PRIVACY POLICY

Privacy Policy — The Confidence Concept

The Confidence Concept

Wibautstraat 45, 1091 GH Amsterdam, Nederland

KVK: 96707038

E-mail: info@theconfidenceconcept.com

Last updated: May 2026

English Version

1. Who We Are

The Confidence Concept is a boutique Pilates studio located at Wibautstraat 45, 1091 GH Amsterdam, the Netherlands. We are registered with the Dutch Chamber of Commerce (Kamer van Koophandel) under number 96707038.

We are the data controller (verwerkingsverantwoordelijke) for the personal data we collect and process. For any questions about this policy or how we handle your data, please contact us at info@theconfidenceconcept.com.

2. What Personal Data We Collect

We collect and process the following categories of personal data:

  • Contact information: name, email address, telephone number

  • Booking and membership information: class bookings, attendance records, membership details, class credits and pass validity, managed via Momence

  • Payment information: billing details and transaction records processed through our payment provider. We do not store full card details on our own systems.

  • Newsletter and marketing data: email address and communication preferences when you subscribe to our newsletter or register your interest for events or products such as The Confidence Collective

  • Website usage data: IP address, browser type, pages visited and time spent on pages, collected via Google Analytics

  • Health-related information: any health or injury information you voluntarily provide so we can adapt classes to your needs

3. Why We Process Your Data and Legal Basis

We process your personal data for the following purposes and on the following legal grounds under the General Data Protection Regulation (GDPR / AVG):

  • Contract performance (Art. 6(1)(b) GDPR): processing your class bookings, managing your account and membership in Momence, and processing payments.

  • Legitimate interest (Art. 6(1)(f) GDPR): improving our website and services, analysing usage via Google Analytics, maintaining security and managing business operations.

  • Consent (Art. 6(1)(a) GDPR): sending newsletters, marketing emails and event updates. You may withdraw your consent at any time by clicking 'unsubscribe' in any email or by contacting us directly.

  • Legal obligation (Art. 6(1)(c) GDPR): retaining financial records as required by Dutch tax law (Belastingdienst) for a period of 7 years.

  • Explicit consent for health data (Art. 9(2)(a) GDPR): health or injury information is only processed with your explicit consent and solely to adapt your classes to your needs.

4. Who We Share Your Data With

We do not sell your personal data. We share data only with the following trusted third-party processors where necessary to provide our services:

  • Momence: our booking and membership management platform.

  • Google Analytics: website analytics with IP anonymisation enabled. We have a Data Processing Agreement (DPA) in place with Google.

  • Payment processor: your payment details are processed securely by our payment provider. We do not store full card details.

  • Recovery Factory: if you book a recovery session as part of the Confident Summer Challenge or similar programmes, your name and booking details are shared with Recovery Factory solely to facilitate your appointment.

  • Email marketing platform: your email address is stored on our email service provider's platform to send newsletters and communications.

  • Squarespace: our website host. Squarespace may process technical data as part of hosting our website.

5. How Long We Keep Your Data

  • Booking and membership records: retained for 2 years after your last interaction with us.

  • Financial and payment records: retained for 7 years as required by Dutch tax law.

  • Newsletter subscribers: until you unsubscribe or withdraw consent.

  • Website analytics data: retained for 14 months in Google Analytics.

  • Health information: deleted when no longer necessary or upon your request.

6. Cookies

Our website uses cookies. We use the following types:

  • Necessary cookies: required for the website to function. These cannot be disabled.

  • Analytical cookies (Google Analytics): used to understand how visitors use our website. These are only placed with your consent.

You can manage your cookie preferences via our cookie banner or by adjusting your browser settings.

7. Your Rights Under GDPR

As a data subject in the European Union, you have the following rights:

  • Right of access: request a copy of the personal data we hold about you.

  • Right to rectification: request that we correct inaccurate or incomplete data.

  • Right to erasure: request that we delete your personal data, subject to legal retention obligations.

  • Right to restriction of processing: request that we limit how we use your data in certain circumstances.

  • Right to data portability: request your data in a structured, machine-readable format.

  • Right to object: object to processing based on legitimate interest or for direct marketing purposes.

  • Right to withdraw consent: withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at info@theconfidenceconcept.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl or by calling +31 70 888 8500.

8. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure. Our website uses SSL encryption via Squarespace. Payments are processed via a PCI-DSS compliant payment provider.

9. International Data Transfers

Some of our third-party service providers (including Google Analytics and Momence) may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Changes to This Policy

We may update this privacy policy from time to time. The most recent version will always be published on our website. We will notify you of significant changes by email where we hold your contact details.

11. Contact

For any questions, requests or complaints:

Nederlandse Versie

1. Wie zijn wij

The Confidence Concept is een boutique Pilates studio gevestigd aan de Wibautstraat 45, 1091 GH Amsterdam. Wij zijn ingeschreven bij de Kamer van Koophandel onder nummer 96707038.

Wij zijn de verwerkingsverantwoordelijke voor de persoonsgegevens die wij verzamelen en verwerken. Voor vragen kunt u contact opnemen via info@theconfidenceconcept.com.

2. Welke persoonsgegevens wij verwerken

  • Contactgegevens: naam, e-mailadres, telefoonnummer

  • Boekings- en lidmaatschapsinformatie: lessen, aanwezigheid, lidmaatschap, credits via Momence

  • Betalingsgegevens: verwerkt via onze betaalprovider. Wij slaan geen volledige kaartgegevens op.

  • Nieuwsbrief en marketinggegevens: e-mailadres en communicatievoorkeuren

  • Websitegebruiksgegevens: IP-adres, browsertype, bezochte pagina's via Google Analytics

  • Gezondheidsinformatie: informatie die u vrijwillig verstrekt om lessen aan te passen aan uw behoeften

3. Grondslag voor verwerking

  • Uitvoering van een overeenkomst (art. 6 lid 1 sub b AVG): verwerking van boekingen, lidmaatschap en betalingen.

  • Gerechtvaardigd belang (art. 6 lid 1 sub f AVG): verbetering van onze website en diensten, analyse via Google Analytics.

  • Toestemming (art. 6 lid 1 sub a AVG): verzenden van nieuwsbrieven en marketingberichten. U kunt uw toestemming te allen tijde intrekken.

  • Wettelijke verplichting (art. 6 lid 1 sub c AVG): bewaren van financiële gegevens gedurende 7 jaar conform de Nederlandse belastingwetgeving.

4. Met wie wij gegevens delen

Wij verkopen uw persoonsgegevens niet. Wij delen gegevens uitsluitend met de volgende verwerkers:

  • Momence — boekings- en lidmaatschapsplatform

  • Google Analytics — websiteanalyse met IP-anonimisering

  • Betaalprovider — veilige betalingsverwerking

  • Recovery Factory — bij boeking van een herstelsessie als onderdeel van een challenge

  • E-mailmarketingplatform — voor verzenden van nieuwsbrieven

  • Squarespace — websitehosting

5. Bewaartermijnen

  • Boekings- en lidmaatschapsgegevens: 2 jaar na laatste interactie

  • Financiële gegevens: 7 jaar conform belastingwetgeving

  • Nieuwsbrief abonnees: tot uitschrijving of intrekking toestemming

  • Websiteanalysegegevens: 14 maanden in Google Analytics

  • Gezondheidsinformatie: verwijderd zodra niet meer noodzakelijk of op uw verzoek

6. Uw rechten

Op grond van de AVG heeft u de volgende rechten:

  • Recht op inzage

  • Recht op rectificatie

  • Recht op vergetelheid (wissen van gegevens)

  • Recht op beperking van de verwerking

  • Recht op gegevensoverdraagbaarheid

  • Recht van bezwaar

  • Recht om toestemming in te trekken

U kunt uw rechten uitoefenen door een e-mail te sturen naar info@theconfidenceconcept.com. Wij reageren binnen 30 dagen.

U heeft ook het recht om een klacht in te dienen bij de Autoriteit Persoonsgegevens via autoriteitpersoonsgegevens.nl of via +31 70 888 8500.

7. Contact