Privacy policy

Below you can read what we do with your email address, why we do it, who helps us do it, how long we keep it, and how to make us stop. We have tried to write it in plain language rather than legal shorthand.

We are the data controller for this data. That means we decide what is collected and why, and we are the ones you can hold to account.

What we collect when you sign up for our emails

We collect your email address and, if you give it, your first name. Nothing else is required.

We use them to send you what you signed up for: practice tips, updates about what we are building, and information about our programmes. Your first name is used to address you by name, and for nothing else.

Our email provider also records whether you opened an email and which links you clicked. We look at that to see which emails are actually useful and to stop sending the ones that are not. We do not use it to build a profile of you, and we do not pass it on.

Legal basis: your consent.

When you write to us

If you use the contact form or reply to one of our emails, we keep your message and your contact details so that we can answer you and pick the conversation back up later.

Legal basis: our legitimate interest in answering the people who write to us.

Cookies and what loads on this site

This website sets no tracking cookies unless you agree to them.

• Only after you say yes: one marketing cookie from MailerLite, which connects your visit to our emails so we can see which pages actually help. Say no and it is never set.
• Always, because the pages need it: our pages load fonts from Google Fonts and icons from jsDelivr. Those are external services, and loading them means your IP address reaches those providers. No cookie is set for it and nothing comes back to us.

You can change your mind at any time by clearing this site's data in your browser. That removes the choice you made and brings the banner back.

Who processes it

We do not sell your data and we do not trade it. Two providers handle it on our behalf, under a processing agreement:

• MailerLite, which stores our mailing list and sends and measures our emails. For customers in the European Economic Area the service is provided by MailerLite Limited in Ireland, and the data is stored on servers in the European Union.
• Netlify, which hosts this website and keeps standard server logs, including IP addresses, for security and troubleshooting.

Netlify is based in the United States, so those server logs are processed outside the European Economic Area. That transfer relies on the safeguards in Netlify's data processing agreement, which uses the European Commission's standard contractual clauses.

How long we keep it

• Your email address and name: until you unsubscribe, and then briefly afterwards so that we do not accidentally add you back.
• Opens and clicks: for as long as you are subscribed. They go when you do.
• Messages you send us: up to two years.

Your rights

Under the GDPR you can ask us to:

• show you what we hold about you
• correct anything that is wrong
• delete it
• limit what we do with it
• hand it over in a portable form
• stop processing it, where we rely on legitimate interest

If you are not happy with how we handled it, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens. We would rather you came to us first, but that right is yours either way.

Security

We keep the amount of data we hold small on purpose, and we use providers who encrypt data in transit and at rest. No system is perfect. If something goes wrong that puts your data at risk, we will tell you and the regulator, as the law requires.

Changes to this policy

If we change something that matters, we update the date at the top, and where the change is significant we say so in an email.