Privacy Policy
Last Updated: April 2024
This Privacy Policy explains how Jill Ramsey ("we," "us," or "our") collects, uses, stores, and protects your personal information when you visit our website or use our services. We are committed to ensuring the privacy and security of your data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
1. Data Controller Information
The data controller responsible for your personal information is:
Jill Ramsey
Binnenvaart 7
1034 SG Amsterdam
Netherlands
Email: info@jillramsey.nl
Phone: +31 20 456 7890
2. Information We Collect
We collect the following types of personal information:
- Contact Information: Name, email address, phone number, and mailing address
- Health and Wellness Information: Information you voluntarily provide about your wellness goals, lifestyle habits, and health history
- Communication Data: Records of correspondence and consultation notes
- Technical Data: IP address, browser type, device information, and website usage patterns collected through cookies
- Payment Information: Billing details processed through secure third-party payment providers
3. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you explicitly agree to receive our services or marketing communications
- Contract: Processing necessary to fulfill our contractual obligations to you
- Legal Obligation: Compliance with applicable laws and regulations
- Legitimate Interests: Improving our services, ensuring website security, and maintaining business operations
4. How We Use Your Information
Your personal information is used for the following purposes:
- Providing personalized wellness consultations and program recommendations
- Communicating with you regarding your inquiries and service delivery
- Sending relevant updates, educational content, and service information (with your consent)
- Processing payments and maintaining financial records
- Improving our website functionality and user experience
- Complying with legal and regulatory requirements
- Ensuring the security and integrity of our services
5. Data Retention Periods
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:
- Contact Information: Retained for 7 years after your last interaction with us
- Consultation Records: Retained for 10 years in accordance with professional practice standards
- Financial Records: Retained for 7 years as required by tax regulations
- Marketing Consent: Retained until you withdraw consent or request deletion
- Website Analytics: Retained for 26 months maximum
6. Your Data Protection Rights
Under GDPR, you have the following rights regarding your personal data:
- Right to Access: Request copies of your personal information
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data ("Right to be Forgotten")
- Right to Restrict Processing: Limit how we use your information
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or direct marketing
- Right to Withdraw Consent: Withdraw previously given consent at any time
To exercise any of these rights, please contact us using the information provided in the Data Controller section.
7. Data Security Measures
We implement appropriate technical and organizational measures to protect your personal data:
- SSL encryption for all data transmission
- Secure server infrastructure with regular security updates
- Access controls limiting data access to authorized personnel only
- Regular security assessments and vulnerability testing
- Staff training on data protection and privacy best practices
8. Third-Party Sharing
We do not sell your personal data. We may share information with:
- Service Providers: Payment processors, email service providers, and IT support services
- Professional Advisors: Legal and accounting professionals when necessary
- Regulatory Authorities: When required by law or to protect our legal rights
All third-party processors are contractually bound to maintain data protection standards equivalent to our own.
9. International Data Transfers
Your data is primarily processed within the European Economic Area (EEA). If any data transfer outside the EEA is necessary, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
10. Cookies and Tracking
Our website uses cookies and similar technologies to enhance user experience and analyze website traffic. You can manage cookie preferences through your browser settings. For detailed information, please refer to our Cookie Policy.
11. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us immediately for deletion.
12. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated via email or website notice. The "Last Updated" date at the top of this page indicates when the policy was last revised.
13. Contact and Complaints
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at info@jillramsey.nl.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your data protection rights have been violated.
Autoriteit Persoonsgegevens
Bezuidenhoutseweg 57
2594 AC Den Haag
Netherlands