may process personal data outside the European Economic Area. Where required, transfers are protected using an applicable lawful transfer mechanism, such as an adequacy decision, Standard Contractual Clauses or another mechanism permitted under data-protection law.
6. Your rights
Subject to the conditions and exceptions in applicable law, you may have the right to:
- access your personal data;
- correct inaccurate or incomplete data;
- request deletion of data;
- request restriction of processing;
- object to certain processing, including direct marketing;
- receive certain data in a portable, machine-readable format;
- withdraw consent at any time where processing is based on consent; and
- lodge a complaint with the Autoriteit Persoonsgegevens.
To exercise a privacy right, e-mail support@doubleyoursustainability.com. We will respond within the period required by applicable law.
7. Security
We use reasonable technical and organisational measures designed to protect personal data. Depending on the system involved, these include:
- HTTPS/TLS encryption for website traffic;
- restricted access to business systems and customer information;
- multi-factor authentication where available;
- data minimisation and limited sharing; and
- use of established service providers with security and privacy controls.
8. Cookies & tracking technologies
We use cookies and similar technologies for functions such as operating the website, remembering necessary preferences and, where you consent, measuring website usage.
Cookie choices are managed through CookieScript. Non-essential analytics cookies should only be activated in accordance with the preferences you choose in the cookie banner.
Full details about the categories of cookies and services used on this website are available in our Cookie Notice.
You can review or change your choices at any time:
9. External links
Our website may contain links to external websites and services. We are not responsible for their privacy practices. Please review their privacy information before submitting personal data.
10. Changes to this policy
We may update this policy to reflect changes to our services, suppliers, technology or legal obligations. The current version will be published on this page together with its latest update date.
E-mail support@doubleyoursustainability.com.