Privacy Policy

Contact details

Business: Reclaim Heal Thrive, operated by Caaren Abbott

Location: Netherlands, European Union

Registration: Self-employed / Sole Proprietor · KVK [insert once registered]

What information we collect and why

We collect the following to deliver and improve our programs and services:

• Name and email address
• Payment details — processed by Stripe; we do not store card information
• Messages and notes shared during coaching or program participation
• Usage data — how you interact with our website

We may also collect the following to send updates and newsletters (only with your consent):

• Name and email address
• Marketing preferences

If you voluntarily share health-related information about yourself or your child, we treat this as sensitive data. It is handled with care and never shared without your explicit consent.

Lawful bases and your rights

We collect and use your data under the following lawful bases (EU GDPR):

• Contract — to deliver programs you've purchased
• Consent — for newsletters, cookies, and sensitive data (you can withdraw anytime)
• Legal obligation — for tax and financial records under Dutch law
• Legitimate interests — for basic analytics and fraud prevention

You have the right to:

• Access — request a copy of your personal data
• Rectification — ask us to correct inaccurate information
• Erasure — ask us to delete your data
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a transferable format
• Object — object to processing at any time
• Withdraw consent — at any time, without penalty

To make a request, contact us at [email protected]. We will respond within 30 days.

How long we keep information

We keep your data only as long as necessary for the purpose it was collected, or as required by law.

• Purchase and financial records — 7 years (Dutch tax law)
• Email marketing contacts — until you unsubscribe, then deleted within 30 days
• Program participation data — duration of program + 2 years
• Support messages — 2 years after last contact

Even if we delete your data, it may persist in backups for legal or regulatory purposes for a limited time.

Who we share information with

We only share data with trusted service providers who help us operate our business. All are bound to protect your data and comply with GDPR.

• Stripe — payment processing
• Email platform (e.g. Flodesk / Kajabi) — newsletters and course delivery
• Website host and analytics provider — site infrastructure and anonymous usage data

We do not sell your data. Some providers may process data outside the EEA. Where this occurs, Standard Contractual Clauses (SCCs) are in place.

Cookies

We use cookies to keep the site running and to understand how it's used. When you first visit, you can Accept All, Reject All, or Manage Preferences.

• Strictly necessary — always on; required for the site to function
• Analytics — help us understand site usage (requires consent)
• Marketing — track campaign performance (requires consent)

You can update your preferences anytime via the link in our footer. See our Cookie Policy for full details.

How to complain

If you have concerns about how we use your data, please contact us first at [email protected].

If you remain unhappy, you can complain to the Dutch supervisory authority:

• Autoriteit Persoonsgegevens (AP)
• autoriteitpersoonsgegevens.nl

You may unsubscribe from our newsletter at any time using the unsubscribe link in the footer of any of our emails.