Privacy Policy

Last updated: 17 June 2026

Who we are

This policy explains how Danny den Hartog, a sole proprietorship registered in the Netherlands under KvK number 62831518, at Harry Banninklaan 118, 2652 NB Berkel en Rodenrijs, The Netherlands ("we", "us"), handles your personal data. We are the controller. Privacy contact: info@dannydenhartog.com. We follow the EU GDPR and Dutch data protection law, and we respect privacy rights your own country gives you.

What we collect, why, and our lawful basis

Account and purchase data (name, email, billing details, what you bought): to provide what you bought and run our business. Basis: performance of our contract with you.
Coaching and session content (what you share in sessions, intake forms, assignments, recordings, and transcripts): to coach you and run the programme. Basis: performance of the contract. Where sensitive personal matters arise in coaching, that may be special-category data, which we process only on the basis of your explicit consent and only as far as needed to support you.
Marketing data (email engagement, preferences): to send you relevant updates. Basis: your consent, or our legitimate interest in marketing our own similar services to existing clients where the law allows; you can object or opt out at any time, and we balance this against your interests.
Website and usage data (cookies, analytics): handled per our cookie notice; non-essential cookies only with your consent.

Providing account and purchase data is necessary to enter into and perform the contract; if you do not provide it, we cannot deliver the service. Other data is optional, though some features may not work without it.

Recordings, clips, and your image

Sessions are recorded so we can provide replay access, improve the programme, and train facilitators (basis: performance of the contract and our legitimate interest in quality, balanced against your interests). We will only use a recording or clip that identifies you in external marketing if you have signed our separate Media and Testimonial Release. This is both a data protection matter and, under Dutch portrait law, a matter of your rights in your own image. You can withdraw consent for future marketing use at any time.

The tools and processors we use

We use trusted providers who process data on our behalf under data processing agreements:

Zoom for video sessions and recordings.
An EU-based, GDPR-compliant AI notetaker that transcribes and summarises sessions.
Anthropic (Claude) and content tools such as CapCut to help produce content. We do not enter your identifiable personal or sensitive information into general content-generation tools.
Kajabi, which hosts our website and courses, together with our email marketing platform and our payment provider.

We keep this list current. Each provider processes your data only on our instructions and under suitable safeguards.

How we use AI with your information

We use AI tools to transcribe and summarise sessions, to help analyse and develop the information and ideas you share, and to help produce materials. Where this involves your personal data, we do so to deliver our services to you (performance of the contract) and, where sensitive personal matters are involved, on the basis of your explicit consent. We do not enter your identifiable or sensitive information into general content-generation tools, and a human remains responsible for coaching and for any decision about you. You can ask about or object to this processing at any time.

International transfers

Some providers are based outside the EU, mainly in the United States. For US transfers we rely on the EU-US Data Privacy Framework where the provider is certified under it, and on the European Commission's Standard Contractual Clauses, with a transfer assessment, where it is not. For a provider outside both the EU and the US we use Standard Contractual Clauses and assess the transfer. Where we cannot ensure adequate protection for a tool, we do not use it for your personal data. You can ask us for a copy of the safeguards we rely on.

How we keep data secure

We use appropriate technical and organisational measures to protect your data, including access controls, secure accounts, and working only with providers that offer suitable safeguards. No system is perfectly secure, but we take reasonable steps to protect your information and to limit who can access it.

How long we keep data

We keep account and financial records for as long as the law requires (Dutch tax law generally requires seven years for fiscal records). We keep coaching content for as long as you are a client and for up to 24 months afterwards, unless we need to keep it longer to comply with the law, and then we delete or anonymise it. We keep marketing data until you opt out.

Children

Our services are for adults and are not directed to children. We do not knowingly collect data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.

Your rights

You can ask us to give you access to your data, correct it, delete it, restrict or object to its use, or provide it in a portable form. Where we rely on consent, you can withdraw it at any time without affecting earlier processing. To exercise any right, contact info@dannydenhartog.com; we respond within the time the law requires, normally one month. You can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local authority.

Automated decisions

We do not make decisions about you by solely automated means that produce legal or similarly significant effects. The AI tools we use support our work; a human remains responsible for coaching and any decision about you.

Changes

We may update this policy and will post the current version, with its date, at www.dannydenhartog.com.