PRIVACY POLICY

Last Updated: March 15, 2025

This Privacy Notice for Nikita Gordijn (“we,” “us,” or “our”) explains how and why we access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”). This applies when you:

• Visit our website at https://nikitagordijn.com or any of our websites that reference this Privacy Notice.
• Engage with us in any related manner, including via sales, marketing, or events.

Our Company’s Jurisdiction:
Nikita Gordijn is headquartered in the Netherlands. Accordingly, all processing of personal information is conducted in compliance with the General Data Protection Regulation (GDPR) and applicable Dutch data protection laws. If you have concerns about our practices, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

If you do not agree with our policies and practices, please do not use our Services. For further inquiries, contact us at team@nikitagordijn.com.

SUMMARY OF KEY POINTS

This summary offers an overview of our Privacy Notice. For more detailed information, please refer to the relevant sections below.

• What Personal Information Do We Process?
  We may process personal information based on your interactions with our Services, the choices you make, and the features you use.
  [Learn more in Section 1: What Information Do We Collect?]
• Sensitive Personal Information:
  Although certain information may be considered “special” or “sensitive” in some jurisdictions (e.g., racial or ethnic origins, sexual orientation, religious beliefs), we do not process such data.
• Third-Party Data:
  We do not collect information from third parties unless explicitly stated.
• How We Process Your Information:
  Our processing activities enable us to provide, improve, and administer our Services, communicate with you, secure our systems, prevent fraud, and comply with legal obligations.
  [Learn more in Section 2: How Do We Process Your Information?]
• Sharing Your Information:
  We share your information in specific circumstances and with defined categories of third parties.
  [Learn more in Section 4: When and With Whom Do We Share Your Personal Information?]
• Keeping Your Information Safe:
  We implement robust organizational and technical measures to protect your data, though no system is completely foolproof.
  [Learn more in Section 9: How Do We Keep Your Information Safe?]
• Your Rights:
  Depending on your location, you have rights regarding your personal information, including access, correction, deletion, and more.
  [Learn more in Section 11: What Are Your Privacy Rights?]
• Exercising Your Rights:
  You can submit a data subject access request or contact us directly.
  [Learn more in Sections 11 and 16]

TABLE OF CONTENTS

1. What Information Do We Collect?
2. How Do We Process Your Information?
3. What Legal Bases Do We Rely On to Process Your Personal Information?
4. When and With Whom Do We Share Your Personal Information?
5. Do We Use Cookies and Other Tracking Technologies?
6. How Do We Handle Your Social Logins?
7. Is Your Information Transferred Internationally?
8. How Long Do We Keep Your Information?
9. How Do We Keep Your Information Safe?
10. Do We Collect Information from Minors?
11. What Are Your Privacy Rights?
12. Controls for Do-Not-Track Features
13. Do United States Residents Have Specific Privacy Rights?
14. Do We Make Updates to This Notice?
15. How Can You Contact Us About This Notice?
16. How Can You Review, Update, or Delete the Data We Collect from You?

1. WHAT INFORMATION DO WE COLLECT?

Personal Information You Disclose to Us

In Short: We collect the personal information you voluntarily provide.

When you register on our Services, express interest in our products, participate in activities, or contact us, we may collect:

• Basic Details: Names, phone numbers, email addresses, mailing addresses, job titles, usernames, and passwords.
• Preferences & Authentication Data: Contact preferences and authentication credentials.
• Billing & Payment Details: Billing addresses and debit/credit card numbers.
• Membership Data: If you register for our membership services via our membership plugin, additional account details may be collected.

Sensitive Information: We do not process sensitive personal information.

Payment Data

For processing payments, we use third-party providers including PayPal, Stripe, CC Avenue, and traditional debit/credit card processing. These providers securely handle your payment details, and we do not store full payment data on our servers. Please review the privacy policies of these providers for further details.

Social Media Login Data

If you register using a social media account (e.g., Facebook, X), we receive certain profile details (such as your name, email address, and profile picture) from the provider.
All information provided should be accurate and kept up to date; please notify us of any changes.

Information Automatically Collected

In Short: Certain technical details (like your IP address and browser characteristics) are automatically gathered when you use our Services.

This includes:

• Device & Usage Data: IP address, browser type, operating system, language preferences, referring URLs, device names, and location data.
• Cookies & Tracking: We use cookies and similar technologies to collect this data.

Google API

Our use of data from Google APIs adheres to the Google API Services User Data Policy.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, secure our systems, prevent fraud, and comply with legal requirements. We may also process your information for other purposes with your consent.

Processing purposes include:

• Account Management: Creating, maintaining, and authenticating your account (including through our membership plugin).
• Service Delivery: Providing the requested services.
• Customer Support: Responding to inquiries and resolving issues.
• Order Management: Managing orders, payments, returns, and exchanges.
• Feedback & Communication: Requesting feedback and sending marketing communications (with opt-out options).
• Security & Analytics: Monitoring for fraud and analyzing usage trends to improve our Services.
• Optimization: Using tools like the LiteSpeed plugin for website optimization and Google Analytics for usage tracking.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We process your information only when we have a valid legal reason under applicable law, such as with your consent, to fulfill contractual obligations, to protect your rights, or for our legitimate interests.

For Users in the EU or UK

Under GDPR/UK GDPR, our legal bases include:

• Consent: When you provide explicit permission (which you may withdraw at any time).
• Performance of a Contract: To fulfill our contractual obligations.
• Legitimate Interests: To pursue our business interests, provided these do not override your rights (e.g., sending offers, service improvements, fraud prevention).
• Legal Obligations: To comply with legal requirements.
• Vital Interests: To protect the vital interests of any individual.

For Users in Canada

We process data based on:

• Express or Implied Consent: When you permit us to use your information.
• Legally Permitted Situations: In limited scenarios (e.g., fraud prevention or legal compliance).

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share your information in specific circumstances and with the following categories of third parties.

Categories of Third Parties

We may share your data with:

• Vendors, Consultants, and Other Service Providers:
  These include third parties who perform services on our behalf, such as:
  • Data Analytics Services
  • Payment Processors (e.g., PayPal, Stripe, CC Avenue, debit/credit card processors)
  • Order Fulfillment Service Providers
  • Performance Monitoring Tools
  • Social Networks
  • User Account Registration & Authentication Services
  • Website Hosting Service Providers
  • Membership management platforms

Additional Sharing Situations

• Business Transfers:
  In connection with mergers, acquisitions, or sales of assets, your information may be shared or transferred.
• Use of Google Maps Platform APIs:
  When using services like the Google Maps API or Places API, your location data may be shared with Google. Google Maps uses GPS, Wi‑Fi, and cell towers to estimate your location. We store (“cache”) your location on your device for six (6) months. You may revoke consent at any time by contacting us.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We use cookies and similar technologies to collect and store information about your interactions with our Services.

We deploy cookies, web beacons, pixels, and similar tools to:

• Secure your account and our Services
• Prevent crashes and resolve bugs
• Save your preferences and support essential site functions

We also allow third parties to use their tracking technologies for analytics and advertising purposes, which may include:

• Displaying tailored advertisements
• Sending abandoned shopping cart reminders (based on your communication preferences)

If these technologies qualify as a “sale” or “sharing” under applicable laws, you may opt out by following the instructions in Section 13.

Analytics and Optimization Tools

We use:

• LiteSpeed Plugin: To optimize website performance.
• Google Analytics: To track and analyze usage data. To opt out, visit Google Analytics opt-out or adjust your Ads Settings. Additional opt-out tools include the Network Advertising Initiative and the Digital Advertising Alliance. For more details, visit the Google Privacy & Terms page.

6. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you register or log in using a social media account, we may receive certain information from that provider.

Our Services allow you to sign in with your third-party social media account (e.g., Facebook, X). When you do so, we receive profile information such as your name, email address, friends list, and profile picture. This information is used solely for the purposes outlined in this Privacy Notice. We recommend reviewing the privacy policy of your social media provider for details on their data practices.

7. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In Short: We may transfer, store, and process your information in countries other than your own.

Our servers are located in the Netherlands. If you access our Services from outside the Netherlands, your information may be transferred, stored, and processed in our facilities or those of our third-party service providers (as described in Section 4), which may be located in different countries. Residents of the EEA, UK, or Switzerland should note that data protection laws may differ; however, we take measures to safeguard your data in accordance with this Privacy Notice and applicable laws.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We retain your information only for as long as necessary to fulfill the purposes outlined in this Privacy Notice or as required by law.

We keep your personal information only as long as needed to provide our Services, unless a longer retention period is required or permitted (e.g., for tax or legal purposes). Typically, we do not retain information beyond six (6) months after your account becomes idle. When no longer needed, your information will be deleted, anonymized, or securely stored until deletion is possible.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We use a variety of security measures to protect your personal information.

We have implemented reasonable technical and organizational security measures designed to protect your data. However, no system is entirely secure; therefore, while we strive to safeguard your information, we cannot guarantee complete protection from unauthorized access, hacking, or other breaches. Please access our Services in a secure environment and understand that internet usage is at your own risk.

10. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit, or market personal information from children under 18, nor do we sell such data. By using our Services, you represent that you are at least 18 or that you are the parent/guardian of a minor who has provided consent. Should we discover data from a child under 18, we will promptly deactivate the account and delete the data. If you suspect we have collected such data, please contact us immediately.

11. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your location, you have rights regarding your personal information, including access, correction, deletion, and more.

Your Rights May Include:

• Right to Access: Obtain a copy of your personal information.
• Right to Correct: Rectify any inaccuracies.
• Right to Delete: Request deletion of your data.
• Right to Restrict Processing/Data Portability: Limit processing or receive your data in a portable format.
• Right to Object: Object to processing (e.g., for targeted advertising).
• Right to Withdraw Consent: At any time if processing is based on your consent.

For residents in the EEA, UK, Switzerland, or Canada, you may also have the right to lodge a complaint with your local data protection authority.

Account & Marketing Communications

• Account Management: You can review or update your account information through your account settings or by contacting us.
• Account Termination: Upon request, we will deactivate or delete your account (while retaining some data for fraud prevention or legal purposes).
• Marketing Communications: You can opt out of marketing messages via unsubscribe links or by contacting us. Note that non-marketing, service-related communications may still be sent.

For any questions about your privacy rights, please email team@nikitagordijn.com.

12. CONTROLS FOR DO-NOT-TRACK FEATURES

Many web browsers and mobile operating systems offer a Do-Not-Track (“DNT”) setting. Currently, there is no universally accepted standard for DNT, and we do not respond to such signals. Should an industry-wide standard be established in the future, we will update this Privacy Notice accordingly.

13. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short:
If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have rights regarding access, correction, deletion, and more regarding your personal information. These rights may also include the ability to withdraw consent for our processing of your data. These rights are subject to certain limitations under applicable law.

Categories of Personal Information We Collect

We have collected the following categories of personal information in the past twelve (12) months:

We may also collect additional information when you interact with us in person, online, by phone, or mail (e.g., through customer support, surveys, or contests).

Sources, Use, and Sharing

For details on sources, use, and sharing of personal information, please refer to Sections 1, 2, and 4 of this Privacy Notice.

Your Rights

Under applicable US state laws, you have rights including:

• Knowing whether we process your data
• Accessing your data
• Correcting inaccuracies
• Deleting your data
• Obtaining a copy of your data
• Not being discriminated against for exercising your rights
• Opting out of targeted advertising, sale, or profiling of your data

How to Exercise Your Rights:
Submit a data subject access request by emailing team@nikitagordijn.com or contacting us as specified in Section 15. If you authorize an agent to act on your behalf, additional verification may be required.

Request Verification:
We will verify your identity using the information we have on record before processing your request. Additional details may be requested for security purposes.

Appeals:
If your request is declined, you may appeal the decision by emailing team@nikitagordijn.com. If unsatisfied, you may file a complaint with your state attorney general.

California “Shine The Light” Law:
Under California Civil Code Section 1798.83, California residents may request, once per year and free of charge, details about personal information disclosed to third parties for direct marketing. To make such a request, please refer to Section 15.

14. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we update this notice as necessary to stay compliant with relevant laws.

We may periodically update this Privacy Notice. The revised version will include an updated “Last Updated” date. For material changes, we may post a notice on our website or directly notify you. We encourage you to review this notice regularly.

15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this Privacy Notice, you may contact us by post at:

Nikita Gordijn
[Your Street Address]
[City, Postal Code: 5334JT]
Netherlands

Or by email at team@nikitagordijn.com.

16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or, if in the US, your state of residence, you may have the right to:

• Request access to your personal data
• Receive details about how we process it
• Correct inaccuracies
• Delete your personal data
• Withdraw your consent for processing

To request to review, update, or delete your information, please submit a data subject access request by following the instructions provided above.

This complete Privacy Policy reflects our current practices and is effective as of the date noted above. For additional details or future updates, please refer to our website or contact us directly.