Your data, our obligations.

BeCertainty B.V. is the data controller responsible for your personal data. We are registered in the Netherlands and operate in accordance with the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (UAVG).

BeCertainty B.V.
Amsterdam, the Netherlands
Contact: privacy@becertainty.com

We collect personal data only to the extent necessary to provide our services and comply with our legal obligations.

• Email address — collected when you subscribe to our newsletter or download a resource. Used to deliver the requested content and, with your consent, to send strategic communications.
• Name and email address — collected at the point of purchase. Used to process your order, deliver your deliverable, and manage your account.
• Intake form responses — collected after purchase to personalize your deliverable. This may include information about your organization, your strategic challenge, and your stakeholder context.
• Payment data — processed by Stripe. We do not store your payment card details. Stripe's privacy policy applies to payment processing.
• Usage data — anonymized analytics data collected via cookies. See our Cookie Policy for details.

• Contract performance — processing your order, delivering your deliverable, managing your subscription.
• Legitimate interests — improving our services, fraud prevention, security.
• Consent — sending marketing communications. You may withdraw consent at any time.
• Legal obligation — retaining financial records as required by Dutch law.

We retain personal data for as long as necessary for the purpose for which it was collected, subject to legal obligations.

• Customer records: 7 years from the date of the last transaction (Dutch fiscal obligation)
• Newsletter subscribers: Until you unsubscribe, plus 30 days
• Intake form data: 2 years from the date of delivery

We share your data with third-party processors only to the extent necessary to deliver our services.

• Stripe — payment processing (US, EU-US Data Privacy Framework)
• Resend — transactional email delivery
• Anthropic — AI processing for deliverable generation. Intake responses are transmitted to Anthropic's API. Anthropic's data processing terms apply.
• Vercel — website hosting and serverless function execution
• Formspree — lead capture form processing

We do not sell your personal data to third parties.

Under GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your personal data, subject to legal retention obligations
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — withdraw consent for marketing communications at any time

To exercise any of these rights, contact us at privacy@becertainty.com. We will respond within 30 days.

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

We may update this Privacy Policy from time to time. Material changes will be communicated by email to active subscribers and customers. The current version is always available at this URL.