Legal Protocols

1. Identity of the Data Controller

We believe in radical transparency. The entity responsible for your personal data ("The Controller") is:

2. The Data We Collect

We do not collect data arbitrarily. We only process data necessary to facilitate your growth and our transaction. This includes:

• Identity Data: First name, last name.
• Contact Data: Email address and billing address.
• Financial Data: Processed securely by Stripe. We do not store credit card numbers.
• Technical Data: IP address and device type for security.

3. How We Use Your Data (Lawful Basis)

Under the GDPR (Article 6), we rely on the following lawful bases:

4. Disclosure to Third Parties

We are a fortress, not a sieve. We do not sell your data. We only share data with trusted "Data Processors": Stripe (Payments), Netlify (Hosting), and Google Workspace (Email).

5. Data Retention

We retain personal data only as long as necessary. By law, we must keep basic customer information for 7 years for tax purposes.

6. Your Rights (GDPR)

Under Dutch and EU law, you have the right to:

• Request access to your data.
• Request deletion of your data (Right to be Forgotten).
• Object to processing.

To exercise these rights, contact us at r.beyondthedream@gmail.com.

7. Data Security

We have put in place appropriate security measures (SSL, 2FA) to prevent your personal data from being accidentally lost or accessed in an unauthorized way.