Privacy policy
I respect your privacy. This policy explains which personal data I collect through this website, why, and what your rights are under the GDPR (in Dutch: AVG).
1. Who is responsible for your data
Lynn Noppen Concepts, trading as She Talks Business, is the controller of your personal data.
Meerval 8, 1741 XP Schagen, the Netherlands
Email: info@shetalksbusiness.co
Chamber of Commerce (KvK) number: 71694889
2. Which data I collect and why
Contact form
When you send a message through the contact form, I receive your name, email address, organisation (if you fill it in), the topics you tick, and your message. I use this to answer you and, if relevant, to prepare a proposal. I also count which topics people ask about, to improve my services. The legal basis is my legitimate interest in answering your question, or taking steps at your request before a possible agreement.
Your message is delivered to my inbox by Web3Forms and saved in a private Google Sheet in my Google Workspace account.
Newsletter (The Resource Room)
If you sign up for my newsletter, you do so on a sign-up page hosted by Flodesk. I receive your name and email address and use them to send you the newsletter and free templates. The legal basis is your consent. You can unsubscribe at any time with the link in every email.
Purchases and memberships
You buy my products through third-party platforms such as Stan (products) and Skool (Sought After Studio). These platforms process your payment and share your name, email address and order details with me, so I can deliver your purchase and provide support. The legal basis is the performance of our agreement. I never receive or store your full payment card details.
Clients
For custom design, implementation, masterclasses and speaking, I keep your contact details, our correspondence, proposals and invoices. The legal basis is the performance of our agreement and my legal obligation to keep financial records.
Website visits
The hosting provider of this website automatically records technical data, such as your IP address, browser type and the pages you visit. This data is used only to keep the website secure and working, and is not used to identify you.
3. Cookies
This website only uses functional storage that it needs to work. For example, it remembers your choice in the cookie banner, saved in your own browser. I don't currently use analytics, advertising or tracking cookies.
If I add analytics in the future, they will only load after you click "Accept all" in the cookie banner. You can change your choice at any time via "Cookie settings" at the bottom of every page.
4. Who I share your data with
I never sell or rent your personal data. I only share it with service providers that help me run my business, and only as far as needed:
- Web3Forms: delivers contact form messages to my inbox
- Google (Google Workspace): email and storage of contact form messages
- Flodesk: newsletter
- Stan and Skool: sales, delivery and the membership community
- Netlify: website hosting
- My accountant: invoices and financial records
Some of these providers are based in or store data in the United States. Where that is the case, the transfer is protected by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses. I may also share data when the law requires it.
5. How long I keep your data
- Contact form messages and email: up to 2 years after our last contact, unless you become a client
- Client and order records, including invoices: 7 years, as Dutch tax law requires
- Newsletter: until you unsubscribe
6. Your rights
You have the right to access, correct or delete your personal data, to restrict or object to its use, and to receive your data in a portable format. Where I rely on your consent, you can withdraw it at any time. To use any of these rights, email info@shetalksbusiness.co. I will respond within one month.
If you're not happy with how I handle your data, please let me know. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
7. Children
This website is not meant for children under 16. I don't knowingly collect their data. If I find out that a child under 16 has sent me personal data, I will delete it.
8. Security
I take appropriate technical and organisational measures to protect your data. The website uses a secure (https) connection, and access to my accounts is protected. No system is completely secure, but I do my best to keep your data safe.
9. Changes to this policy
I may update this privacy policy from time to time. The date at the top shows the latest version.
