Newsletter and waitlist

When you sign up for my newsletter or join a waitlist, I collect your name and email address. This information is used solely to send you the content you requested and relevant updates about my work, programs, and publications.

Purchases

When you purchase my book, a program, or a service, I collect the information necessary to complete and fulfill your order. This includes your name, email address, and billing details. Payment is processed securely by Stripe. I do not store your full payment card details; these are handled entirely by Stripe under their own privacy and security standards. You can review Stripe’s privacy policy at stripe.com/privacy.

Applications and intake forms

When you apply for an advisory engagement, the Protypa Council™ Deliberation, or another service that requires an intake process, I collect the information you provide in the form. This may include your name, organization, role, and context relevant to the engagement. This information is used solely to assess fit, prepare for the engagement, and maintain a record of the work.

Website analytics

I use Google Analytics to understand how visitors use my website. Google Analytics collects information such as pages visited, time spent on pages, device type, browser, and approximate geographic location derived from your IP address. This data is collected using cookies and is processed by Google. You can review Google’s privacy policy at policies.google.com/privacy.

You can opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.

I do not share your personal information with any other third parties without your explicit consent, unless required to do so by law.

Some of the third-party processors I use, including Stripe and Google, may process your data outside the European Economic Area (EEA). Where this occurs, I rely on these processors to have implemented appropriate safeguards such as Standard Contractual Clauses approved by the European Commission to ensure your data remains protected to the standard required by the GDPR.

• Newsletter subscribers: until you unsubscribe or request deletion.

• Purchase and contractual records: for seven years in accordance with Dutch financial record-keeping requirements.

• Intake and engagement records: for the duration of the engagement and up to two years after its conclusion, unless a longer period is required.

• Website analytics data: in accordance with Google Analytics retention settings, which I have set to [12 or 26 months; confirm and update].

When personal information is no longer needed and no legal obligation requires its retention, I delete it securely.

My website uses cookies. A cookie is a small file placed on your device when you visit a website. I use the following types of cookies:

– Functional cookies are necessary for the website to operate correctly.

–  Analytical cookies placed by Google Analytics to understand how visitors use the

website.

When you first visit my website, you will be asked for your consent to analytical cookies. You may withdraw or adjust your cookie preferences at any time via the cookie settings on the website. Refusing analytical cookies will not affect your ability to use the website.

Under the GDPR, you have the following rights in relation to your personal information:

• Right of access: You may request a copy of the personal information I hold about you.

• Right to rectification: You may request that inaccurate or incomplete information be corrected.

• Right to erasure: You may request that I delete your personal information, subject to legal retention obligations.

• Right to restriction: You may request that I restrict the processing of your information in certain circumstances. Right to data portability: You may request that I provide your information in a structured, machine-readable format. Right to object: You may object to processing based on legitimate interest or for direct marketing purposes.

• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact me at lilian@protypa.com. I will respond within one month of receiving your request.

I take reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or misuse. These include secure connections (HTTPS), access controls, and use of reputable third-party processors with their own security standards.

No method of transmission or storage is completely secure. If you have reason to believe your personal information has been compromised, please contact me immediately at lilian@protypa.com.

My website, services, and publications are intended for business professionals and are not directed at children under the age of 16. I do not knowingly collect personal information from children. If you believe a child has provided me with personal information, please contact me, and I will delete it promptly.

I may update this privacy statement from time to time to reflect changes in my services, tools, or legal obligations. The ‘last updated’ date at the top of this page will reflect any revisions. Where changes are material, I will notify you by email or by a prominent notice on my website.