Cecivanoost — Legal Policies

Last updated: 01.10.2026

1. WHO WE ARE

Cecivanoost ("we", "us", "our") is operated by Cecilia Carmona van Oostenbruggen, a sole trader based in the Netherlands.

Contact details:
Email: [email protected]
Location: Utrecht, Netherlands

For the purposes of applicable data protection law, we are the data controller for the personal information described in this Privacy Policy. This means we determine how and why your personal data is processed.

Conscious Creators

Cecivanoost operates independently as its own business. Where you engage with products, coaching, training or communities operated by Conscious Creators, which is a separate community or training programme we may be affiliated with, the privacy policy and terms of that organisation apply to that specific product or service. We will make clear at the point of purchase which terms and privacy policy apply.

2. PRIVACY POLICY

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Dutch GDPR Implementation Act and other applicable data protection legislation.

2.1 What personal data we collect

Depending on how you interact with us, we may collect:

DataWhen we collect itFull nameMasterclass registration, forms, checkoutEmail addressMasterclass registration, forms, checkoutPhone / WhatsApp numberWhere you choose to provide itPayment informationCheckout, processed by StripeTechnical dataAutomatically when you visit our website, including IP address, browser type and device informationMarketing preferencesWhen you select or change your marketing consent preferencesInformation you voluntarily provideDuring calls, consultations, forms, emails or other communications with us

We only collect personal data that is reasonably necessary for the purposes described in this Privacy Policy or explained to you when your data is collected.

We do not store your full payment card details. Payments are processed by our payment provider, Stripe.

2.2 Why we collect your data and our lawful bases

Under the GDPR, we must have a lawful basis for processing personal data. Depending on the circumstances, we rely on the following lawful bases:

PurposeLawful basisProviding a masterclass, guide, content or other service you have requestedPerformance of a contract, or steps taken at your request before entering into a contractProcessing your purchase and delivering the product or servicePerformance of a contractSending marketing emails or WhatsApp messages where consent is requiredConsentResponding to enquiries and communicating with youPerformance of a contract, legitimate interests, or consent, depending on the circumstancesFraud prevention, payment security and website securityLegitimate interests and/or legal obligationsAdvertising and retargeting, including Meta PixelConsent where requiredMaintaining financial and tax recordsLegal obligationProtecting and enforcing our legal rightsLegitimate interests and/or legal obligation

Where we rely on consent, you can withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before you withdrew your consent.

The GDPR recognises several lawful bases for processing personal data, including consent, contract, legal obligation and legitimate interests.

2.3 Who we share your data with

We do not sell, rent or trade your personal data.

We may share personal data with trusted third-party service providers that process data on our behalf and help us operate our business. These may include:

GoHighLevel (GHL) — our CRM, funnel, email and WhatsApp automation platform. It may store contact details and information necessary to manage communications and customer relationships.

Stripe — our payment processor. Stripe processes payment information when you make a purchase. We do not store your full payment card details.

Meta (Facebook/Instagram) — where you have provided the required consent, Meta Pixel and related technologies may process information for advertising measurement, audience creation and retargeting.

We may also disclose personal data where required by law, regulation, court order or a competent authority, or where reasonably necessary to protect our legal rights, users or business.

2.4 International data transfers

Some of our service providers may process personal data outside the European Economic Area (EEA), including in the United States.

Where personal data is transferred outside the EEA, we use an appropriate lawful transfer mechanism and safeguards required under the GDPR. Depending on the provider and circumstances, this may include an adequacy decision, the EU-US Data Privacy Framework where applicable, or EU Standard Contractual Clauses and any additional safeguards required by applicable law.

The European Commission provides specific safeguards for transfers of personal data outside the EEA, including adequacy decisions and Standard Contractual Clauses.

2.5 How long we keep your data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required by law.

Marketing contacts: We retain your marketing information while you remain subscribed or otherwise engaged with our marketing communications. Where appropriate, inactive marketing contacts may be deleted or anonymised after a reasonable period.

Customers and transaction records: Certain financial and tax records must be retained for at least 7 years under Dutch tax administration requirements.

Other personal data is retained only for as long as necessary for the relevant purpose, including where necessary to establish, exercise or defend legal claims.

If you withdraw marketing consent, we will stop sending marketing communications to you. We may retain limited information where necessary to record your opt-out or where we are legally required or permitted to retain it.

The GDPR does not prescribe one universal retention period for personal data. Retention periods must be appropriate to the purpose and any applicable statutory obligations.

2.6 Cookies

Our website uses cookies and similar technologies.

Where required by law, non-essential cookies are only placed or activated after you have given the relevant consent through our cookie banner.

Essential cookies

These cookies may be used where necessary for the operation, security or functionality of the website or checkout, including:

CookiePurpose__cf_bm, cf_clearanceCloudflare security and bot protectionstripe_mid, __stripe_sidStripe fraud prevention and payment security

Non-essential cookies

Where you consent, we may use technologies such as:

CookiePurpose_fbpMeta / Facebook / Instagram advertising measurement and retargetingGoHighLevel cookies, including msgsndr_id where applicableFunnel, website and platform analytics

The exact cookies used may change as our website, providers and integrations change.

You can manage your cookie preferences through the cookie consent mechanism provided on our website.

2.7 Your GDPR rights

Depending on the circumstances, you have rights under the GDPR including the right to:

• Be informed about how your personal data is processed

• Request access to the personal data we hold about you

• Request correction of inaccurate or incomplete personal data

• Request deletion of your personal data where the legal requirements for erasure are met

• Request restriction of processing in certain circumstances

• Object to processing based on legitimate interests

• Object to direct marketing

• Receive certain personal data in a structured, commonly used and machine-readable format and request its transfer to another controller where the right to data portability applies

• Withdraw consent where processing is based on consent

These rights are subject to certain legal exceptions and limitations, including where we are required to retain information by law.

To exercise your rights, contact us at:

ceci­[email protected]

We will generally respond to a valid GDPR rights request within one month of receiving it. In certain circumstances, this period may be extended by up to a further two months where permitted by the GDPR.

We may need to request information reasonably necessary to verify your identity before processing a request.

Complaints

If you are unhappy with how we have handled your personal data, we encourage you to contact us first so that we can try to resolve the matter.

You also have the right to lodge a complaint with a data protection supervisory authority.

As we are based in the Netherlands, you may contact the Autoriteit Persoonsgegevens (Dutch Data Protection Authority). You can submit a complaint through the AP's website:

https://autoriteitpersoonsgegevens.nl/en/submitting-a-tip-off-or-a-complaint-to-the-ap

The AP is the Dutch supervisory authority responsible for overseeing compliance with data protection law.

If you are located elsewhere in the EU/EEA, you may also have the right to lodge a complaint with the supervisory authority in your country of residence or another competent supervisory authority, depending on the circumstances.

Marketing opt-out

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link included in the email.

For WhatsApp marketing, you can reply "STOP" where that functionality is available, or contact us directly at [email protected].

2.8 Children

Our services are not directed at children under the age of 18, and we do not knowingly collect personal data from children under 18 for the purpose of providing our services.

If you believe a child has provided us with personal data, please contact us so that we can take appropriate steps.

2.9 Security

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

Payment information is processed through secure payment providers such as Stripe.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

2.10 Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, technology, legal requirements or the way we process personal data.

Material changes will be published on this page together with an updated "Last updated" date. Where required by law, we will provide additional notice or obtain consent.

3. TERMS OF USE

3.1 About this website

Cecivanoost provides educational content, digital products, coaching, consultations and information about online business and related opportunities.

By using our website or purchasing a product or service from us, you agree to these Terms of Use and any additional terms presented to you at the time of purchase.

3.2 Earnings disclaimer

Any income, earnings or financial examples presented on our website, in social media, training or other materials are for illustrative and educational purposes only.

We do not guarantee that you will earn any particular level of income or achieve any particular financial result.

Your results depend on many factors, including your experience, skills, time investment, effort, business decisions, market conditions, marketing activity and individual circumstances.

Testimonials and examples represent individual experiences and should not be understood as typical, guaranteed or expected results.

Nothing on this website constitutes legal, financial, tax or medical advice.

3.3 Intellectual property

Unless otherwise stated, all content on this website and within our products and services, including text, graphics, photographs, videos, downloads, workbooks and course materials, is owned by or licensed to Cecivanoost and is protected by applicable intellectual property laws.

You may use purchased materials for your own personal, non-commercial use only.

You may not copy, reproduce, distribute, publish, resell, sublicense or commercially exploit our content without our prior written permission.

3.4 Acceptable use

You agree not to use our website, products or services:

• For any unlawful purpose

• To infringe the rights of another person

• To copy, reproduce or redistribute our materials without permission

• To interfere with the operation or security of our website

• To attempt to gain unauthorised access to our systems or accounts

• In any way that could reasonably damage our business, website or other users

3.5 Third-party links and services

Our website and materials may contain links to third-party websites, platforms or services.

Third-party services are governed by their own terms and privacy policies. We are not responsible for the content, availability, security or privacy practices of third-party websites or services.

3.6 Limitation of liability

To the maximum extent permitted by applicable Dutch and EU law, we are not liable for indirect or consequential losses arising from your use of our website, products or services.

Nothing in these Terms excludes or limits liability where such exclusion or limitation is prohibited by applicable law, including liability that cannot legally be excluded or limited.

Nothing in these Terms affects any mandatory consumer rights you may have under applicable Dutch or EU law.

3.7 Governing law and disputes

These Terms are governed by the laws of the Netherlands, subject to any mandatory consumer protection rights that apply under EU or Dutch law.

If you are a consumer living in another EU/EEA country, nothing in these Terms is intended to deprive you of mandatory rights or protections that apply to you under the laws that cannot legally be excluded.

We encourage you to contact us first if you have a concern or dispute so that we can try to resolve it directly.

Where a dispute cannot be resolved informally, the competent courts will be determined in accordance with applicable Dutch and EU law.

3.8 Changes to these Terms

We may update these Terms from time to time.

The latest version will be published on our website with an updated "Last updated" date. Changes will apply from the date they are published, subject to any mandatory notice requirements.

4. REFUND AND CANCELLATION POLICY

4.1 Statutory consumer withdrawal rights

Where you purchase our services or digital products as a consumer online, you may have a statutory 14-day withdrawal period under applicable Dutch and EU consumer law.

The statutory right of withdrawal is separate from any additional refund policy we may voluntarily offer.

Certain legal exceptions can apply, including in relation to digital content or services that have already begun with the consumer's express request and agreement, where the applicable legal requirements for losing the withdrawal right have been satisfied.

Where applicable, we will provide the required information and obtain the necessary consent before a service begins during the withdrawal period or before access to digital content begins in circumstances where the withdrawal right may be affected.

4.2 Our additional 14-day refund policy

In addition to any statutory consumer rights, we may offer a 14-day refund policy for eligible programmes or offers.

Where an offer is subject to a specific refund condition, such as completion of the Discovery Process, those conditions will be clearly communicated before purchase and will not limit any mandatory statutory consumer rights.

For eligible refunds, contact us at:

[email protected]

Please include your name, order details and the reason for your request.

We aim to respond to refund requests within 7 days.

4.3 Refund exclusions

Refunds are subject to the specific terms communicated for the product or programme purchased, as well as any mandatory rights you have under applicable consumer law.

Nothing in this policy is intended to exclude or restrict a statutory right that cannot legally be excluded.

Under Dutch consumer law, online purchases of services and digital content may be subject to a statutory 14-day withdrawal period, with specific rules and exceptions applying in certain circumstances.

5. CONTACT US

If you have questions about this Privacy Policy, these Terms, our products or services, or how we process your personal data, please contact:

Cecilia Carmona van Oostenbruggen
Cecivanoost
Utrecht, Netherlands
Email: [email protected]