Privacy Policy

The controller is BProQA, 193 Familie Van der Leerstraat, 3075 PV Rotterdam, Netherlands. KVK 93676034. For any privacy question or request, email office@bproqa.nl.

• Booking data: name, email address, company (optional), selected service, chosen date and time, and any notes you provide.
• Contact form data: name, email address, subject and message.
• Workshop pre-registration data: name, email address and optional context about your team.
• Technical and usage data: pages viewed, referring page, approximate location, device and browser type — only when you accept analytics cookies.

We do not knowingly collect data from children and we do not process special categories of personal data.

• To deliver a booked session — creating the calendar event, sending the Google Meet link and confirmation emails. Legal basis: performance of a contract.
• To answer your enquiry submitted through the contact form. Legal basis: legitimate interest in responding to you.
• To notify you about a workshop you pre-registered for. Legal basis: consent.
• To measure and improve the website using Google Analytics. Legal basis: consent (via the cookie banner).
• To meet legal and tax obligations for invoiced work. Legal basis: legal obligation.

We use a small number of service providers who process data on our behalf:

• Supabase (EU region) — database hosting for bookings, registrations and contact submissions.
• Google (Calendar, Meet, Gmail) — scheduling, video meetings and calendar invitations.
• Resend — transactional email delivery from notify.bproqa.nl.
• Google Analytics — website statistics, only with your consent.
• Lovable — application hosting and CDN.

Some of these providers may process data outside the EEA. Where that happens, transfers rely on the European Commission's Standard Contractual Clauses. We never sell your data.

Booking and workshop records are kept for up to 24 months after the session so we can handle follow-ups. Contact enquiries are kept for up to 12 months. Invoicing records are kept for 7 years as required by Dutch tax law. Analytics data is retained for 14 months.

You have the right to access, rectify, erase, restrict or port your personal data, to object to processing based on legitimate interest, and to withdraw consent at any time. Email office@bproqa.nl and we will respond within one month. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Data is transmitted over TLS and stored in access-controlled systems with row-level security policies. Access is limited to the practice owner.

Details about the cookies we set and how to change your choice are in our Cookie Policy.

We may update this policy as the services change. The date at the top of the page always reflects the current version.