Privacy Policy

1. Introduction & Controller Identity

This Privacy Policy explains how BdB B.V. (“BdB”, “we”, “us”) collects, uses, and protects your personal data when you visit this website and when you submit a registration or support request for our online professional education programs. BdB B.V. operates as an independent provider of online workplace education for learners across Canada. Our registered address is Framboas 18, 9299 HH Sweagerbosk, Netherlands, and our primary contact email is [email protected].

For the purposes of the General Data Protection Regulation (EU) 2016/679 (“GDPR”), BdB B.V. is the data controller for personal data collected through this website. If you have questions about this policy, or about how your data is handled, you can contact us at the email address above. We do not appoint a Data Protection Officer (DPO) as our processing activities do not require one under GDPR; however, we treat privacy questions as a priority and respond within a reasonable timeframe.

Effective date of this Privacy Policy: March 14, 2026.

2. Personal Data We Collect

We collect personal data that you provide directly, as well as limited technical information that is automatically collected when you use the site. The specific data we collect depends on how you interact with the website.

• Identity and contact information: name, email address, and phone number when you submit a form.
• Form content: selected program, optional preferred workshop topic, and any message or comments you enter (for example, learning goals, availability, or support questions).
• Technical data: IP address, browser type and version, device type, operating system, approximate location derived from IP (country/region level), language settings, and time zone.
• Usage data: pages viewed, time spent on pages, referral source, and click paths used to navigate the site.
• Cookies and identifiers: essential cookies and, if you consent, analytics and marketing cookies (see Section 4).
• Conversion events: events related to form interactions and page visits, used to measure whether users reach key pages (such as a confirmation page after submitting a form).

We do not intentionally collect special-category data (such as health information, religious beliefs, political opinions, or biometric data). We also do not request financial account details or government-issued identification documents through this website. Please avoid including sensitive or confidential information in free-text fields.

3. Why We Process Personal Data & Legal Basis (GDPR Article 6)

BdB B.V. processes personal data only when there is a lawful basis under GDPR. The purposes and legal bases typically include:

• Handling registration and support requests (contact form): We use your name and contact details to respond to your inquiry and to process education-related registration requests. Legal basis: Article 6(1)(b) (steps prior to entering into a contract) and, where applicable, Article 6(1)(a) (consent).
• Website analytics (only with consent): We use analytics data to understand how the site is used and to improve content clarity, navigation, and performance. Legal basis: Article 6(1)(a) (consent).
• Marketing and remarketing (only with consent): If enabled, marketing cookies help measure advertising performance and build audiences (for example, remarketing or lookalike audiences). Legal basis: Article 6(1)(a) (consent).
• Security and fraud prevention: We use technical logs and signals to protect the website, detect abuse, and prevent malicious activity. Legal basis: Article 6(1)(f) (legitimate interests) in maintaining the security and integrity of our website.
• Legal obligations: We may process certain data when required to comply with applicable laws (for example, handling lawful requests from authorities). Legal basis: Article 6(1)(c) (legal obligation).

Automated decision-making: We do not engage in automated decision-making or profiling that produces legal or similarly significant effects as described in GDPR Article 22.

4. Cookies & Tracking

Cookies are small text files stored on your device. We use cookies and similar technologies to operate the site, remember your preferences, and (if you consent) measure site usage and advertising effectiveness. Details are also provided in our Cookie Policy.

Essential cookies (always active)

Essential cookies are required for the website to function. These cookies do not require consent under EU ePrivacy rules when strictly necessary. Examples include:

• _site_session: supports basic session continuity.
• cookie_consent: stores your cookie preferences choice.

Typical retention: session to 12 months, depending on the cookie.

Analytics cookies (consent required)

With your permission, we may use Google Analytics 4 (“GA4”) to understand site traffic and usage patterns. Where supported, we use settings intended to reduce identifiability (such as IP anonymization and limited retention). Examples of cookies include _ga and _ga_XXXXXXXXXX.

Analytics retention is typically configured for 14 months (for analytics event data), while some cookies may persist for up to 2 years.

Marketing cookies (consent required)

With your permission, marketing cookies may be used to measure advertising performance and to enable remarketing and audience building. This can include cookies associated with Google Ads (for example, _gcl_au) and Meta (for example, _fbp and _fbc). These cookies help attribute conversions, reduce repeated ads, and improve measurement.

In addition to cookies, marketing and analytics may also involve pixel tags and server-side measurement. Where server-side methods are used, identifiers may be hashed prior to transfer (for example, hashing an email address for matching). We do not use these tools without consent where consent is required.

5. Consent (EEA/UK)

Users in the European Economic Area (EEA) and the United Kingdom receive a consent notice under GDPR/UK GDPR. Analytics and marketing cookies are activated only after explicit, informed, freely given consent (GDPR Article 6(1)(a)). Your consent choice is recorded in the cookie_consent cookie (typically stored for 12 months).

You can withdraw consent at any time by using the “Manage cookie preferences” link in the footer or by clearing cookies in your browser settings. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.

6. Sharing With Advertising & Service Partners

We share limited personal data with service providers that help us operate and improve the website, and (if you consent) advertising and measurement partners. We do not sell personal data.

• Google LLC (Google Analytics 4, Google Ads, Google Tag Manager, remarketing). Data may include cookie identifiers, usage data, and conversion events. Reference: https://policies.google.com/privacy.
• Meta Platforms, Inc. (Meta Pixel, custom/lookalike audiences, conversion measurement). Data may include page views, conversion events, audience membership signals, and hashed identifiers. Reference: https://www.facebook.com/privacy/policy/.
• Cloudflare, Inc. (content delivery network and security). Data may include IP-based threat detection and request logs. Reference: https://www.cloudflare.com/privacypolicy/.

These providers process data as processors or joint participants depending on the tool and configuration. Where applicable, we limit data sharing to what is necessary and rely on contractual protections. We do not permit these providers to use site data for their own independent commercial purposes.

7. International Transfers

BdB B.V. is established in the Netherlands. Some of our service providers (such as Google and Meta) may process data in countries outside the EEA/UK, including the United States. When personal data is transferred internationally, we use appropriate safeguards such as:

• EU-U.S. Data Privacy Framework (DPF) where applicable (since July 2023), including the UK extension where relevant;
• Standard Contractual Clauses (EU 2021/914) as a fallback mechanism;
• UK International Data Transfer Agreement (IDTA) where applicable.

We aim to ensure an essentially equivalent level of protection for transferred data, consistent with EU and Dutch data protection requirements.

8. Data Retention

We keep personal data only as long as necessary for the purposes described in this policy. Typical retention periods include:

• Contact and registration submissions: up to 2 years from the last interaction, unless a longer period is required for record-keeping or dispute handling.
• Email correspondence: duration of the relationship, plus 1 year, unless a longer period is needed for legal claims.
• Server security logs: typically up to 90 days, unless extended for security investigations.
• Analytics data: typically 14 months (as configured in analytics tools).
• Marketing cookies: per cookie lifetime (commonly 90 days for certain marketing cookies).
• Cookie consent records: up to 3 years to demonstrate compliance where required.
• Legal and tax records: retained as required by applicable law (often 6–10 years for certain records, depending on the document type and jurisdiction).

If you request deletion, we will delete or anonymize data unless we are required to retain it for legal reasons (for example, to comply with a legal obligation or to establish, exercise, or defend legal claims).

9. Your Rights (GDPR & UK GDPR)

If GDPR applies to your data, you may have the following rights:

• Right of access (Article 15)
• Right to rectification (Article 16)
• Right to erasure (Article 17)
• Right to restriction of processing (Article 18)
• Right to data portability (Article 20)
• Right to object (Article 21)
• Right to withdraw consent at any time (Article 7(3))
• Right to lodge a complaint with a supervisory authority (Article 77)

To exercise your rights, contact us at [email protected]. We typically respond within 30 days. If a request is complex, the response period may be extended by up to 60 additional days, as permitted by GDPR.

In the Netherlands, the supervisory authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). You can learn more or submit a complaint via https://autoriteitpersoonsgegevens.nl. For general EU information about supervisory authorities, see the European Data Protection Board: https://edpb.europa.eu.

10. Children

This website is not directed at individuals under 16. We do not knowingly collect personal data from minors. If you believe a child under 16 has provided personal data to us without verifiable parental consent, please contact [email protected] and we will take steps to delete the information promptly.

11. Do Not Track

This website does not respond to “Do Not Track” (DNT) browser signals. Some third-party providers may offer their own privacy controls and preferences.

12. Data Deletion Requests

You may request deletion of your personal data by emailing [email protected] with the subject line “Data Deletion Request”. To protect your privacy, we may need to verify your identity (for example, by confirming you have access to the email address used in your request). We aim to complete deletion within 30 days of verification, unless legal retention obligations apply.

13. Business Transfers

If BdB B.V. is involved in a merger, acquisition, restructuring, financing, asset sale, or insolvency, personal data may be transferred to a successor or acquiring entity. If such a transfer materially changes how personal data is used, we will provide notice on this website.

14. California (CCPA/CPRA)

If you are a California resident, you may have rights under the California Consumer Privacy Act as amended by the CPRA (collectively, “CCPA”). Over the past 12 months, we may have collected:

• Identifiers: name, email address, IP address, cookie identifiers.
• Internet or other network activity: pages viewed, interactions, approximate device/browser data.
• Inferences: interests or preferences inferred from site usage (used only if marketing/analytics consent is given).

We do not sell personal information as defined by CCPA. We may share personal information for cross-context behavioral advertising when marketing cookies are enabled. California residents may opt out via our cookie preferences panel (accessible through “Manage cookie preferences” in the footer) or by clearing cookies.

You may request to know, delete, or correct certain personal information, and you have the right to opt out of sale/sharing (as defined by CCPA) and the right to non-discrimination. Submit requests by emailing [email protected] with the subject line “California Privacy Request”. We may need to verify your identity. Authorized agents may submit requests with written proof of authorization.

15. Virginia (VCDPA)

If you are a resident of Virginia, you may have rights under the Virginia Consumer Data Protection Act (VCDPA), including rights to access, correct, delete, and obtain a copy of your personal data, and to opt out of targeted advertising. To submit a request, email [email protected] with the subject line “Virginia Privacy Request”.

We do not sell personal data. We also do not engage in profiling that produces legal or similarly significant effects. If you disagree with our decision on a request, you may appeal by emailing us with the subject line “Appeal of Refusal — Privacy Request”. We respond to appeals within 60 days. If the appeal is denied, you may contact the Virginia Attorney General.

16. Nevada

Nevada residents may submit a verified opt-out request by emailing [email protected] with the subject line “Nevada Do Not Sell Request”. We do not currently sell personal information under Nevada Revised Statutes Chapter 603A.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or the tools used on this website. If changes are material, we will provide a notice on the homepage at least 14 days before the updated policy takes effect. The “Last Updated” date at the top of this page shows the most recent revision date.

18. Contact

If you have questions or requests regarding privacy, contact:

• BdB B.V.
• Registered address: Framboas 18, 9299 HH Sweagerbosk, Netherlands
• Email: [email protected]
• Phone: +31 58 203 4307