Your data, plainly
Privacy Policy
Last updated: 8 July 2026
Coaching only works when you can speak freely — so I treat your information the way I treat our conversations: with care, and with as little of it collected as possible. This page explains, in plain language, what data I handle, why, and what your rights are under the GDPR (in the Netherlands: AVG).
1. Who is responsible for your data
Karolina Rifert — Curious Coaching
Registered in the Netherlands · KvK 97486000
Contact: karolinarifert@gmail.com
2. What I collect, and why
- Free guide sign-up: your email address, used to send you the guide and, with your consent, occasional emails worth reading. Legal basis: your consent — which you can withdraw at any time by unsubscribing or emailing me.
- Booking a call or session: your name, email and the details you choose to share when scheduling. Legal basis: taking steps toward, and performing, our agreement.
- Coaching itself: brief session notes I keep to serve you well between sessions, and correspondence between us. Legal basis: performing our agreement. Session content is additionally protected by confidentiality under the ICF Code of Ethics.
- Invoicing: name, address and payment details needed for proper invoices. Legal basis: legal obligation — Dutch tax law requires me to keep financial records for 7 years.
That's it. I don't buy data, I don't sell data, and this website doesn't use analytics cookies or tracking.
3. Who helps me process it
Like every modern practice, I use a small number of trusted services that process data on my behalf: website hosting and forms (Netlify), scheduling (Calendly), video calling, email, and an email newsletter service. I choose providers that commit to GDPR-compliant handling; where a provider operates outside the EU, transfers rest on recognised safeguards such as the EU–US Data Privacy Framework or standard contractual clauses. I never share the content of coaching sessions with anyone.
4. How long I keep things
- Newsletter emails: until you unsubscribe.
- Client records and session notes: for the duration of our work together and up to 2 years afterwards, in case you return, unless you ask me to delete them sooner.
- Invoices and financial records: 7 years (Dutch legal requirement).
5. Your rights
You can ask me at any time to access, correct, delete, or hand over the data I hold about you, to restrict or object to its use, or to withdraw consent you gave earlier. Just email me — I'll respond within a month. If you believe I've handled your data improperly and we can't resolve it together, you have the right to complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens.
6. Changes
If my tools or practices change, this page will be updated and the date above adjusted. The current version always applies.