Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data is:

Radiantdetoxifya
Utrechtsestraat 118
1017 VT Amsterdam
Netherlands
Email: assist@radiantdetoxifya.world
Phone: +31 20 428 51 83

For any questions regarding this Privacy Policy or the exercise of your data protection rights, please contact us using the details above.

2. Scope and Purpose of This Policy

This Privacy Policy applies to all personal data processed by Radiantdetoxifya in connection with our website at radiantdetoxifya.world and our educational active break programs for remote employees. It describes what data we collect, the legal bases for processing, how long we retain data, and the rights available to you under the General Data Protection Regulation (GDPR) and applicable Dutch data protection legislation.

Our website provides general informational content about workplace movement routines and work-life balance practices. We do not offer medical services, and data collected through this website is not used for medical diagnosis or treatment purposes.

3. Categories of Personal Data We Collect

3.1 Data You Provide Directly

When you use our contact form, we collect the following information:

• Your full name
• Your email address
• The content of your message
• Your consent confirmation for data processing

When you enroll in one of our educational programs, we may additionally collect:

• Organisation name and job title
• Billing address and payment details (processed through secure third-party payment providers)
• Team size and program preferences
• Communication records related to program delivery

3.2 Data Collected Automatically

When you visit our website, certain technical data may be collected automatically, including:

• IP address (anonymised where possible)
• Browser type and version
• Operating system
• Referring URL
• Pages visited and time spent on each page
• Date and time of access
• Device type (desktop, mobile, tablet)

This data is collected through cookies and similar technologies only when you have provided consent for analytics or marketing cookies. See our Cookie Policy for detailed information.

3.3 Data We Do Not Collect

We do not intentionally collect special categories of personal data as defined in Article 9 of the GDPR, including data concerning health, racial or ethnic origin, political opinions, religious beliefs, or biometric data. Our programs and website are not designed to process such information.

4. Legal Bases for Processing

We process personal data only when a valid legal basis under the GDPR applies:

• Consent (Article 6(1)(a)): For analytics cookies, marketing cookies, and newsletter subscriptions. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Contract performance (Article 6(1)(b)): For processing necessary to deliver educational programs you have purchased and to respond to pre-contractual inquiries.
• Legitimate interests (Article 6(1)(f)): For website security, fraud prevention, and improving our educational content, provided these interests are not overridden by your rights.
• Legal obligation (Article 6(1)(c)): For retaining financial records as required by Dutch tax and accounting legislation.

5. Purposes of Data Processing

We use personal data exclusively for the following purposes:

• Responding to inquiries submitted through our contact form
• Delivering educational program materials and orientation sessions
• Processing payments and issuing invoices
• Sending program-related communications you have requested
• Analysing website usage to improve content and navigation (with consent)
• Ensuring website security and preventing unauthorised access
• Complying with legal and regulatory obligations

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

6. Data Retention Periods

We retain personal data only for as long as necessary to fulfil the purposes described in this policy:

• Contact form submissions: Up to 12 months from the date of submission, unless an ongoing program discussion requires longer retention.
• Program enrollment records: Duration of the program plus 24 months for support and reference purposes.
• Financial and billing records: 7 years as required by Dutch tax legislation (Algemene wet inzake rijksbelastingen).
• Analytics data: 26 months from collection, in accordance with standard analytics platform retention settings.
• Cookie consent records: 12 months from the date consent was given or updated.
• Marketing communications data: Until you unsubscribe or withdraw consent, plus 30 days for processing the withdrawal.

After the applicable retention period expires, data is securely deleted or anonymised so that it can no longer be associated with you.

7. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to third parties. We may share data with the following categories of recipients when necessary:

• Hosting providers: For website infrastructure and data storage within the European Economic Area (EEA).
• Payment processors: For secure transaction handling. Payment providers process data under their own privacy policies and PCI-DSS compliance standards.
• Email service providers: For delivering program materials and responding to inquiries.
• Analytics providers: Only when you have consented to analytics cookies.
• Legal and regulatory authorities: When required by applicable law, court order, or governmental request.

All third-party processors are bound by data processing agreements that require them to protect your data in accordance with the GDPR and to process it only according to our documented instructions.

8. International Data Transfers

Our primary data processing operations are located within the European Union. If any data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or adequacy decisions for the recipient country.

9. Security Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• HTTPS encryption for all website communications
• Access controls limiting data access to authorised personnel only
• Regular security assessments of our hosting infrastructure
• Encrypted storage for sensitive data at rest
• Employee training on data protection practices
• Incident response procedures for potential data breaches

While we take reasonable precautions, no method of electronic transmission or storage is completely secure. We encourage you to use strong passwords and protect your own devices when communicating with us.

10. Your Rights Under the GDPR

As a data subject, you have the following rights regarding your personal data:

• Right of access (Article 15): Request a copy of the personal data we hold about you.
• Right to rectification (Article 16): Request correction of inaccurate or incomplete data.
• Right to erasure (Article 17): Request deletion of your data when it is no longer necessary or when you withdraw consent.
• Right to restriction (Article 18): Request that we limit processing of your data in certain circumstances.
• Right to data portability (Article 20): Receive your data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object (Article 21): Object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Withdraw consent at any time for processing that relies on consent, without affecting prior lawful processing.

To exercise any of these rights, contact us at assist@radiantdetoxifya.world. We will respond within 30 days as required by the GDPR. We may request identity verification before processing your request.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

11. Children's Data

Our website and programs are intended for adults in professional contexts. We do not knowingly collect personal data from individuals under 16 years of age. If we become aware that data from a minor has been collected, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. The date at the top of this page indicates when the policy was last revised. Material changes will be communicated through a notice on our website. We encourage you to review this page periodically.

13. Contact Information

For privacy-related inquiries, data subject requests, or questions about this policy:

Radiantdetoxifya
Utrechtsestraat 118, 1017 VT Amsterdam, Netherlands
Email: assist@radiantdetoxifya.world
Phone: +31 20 428 51 83