PRIVACY POLICY

Last Updated: 18 August 2026

This Privacy Notice for Nikita Gordijn ("we," "us," or "our") explains how and why we access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"). This applies when you:

Visit our website at https://nikitagordijn.com or any of our websites that reference this Privacy Notice.
Engage with us in any related manner, including via sales, marketing, or events.

Our Company’s Jurisdiction:
Nikita Gordijn is headquartered in the Netherlands. Accordingly, all processing of personal information is conducted in compliance with the General Data Protection Regulation (GDPR) and applicable Dutch data protection laws. If you have concerns about our practices, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

If you do not agree with our policies and practices, please do not use our Services. For further inquiries, contact us at team@nikitagordijn.com.

SUMMARY OF KEY POINTS

This summary offers an overview of our Privacy Notice. For more detailed information, please refer to the relevant sections below.

What Personal Information Do We Process?
We may process personal information based on your interactions with our Services, the choices you make, and the features you use.
[Learn more in Section 1: What Information Do We Collect?]
Sensitive Personal Information:
Although certain information may be considered "special" or "sensitive" in some jurisdictions (e.g., racial or ethnic origins, sexual orientation, religious beliefs), we do not process such data.
Third-Party Data:
We do not buy personal information from data brokers. We do receive limited information from third parties in two situations: profile details from a social media provider if you choose to register or log in using a social media account, and transaction details from our payment providers when you make a purchase.
How We Process Your Information:
Our processing activities enable us to provide, improve, and administer our Services, communicate with you, secure our systems, prevent fraud, and comply with legal obligations.
[Learn more in Section 2: How Do We Process Your Information?]
Sharing Your Information:
We share your information in specific circumstances and with defined categories of third parties.
[Learn more in Section 4: When and With Whom Do We Share Your Personal Information?]
Keeping Your Information Safe:
We implement robust organizational and technical measures to protect your data, though no system is completely foolproof.
[Learn more in Section 9: How Do We Keep Your Information Safe?]
Your Rights:
Depending on your location, you have rights regarding your personal information, including access, correction, deletion, and more.
[Learn more in Section 11: What Are Your Privacy Rights?]
Exercising Your Rights:
You can submit a data subject access request or contact us directly.
[Learn more in Sections 11 and 16]

1. WHAT INFORMATION DO WE COLLECT?

Personal Information You Disclose to Us

In Short: We collect the personal information you voluntarily provide.

When you register on our Services, express interest in our products, participate in activities, or contact us, we may collect:

Basic Details: Names, phone numbers, email addresses, mailing addresses, job titles, usernames, and passwords.
Preferences & Authentication Data: Contact preferences and authentication credentials.
Billing & Payment Details: Billing addresses and debit/credit card numbers.
Membership Data: If you register for our membership services via our membership plugin, additional account details may be collected.

Sensitive Information: We do not process sensitive personal information.

Payment Data

Payments are processed by Stripe. For services booked directly with us we may also accept bank transfer. These providers securely handle your payment details, and we do not store full payment data on our servers. Please review the privacy policies of these providers for further details.

Form and Enquiry Data

Our booking, enquiry and purchase forms may collect your name, email address, phone number, postal address, the details of your request, an approximate location derived from your IP address, and, where a form forms part of an agreement, your electronic signature. Some submissions are copied to a Google Sheets spreadsheet that we use to manage bookings.

Two features of our forms process information before you press submit. If you begin filling in a form and leave without submitting it, we may retain what you had entered so that we can follow up on incomplete enquiries. We also record which pages of our website you viewed before submitting a form, so that we understand how enquiries reach us. You can ask us to delete either of these at any time.

All information provided should be accurate and kept up to date; please notify us of any changes.

Information Automatically Collected

In Short: Certain technical details (like your IP address and browser characteristics) are automatically gathered when you use our Services.

This includes:

Device & Usage Data: IP address, browser type, operating system, language preferences, referring URLs, device names, and location data.
Cookies & Tracking: We use cookies and similar technologies to collect this data.

Google API

Our use of data from Google APIs adheres to the Google API Services User Data Policy.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, secure our systems, prevent fraud, and comply with legal requirements. We may also process your information for other purposes with your consent.

Processing purposes include:

Account Management: Creating, maintaining, and authenticating your account (including through our membership plugin).
Service Delivery: Providing the requested services.
Customer Support: Responding to inquiries and resolving issues.
Order Management: Managing orders, payments, returns, and exchanges.
Feedback & Communication: Requesting feedback and sending marketing communications (with opt-out options).
Security & Analytics: Monitoring for fraud and analyzing usage trends to improve our Services.
Optimization: Analysing usage with Google Analytics so that we can improve the website.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We process your information only when we have a valid legal reason under applicable law, such as with your consent, to fulfill contractual obligations, to protect your rights, or for our legitimate interests.

For Users in the EU or UK

Under GDPR/UK GDPR, our legal bases include:

Consent: When you provide explicit permission (which you may withdraw at any time).
Performance of a Contract: To fulfill our contractual obligations.
Legitimate Interests: To pursue our business interests, provided these do not override your rights (e.g., sending offers, service improvements, fraud prevention).
Legal Obligations: To comply with legal requirements.
Vital Interests: To protect the vital interests of any individual.

For Users in Canada

We process data based on:

Express or Implied Consent: When you permit us to use your information.
Legally Permitted Situations: In limited scenarios (e.g., fraud prevention or legal compliance).

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share your information in specific circumstances and with the following categories of third parties.

Categories of Third Parties

We may share your data with:

Vendors, Consultants, and Other Service Providers:
These include third parties who perform services on our behalf, such as:
- Data Analytics Services
- Payment processing (Stripe)
- Order Fulfillment Service Providers
- Performance Monitoring Tools
- Social Networks
- User Account Registration & Authentication Services
- Website Hosting Service Providers
- Membership management platforms

Additional Sharing Situations

Business Transfers:
In connection with mergers, acquisitions, or sales of assets, your information may be shared or transferred.
Approximate location from your IP address:
Some of our forms estimate your approximate location from your IP address so that we can respond appropriately. You can ask us to delete this at any time.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We use cookies and similar technologies to collect and store information about your interactions with our Services.

We deploy cookies, web beacons, pixels, and similar tools to:

Secure your account and our Services
Prevent crashes and resolve bugs
Save your preferences and support essential site functions

We also allow third parties to use their tracking technologies for analytics and advertising purposes, which may include:

Displaying tailored advertisements
Sending abandoned shopping cart reminders (based on your communication preferences)

If these technologies qualify as a “sale” or “sharing” under applicable laws, you can opt out using the Manage consent option that appears on every page of this website.

Analytics and Optimization Tools

We use:

Google AdSense: We may display advertising supplied by Google on some pages. Advertising cookies are only set after you consent through our cookie banner.
Google Analytics: To track and analyze usage data. To opt out, visit Google Analytics opt-out or adjust your Ads Settings. Additional opt-out tools include the Network Advertising Initiative and the Digital Advertising Alliance. For more details, visit the Google Privacy & Terms page.

6. DO WE OFFER SOCIAL MEDIA LOGIN?

In Short: We do not offer social media login.

Accounts on our Services are created with an email address and password only. We do not receive profile information from Facebook, X or any other social network. If we introduce social login in future, we will update this notice first.

7. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In Short: We may transfer, store, and process your information in countries other than your own.

Our website is hosted in the European Union. However, several of the service providers we rely on are established in the United States, which means some of your personal information is transferred outside the European Economic Area.

Where that happens we rely on one or both of the safeguards required by Chapter V of the GDPR: the European Commission adequacy decision for the EU-US Data Privacy Framework, where the provider is certified under it; or the European Commission Standard Contractual Clauses together with the supplementary measures that provider has put in place.

The providers who may receive your personal information are:

Hostinger - website hosting and outgoing email - European Union

Stripe - payment processing - Ireland and United States

Google (Analytics, Tag Manager, AdSense, Search Console, Site Kit, Google Sheets) - analytics, advertising, search performance data and storage of form submissions - United States

Intuit Mailchimp - email marketing and newsletter delivery - United States

Zoom Video Communications and Google Meet - delivery and recording of online workshops - United States

MalCare - website security scanning - United States

Automattic (Gravatar) - profile images - United States

Meta Platforms (Facebook, Instagram) - social sharing and our social media pages - United States

You can request a copy of the relevant transfer safeguards at any time by emailing team@nikitagordijn.com.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We retain your information only for as long as necessary to fulfill the purposes outlined in this Privacy Notice or as required by law.

We keep personal information only as long as we need it. Different types of data have different retention periods:

Orders, invoices and payment records - 7 years. This is a legal obligation under Article 52 of the Dutch General Tax Act (Algemene wet inzake rijksbelastingen). We cannot delete this data earlier, even if you ask us to.

Account data - for as long as your account is open, and 12 months after it becomes inactive.

Enquiry and contact form submissions - 24 months from your last contact with us.

Marketing contact details - until you unsubscribe. We then keep a minimal record of your objection so that we do not contact you again.

Workshop recordings and session materials - 12 months, unless you have given separate consent for promotional use, in which case until you withdraw that consent.

Website analytics data - as configured in Google Analytics, currently 14 months.

When information is no longer needed and no legal obligation requires us to keep it, it is deleted or anonymised.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We use a variety of security measures to protect your personal information.

We have implemented reasonable technical and organizational security measures designed to protect your data. However, no system is entirely secure; therefore, while we strive to safeguard your information, we cannot guarantee complete protection from unauthorized access, hacking, or other breaches. Please access our Services in a secure environment and understand that internet usage is at your own risk.

10. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit, or market personal information from children under 18, nor do we sell such data. By using our Services, you represent that you are at least 18 or that you are the parent/guardian of a minor who has provided consent. Should we discover data from a child under 18, we will promptly deactivate the account and delete the data. If you suspect we have collected such data, please contact us immediately.

11. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your location, you have rights regarding your personal information, including access, correction, deletion, and more.

Your Rights May Include:

Right to Access: Obtain a copy of your personal information.
Right to Correct: Rectify any inaccuracies.
Right to Delete: Request deletion of your data.
Right to Restrict Processing/Data Portability: Limit processing or receive your data in a portable format.
Right to Object: Object to processing (e.g., for targeted advertising).
Right to Withdraw Consent: At any time if processing is based on your consent.

For residents in the EEA, UK, Switzerland, or Canada, you may also have the right to lodge a complaint with your local data protection authority.

Account & Marketing Communications

Account Management: You can review or update your account information through your account settings or by contacting us.
Account Termination: Upon request, we will deactivate or delete your account (while retaining some data for fraud prevention or legal purposes).
Marketing Communications: You can opt out of marketing messages via unsubscribe links or by contacting us. Note that non-marketing, service-related communications may still be sent.

For any questions about your privacy rights, please email team@nikitagordijn.com.

12. CONTROLS FOR DO-NOT-TRACK FEATURES

Many web browsers and mobile operating systems offer a Do-Not-Track ("DNT") setting. There is still no universally accepted technical standard for DNT, and we do not currently respond to browser DNT headers.

What we do is more concrete than a promise. Analytics and advertising on this website run under Google Consent Mode with every consent signal set to denied by default, and our form journey tracking is blocked outright until you consent. If you take no action, or you decline, no analytics or advertising cookies are stored on your device. You can change or withdraw your choice at any time using the Manage consent option that appears on every page of this website.

13. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: We are a Netherlands business and we apply the GDPR to everyone, wherever you live.

We work with clients and receive visitors from the United States. US state privacy laws such as the California Consumer Privacy Act, and its equivalents in states including Virginia, Colorado, Connecticut, Texas and Utah, apply to businesses above certain size thresholds, for example annual revenue above twenty-five million dollars, or handling the personal information of one hundred thousand or more residents of a state. We are a small independent business and fall well below those thresholds, so those laws do not apply to us.

In practice this works in your favour. Because we are established in the Netherlands, we handle your personal information under the GDPR wherever you live, and the GDPR gives you broader rights than most US state laws do. You can ask us for a copy of your data, ask us to correct or delete it, ask us to restrict how we use it, object to a particular use, and withdraw your consent at any time. We do not sell your personal information and we do not build targeted advertising profiles from it.

To exercise any of these rights, email team@nikitagordijn.com. We will respond within one month, which is the deadline the GDPR sets. If you are not satisfied with our response, you may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

14. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we update this notice as necessary to stay compliant with relevant laws.

We may periodically update this Privacy Notice. The revised version will include an updated "Last Updated" date. For material changes, we may post a notice on our website or directly notify you. We encourage you to review this notice regularly.

15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this Privacy Notice, you may contact us by post at:

Nikita Gordijn
Velddriel, 5334 JT
Netherlands

Or by email at team@nikitagordijn.com.

16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or, if in the US, your state of residence, you may have the right to:

Request access to your personal data
Receive details about how we process it
Correct inaccuracies
Delete your personal data
Withdraw your consent for processing

To request to review, update, or delete your information, please submit a data subject access request by following the instructions provided above.

This complete Privacy Policy reflects our current practices and is effective as of the date noted above. For additional details or future updates, please refer to our website or contact us directly.