Privacy Policy
Marjolijn Vlug Coaching
1. Who Is Responsible for Your Data
I, Marjolijn Vlug, operating as a sole practitioner (ZZP) under my own name, am responsible for the processing of your personal data as described in this privacy policy.
Contact: welkom@marjolijnvlug.nl
2. What Personal Data I Collect
I collect your personal data when you use my services or when you provide it to me directly. The personal data I process includes:
First and last name
Email address
Phone number (if provided)
Information and documents you share during coaching sessions or via email/social media messaging
Booking details collected via Calendly
Technical data collected via Google Analytics, such as your IP address, browser type, and browsing behaviour on my website
3. Purpose and Legal Basis for Processing
I process your personal data only for the following purposes and on the following legal grounds:
Delivery of coaching services
To be able to contact you by phone or email, to schedule and confirm sessions, and to fulfil the coaching agreement between us. Legal basis: performance of a contract.
Website analytics
Google Analytics is used to understand how visitors use my website, so I can improve the user experience. This data is anonymised where possible. Legal basis: legitimate interest. You may opt out of analytics tracking via your browser settings or a cookie opt-out tool.
Scheduling
Calendly is used to manage appointment scheduling. When you book a session through Calendly, your name, email address, and appointment details are stored in Calendly's systems. Please also review Calendly's own privacy policy at calendly.com/privacy.
4. How I Protect Your Data
I take the protection of your personal data seriously and apply appropriate personal, technical and organisational measures to prevent unauthorised access, loss, or misuse. If you believe your data is not adequately secured or you suspect misuse, please contact me at welkom@marjolijnvlug.nl
5. Not Sharing Your Data with Third Parties
I will keep our work together completely confidential unless you have given me specific permission and it makes good sense to share with someone else. The only exceptions to this are
following my professional ethics, if a client tells me they may intend to hurt themselves or someone else, I'll take action for everyone's wellbeing,
and b) for my ongoing professional development, I may share a case anonymously with my coach supervisor who adheres to the same confidentiality.
I will not share or sell your personal data with/to third parties, except in the following circumstances:
Service providers: I use Calendly for scheduling, Zoom for video calls, and Google Analytics for website analytics. These tools may process your data on my behalf. My Zoom account is stored on European servers.
Legal obligation: I may disclose your data if required to do so by law or a competent authority.
Outside of the above, your data will not be shared with any third party without your explicit consent.
6. How Long I Retain Your Data
I do not retain your personal data for longer than necessary to fulfil the purposes for which it was collected. As a general rule, I retain client documents for a maximum of twelve months after our coaching relationship ends, unless a longer retention period is required by law (for example, for financial or tax records, which are kept for seven years in accordance with Dutch law). I may keep your name, phone number and email address in my (phone) address book for longer, to be able to stay in touch for pragmatic reasons and to maintain our professional relationship.
7. Cookies
My website uses functional and analytical cookies. A cookie is a small text file stored in your browser when you first visit a website.
Functional cookies: These ensure the website works correctly and remembers your preferences.
Analytical cookies (Google Analytics): These track anonymised data about how visitors use my website. This helps me improve my content and services.
On your first visit, you will be asked for consent to place non-functional cookies. You can withdraw your consent or delete existing cookies at any time via your browser settings. For more information, visit veiliginternetten.nl (in Dutch).
8. Your Rights
Under the General Data Protection Regulation (GDPR, or AVG in Dutch), you have the following rights in relation to your personal data:
Right of access – you may request to see the personal data I hold about you.
Right of rectification – you may ask me to correct inaccurate or incomplete data.
Right to erasure – you may ask me to delete your personal data ('right to be forgotten').
Right to restrict processing – you may ask me to limit the way I use your data.
Right to data portability – you may request that I provide your data in a portable format.
Right to object – you may object to the processing of your personal data in certain circumstances.
To exercise any of these rights, please send a written request to welkom@marjolijnvlug.nl
To verify your identity, I may ask you to provide a copy of your ID (you may redact your photo, passport number, and BSN before sending).
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
9. Changes to This Privacy Policy
I reserve the right to update this privacy policy at any time. Changes will be published on my website. This policy was last updated in April 2026.