Privacy Policy

Last updated: 27 October 2026

1. Introduction

At Rinspirator, I respect your privacy and take the protection of your personal data seriously.

This Privacy Policy explains how I collect, use, store and protect your personal data, and what rights you have under the General Data Protection Regulation (GDPR).

This policy applies to Rinspirator's Awareness & Transformation Coaching services and the website at https://rinspirator.com.

2. Who Is Responsible for Your Personal Data?

The data controller responsible for processing your personal data is:

Business name: Rinspirator
Legal form: Sole proprietorship (eenmanszaak)
Business address: Rigolettostraat 13, 3208 PJ, Spijkenisse, Zuid-Holland, The Netherlands
Chamber of Commerce (KvK): 62859293
VAT identification number: NL001442117B08
Email: [email protected]
Website: https://rinspirator.com

For any questions about this Privacy Policy or the processing of your personal data, please contact me using the email address above.

3. What Personal Data Do I Collect?

Depending on how you interact with Rinspirator, I may process the following information:

Contact and identification details

• Your name.

• Your email address.

• Your telephone number, if provided.

• Other information you voluntarily share when contacting me.

Coaching and appointment information

• Appointment dates and scheduling information.

• Communications relating to your coaching sessions.

• Information necessary to organise and provide coaching services.

Payment and administration information

• Billing details.

• Payment status and transaction information.

• Information required for financial administration and legal obligations.

Website information

• Cookie preferences.

• Technical information needed for website functionality and security.

• Website usage information collected through Google Analytics, only after you have given the relevant consent.

Session Recordings

Regular Awareness & Transformation Coaching sessions are not recorded.

If recording a coaching session is ever considered for a specific purpose, the client will be informed in advance, and the recording will only take place after obtaining their explicit consent.

Sensitive Information Shared During Coaching

Awareness & Transformation Coaching may involve discussions about personal experiences, emotions, relationships, past events and other sensitive subjects.

I generally maintain only limited coaching notes. These may include practical information, such as coaching goals, agreed actions and relevant progress.

Occasionally, brief notes may also include personal experiences, emotions, beliefs or behavioural patterns shared by the client, but only when relevant and necessary to support the coaching process.

I do not routinely create extensive client records, detailed session transcripts or retain completed intake questionnaires.

Information shared verbally during coaching sessions is not systematically documented.

However, if you voluntarily share personal or sensitive information through email, booking forms or other written communications, this information may be stored as part of those communications.

I aim to minimise the collection and retention of sensitive personal information.

Please avoid sharing sensitive information through website forms unless it is necessary.

Where information qualifies as special-category personal data under the GDPR, I will only process it when an appropriate legal basis and an applicable condition under Article 9 GDPR are present.

4. Why Do I Process Your Personal Data?

I process personal data for the following purposes and legal bases:

Purpose Legal basis

Responding to questions and enquiries Legitimate interests or taking steps at your request before

entering into a contract

Scheduling and providing coaching services Performance of a contract or taking pre-contractual steps

Communicating with clients about coaching Performance of a contract or legitimate interests

Processing payments and maintaining financial records Performance of a contract and compliance with legal

obligations

Maintaining website security and essential functionality Legitimate interests

Analysing website usage through Google Analytics Your consent

Establishing, exercising or defending legal claims, Legitimate interests or another applicable legal basis

where necessary

I do not sell your personal data.

I do not use your personal data for automated decision-making that produces legal or similarly significant effects.

5. Cookies and Website Analytics

My website uses cookies and similar technologies to support website functionality, security, cookie preferences and, with your consent, website analytics.

Essential Website Cookies

Certain cookies may be used to maintain website functionality, security and your cookie preferences.

The website operates through Mastermind and its underlying website infrastructure.

Cookies associated with the platform may include:

• cookie-config, which stores your cookie preference.

• Cloudflare-related security cookies, such as cfbm.

• msgsndr_id, a platform-related cookie whose specific purpose and consent requirements are being clarified with the website provider.

The classification of msgsndr_id is currently under review. I do not claim that this cookie is strictly necessary until its purpose and legal requirements have been confirmed.

Google Analytics 4

I use Google Analytics 4 to understand how visitors interact with my website and to improve its content and usability.

Google Analytics is configured to load only after you select “Accept all” in the website's cookie banner.

If you select “Accept essential”, Google Analytics is not loaded through the website's current tracking configuration.

After you provide consent, Google Analytics may process information such as:

• Pages visited and website interactions.

• Browser and device information.

• Approximate geographical information.

• Cookie identifiers and other analytics-related technical data.

Google Analytics may set cookies including ga and ga_YE725YY34K.

Google Analytics Data Retention

The following data retention settings are configured in Google Analytics 4:

• Event data retention: 2 months.

• User data retention: 2 months.

• Resetting retention upon new user activity: Disabled.

These settings apply to the relevant user-level and event-level data covered by Google Analytics retention controls. They do not necessarily mean that all aggregated analytics reports are deleted after two months.

Managing Your Cookie Preferences

You can accept or reject optional analytics cookies through the cookie banner.

You can also manage or delete cookies through your browser settings.

If you have already made a cookie choice and no preference-management option is available on the website, you can clear the website's cookies in your browser and make a new selection.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

6. Third-Party Service Providers

I use selected third-party service providers to operate my website, communicate with clients, provide coaching and manage business administration.

These include:

Mastermind

Used for website hosting, website functionality, forms, booking-related services and associated platform infrastructure.

Microsoft 365

Used for business email, client communication and online sessions through Microsoft Teams.

Stripe

Used for payment processing, where applicable.

Bunni B.V.

Used for invoicing, bookkeeping and financial administration.

Rinspirator acts as the data controller for personal data processed through Bunni B.V., while Bunni acts as a data processor under a Data Processing Agreement concluded on 19 October 2026.

Bunni B.V. is contractually required to implement appropriate technical and organisational security measures to protect personal data and maintain confidentiality.

Bunni may engage subprocessors under contractual data protection arrangements. Where personal data is transferred outside the European Economic Area (EEA), such transfers must be covered by an applicable adequacy decision or appropriate safeguards in accordance with the GDPR.

Google Analytics

Used for website analytics, subject to your consent.

Depending on their roles, these providers may process personal data on my behalf as processors or act as independent data controllers for certain processing activities.

I aim to share only the personal data necessary for the relevant service.

Where required, appropriate data processing agreements and other contractual safeguards apply.

7. International Data Transfers

Some service providers may process or access personal data outside the European Economic Area (EEA).

Where such transfers take place, they must comply with applicable GDPR requirements.

Depending on the provider and destination, relevant safeguards may include:

• An adequacy decision by the European Commission.

• Standard Contractual Clauses approved by the European Commission.

• Other legally recognised transfer mechanisms, where applicable.

The processing locations and transfer arrangements depend on the relevant provider and services used.

8. How Long Do I Keep Your Personal Data?

I keep personal data only for as long as necessary for the purposes for which it was collected, unless a longer period is required or justified by law.

The following general retention periods apply:

Coaching Correspondence

Emails and other written coaching-related correspondence are normally reviewed and deleted within 12 months after the last coaching session.

Information may be retained for longer where necessary to meet legal obligations, resolve disputes or establish, exercise or defend legal claims.

Enquiries Without a Coaching Agreement

Personal data from enquiries that do not lead to a coaching agreement is normally reviewed and deleted within 6 months after the last relevant contact, unless continued retention is justified.

Financial Administration

Invoices and financial records that are subject to Dutch tax recordkeeping obligations are generally retained for 7 years, or longer where a specific legal requirement applies.

Google Analytics

The configured retention period for applicable event-level and user-level data in Google Analytics 4 is 2 months.

Aggregated reporting information may remain available for longer, as explained in Section 5.

Coaching Session Information and Notes

Regular Awareness & Transformation Coaching sessions are not recorded.

I generally maintain only limited coaching notes. These may include coaching goals, agreed actions, relevant progress and, occasionally, brief information about personal experiences, emotions, beliefs or behavioural patterns when necessary to support the coaching process.

I do not routinely create extensive client records, detailed session transcripts or retain completed intake questionnaires.

Limited coaching notes are normally reviewed and deleted no later than 12 months after the last coaching session, unless a longer retention period is required or justified by law.

Microsoft Teams Chats

Microsoft Teams chat messages are subject to an automatic retention and deletion policy.

Messages older than approximately 7 months are scheduled for automatic deletion. Actual deletion may take additional time due to Microsoft's processing procedures.

Deletion of Personal Data

After the applicable retention period, personal data is deleted or anonymised where reasonably possible, unless further retention is legally required or justified.

9. How Do I Protect Your Personal Data?

I take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse and disclosure.

These measures include:

• Password-protected accounts and devices.

• Multi-factor authentication for relevant business services.

• Device encryption.

• Limiting access to personal data.

• Reviewing and deleting information that is no longer necessary.

• Using established service providers for communication, payment processing and business administration.

Although no digital system can guarantee absolute security, I take reasonable steps to safeguard your information.

10. Your Privacy Rights

Under the GDPR, you may have the following rights, depending on the circumstances:

Right of access

You can request information about the personal data I process about you.

Right to rectification

You can request correction of inaccurate or incomplete personal data.

Right to erasure

You can request deletion of your personal data where the applicable legal conditions are met.

Right to restriction of processing

You can request that the processing of your personal data be restricted in certain circumstances.

Right to object

You can object to certain processing activities, including processing based on legitimate interests.

Right to data portability

Where applicable, you can request your personal data in a structured, commonly used and machine-readable format.

Right to withdraw consent

Where processing is based on consent, you can withdraw your consent at any time.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact:

[email protected]

I will respond in accordance with the time limits and requirements established by the GDPR, normally within one month.

Right to Lodge a Complaint

If you have concerns about how your personal data is processed, I encourage you to contact me first.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Website: https://autoriteitpersoonsgegevens.nl

11. Links to External Websites

My website may contain links to external websites or services.

I am not responsible for the privacy practices of third-party websites.

I encourage you to review their privacy policies before providing personal information.

12. Changes to This Privacy Policy

I may update this Privacy Policy when my services, website, service providers, data-processing practices or legal obligations change.

The latest version will be published on my website, together with the date of the most recent update.

13. Contact

If you have any questions about this Privacy Policy or how your personal data is processed, please contact:

Rinspirator
Business address: Rigolettostraat 13, 3208 PJ, Spijkenisse, Zuid-Holland, The Netherlands
KvK: 62859293
VAT identification number: NL001442117B08
Email: [email protected]
Website: https://rinspirator.com