Legal
Privacy statement
We keep this simple: we collect only what we need to run the course and send you what you asked for. This statement explains what, why, and what your rights are.
legalDraft to false in lib/site.ts.Last updated: 9 October 2026
1. Who is responsible for your data
[YOUR FULL NAME], trading as Dutch with Mike ([eenmanszaak (sole proprietorship)]), is the controller of your personal data under the General Data Protection Regulation (GDPR, in Dutch: AVG).
- Address: [BUSINESS ADDRESS, POSTCODE, CITY, THE NETHERLANDS]
- KvK number: [KVK NUMBER]
- Email: [email protected]
We have not appointed a data protection officer, because the law does not require it for a business of our size and kind. You can send all privacy questions to the email address above.
2. What we collect, why, and for how long
| Purpose and data | Legal basis | How long we keep it |
|---|---|---|
| Waitlist and emails. Your email address (and name, if you give it), to send the free lesson, the launch announcement and course news. | Your consent (art. 6(1)(a) GDPR). You can withdraw it at any time. | Until you unsubscribe or ask us to delete it. |
| Your account. Name, email address and password (stored in encrypted, hashed form), to give you access to the course. | Performing our agreement with you (art. 6(1)(b)). | As long as your account exists. We delete it within [30 days] after you ask. |
| Your learning data. Which lessons you completed, quiz and exercise results, so you can pick up where you left off. | Performing our agreement with you (art. 6(1)(b)). | As long as your account exists. |
| Comments. What you post under lessons, with your display name. Other learners can see it. | Performing our agreement (art. 6(1)(b)) and our legitimate interest in running a helpful, safe community (art. 6(1)(f)). | Until you delete the comment or your account. We may remove comments that break the rules. |
| Orders and payments. Name, email, country, what you bought, amount, date and VAT details. Card or bank details are handled by the payment provider, not by us. | Performing our agreement (art. 6(1)(b)) and our legal obligation to keep accounts and handle VAT (art. 6(1)(c)). | 7 years, as required by Dutch tax and bookkeeping rules. |
| Questions and complaints. Your message and our reply. | Our legitimate interest in answering you (art. 6(1)(f)) and, if you are a customer, our agreement. | [2 years] after the last contact. |
| Security and abuse prevention. Technical logs such as IP address and time of requests. | Our legitimate interest in keeping the site secure (art. 6(1)(f)). | No longer than [30 days], unless needed for an incident. |
| Website statistics. [ANALYTICS: describe what you use, e.g. a privacy-friendly tool with anonymised data, or write "We do not use website analytics."] | [LEGAL BASIS: legitimate interest if the cookie exemption applies, otherwise consent] | [RETENTION] |
Advertising. [CURRENT STATUS: "We do not currently use advertising pixels or cookies." Update this the moment you add Meta, TikTok or similar tools.] If we use such tools, we only do so after you give your consent through the cookie banner. See our cookie policy.
We do not make decisions about you based solely on automated processing, and we do not sell your personal data.
3. Who receives your data
We use the following service providers (processors) to run the site and the course. They only process data on our instructions, under a data processing agreement.
| Provider | What they do |
|---|---|
| Vercel | Hosts the website |
| Supabase | Stores accounts, progress and comments, and handles logins |
| Bunny Stream | Delivers the lesson videos |
| [PAYMENT PROVIDER] | Processes payments[ and, if it is the seller of record, handles VAT and invoices as an independent party] |
| MailerLite | Sends our emails and manages the waitlist |
| [PRIVACY-FRIENDLY ANALYTICS, or 'none'] | Website statistics |
We may also share data when the law requires it, for example with the tax authorities, or to protect our rights.
4. Data outside the EU
Some providers are based in, or use servers in, countries outside the European Economic Area, such as the United States. Where that happens, we make sure the transfer is protected, for example because the provider is covered by an EU adequacy decision (such as the EU–US Data Privacy Framework) or by the European Commission’s standard contractual clauses. You can ask us for details.
5. Your rights
You have the right to:
- access the personal data we hold about you;
- have incorrect data corrected;
- have your data deleted (“the right to be forgotten”), where the law allows;
- restrict how we use your data;
- receive your data in a portable format (data portability);
- object to processing based on our legitimate interests;
- withdraw your consent at any time, without affecting what happened before.
Email us to use any of these rights. We answer within one month. We may ask you to confirm your identity first. Unsubscribing from emails is always possible with the link at the bottom of every email.
If you think we are handling your data wrongly, please tell us first so we can fix it. You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in your own country.
6. Security
We protect your data with appropriate technical and organisational measures, including encrypted connections (HTTPS), hashed passwords and limited access. No system is perfectly secure. If a breach puts your rights at risk, we will report it to the authorities and to you where the law requires.
7. Children
The course is not aimed at children under 16. If you are under 16, ask a parent or guardian to sign up for you. If we learn that we collected data from a child without the required permission, we delete it.
8. Cookies
We explain which cookies and similar technologies we use, and how to manage them, in our cookie policy.
9. Changes to this statement
We may update this statement, for example when we add a new tool. The date at the top shows when it last changed. If a change affects you significantly, we will tell you.
10. Contact
Questions about this statement or your data? Email [email protected] or see contact.