Privacy Policy

Last updated: 9 July 2026

This Privacy Policy explains how PESADESIGN ("we", "us", "our") collects and uses your personal data when you use the PESADESIGN Training Academy platform at pesadesigntrainingacademy.com (the "Platform").

1. Who is responsible for your data

PESADESIGN is a sole proprietorship (eenmanszaak) established in the Netherlands and is the data controller for the purposes of the EU General Data Protection Regulation (GDPR).

Business name: PESADESIGN — PESADESIGN
KVK (Chamber of Commerce) number: 86727257
VAT / BTW number: NL004299834B08
Location: Huissen, Netherlands
Contact: academy@pesadesign.com

2. What data we collect

Account data: your name and email address, and an encrypted (hashed) password. We never see or store your password in readable form.
Payment data: processed by our payment provider (Stripe). We do not store your full card details on our systems; we retain only a record that a payment was made (amount, date, plan, and a transaction reference).
Purchase consent records: when you buy a course, we log that you accepted our refund policy and terms (timestamp, policy version, and course).
Course progress data: which lessons you have started or completed, and related learning activity.
User content: comments you post on lessons.
Technical data: IP address, browser and device information, and cookies (see section 7).
Communications: messages you send us for support.

3. Why we use your data and our legal basis

To create and manage your account and give you access to purchased courses — *performance of a contract*.
To process payments and issue invoices — *performance of a contract* and *legal obligation* (tax/accounting).
To record your checkout consent to immediate digital delivery — *performance of a contract* and *legal obligation*.
To operate, secure and improve the Platform — *legitimate interests*.
To send you essential service emails (password reset, purchase confirmation) — *performance of a contract*.
To send optional marketing emails, only where you have opted in — *consent* (you can withdraw at any time).
To comply with tax, accounting and other legal duties — *legal obligation*.

4. Who we share it with (processors)

We use trusted third parties who process data on our behalf, each under their own security and data-protection safeguards:

Supabase — database, authentication, account data, and video storage hosting.
Stripe — payment processing.
Cloudflare — application hosting, content delivery and security.
cPanel SMTP (via Supabase Auth) — transactional email delivery.

We do not sell your personal data.

5. International transfers

Some providers may process data outside the European Economic Area. Where they do, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision.

6. How long we keep it

Account and progress data: for as long as your account is active, and a reasonable period afterwards.
Invoices, payment records, and purchase consent logs: retained for the period required by Dutch tax and consumer law (currently seven years).
Comments: until you or we remove them.

When data is no longer needed, we delete or anonymise it.

7. Cookies

We use cookies and similar technologies that are strictly necessary to run the Platform (for example, to keep you logged in). If we use any non-essential cookies (such as analytics), we will ask for your consent first via a cookie banner.

8. Your rights

Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your data, and to data portability. You can exercise these by emailing academy@pesadesign.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

9. Changes to this policy

We may update this policy from time to time. Material changes will be notified on the Platform or by email, and the "Last updated" date above will change.

10. Contact

Questions about your data? Email us at academy@pesadesign.com.