Privacy Policy

Last updated: 2025 · NextStepUpward B.V.

NextStepUpward B.V. ("NextStepUpward", "we", "us") respects your privacy and is committed to protecting your personal data. This policy explains what we collect, why, and the rights you have under the EU General Data Protection Regulation (GDPR).

In short: we collect the minimum data needed to deliver coaching services, we never store your card details on our servers, and we don't sell your data.

1. Who we are

The data controller is NextStepUpward B.V., a company registered in the Netherlands, also trading as RiseClarity and EaseMentor. For any privacy request, contact us at ceo@nextstepupward.com.

2. What data we collect

Account & contact data: your name and email address.
Booking data: the sessions and programs you purchase, appointment times, and attendance.
Payment data: a payment token and transaction reference from our payment providers. We do not store your full card number or bank details on our servers.
Communications: messages you send us via forms or email.
Technical data: basic, privacy-friendly analytics such as device type and pages visited, where enabled.

3. How we use your data

To provide coaching and mentoring sessions and manage your bookings.
To process payments and send receipts and invoices.
To send service messages (confirmations, reminders, changes).
To respond to your enquiries and provide support.
To meet legal and accounting obligations.

4. Legal bases

We process your data on the basis of performance of a contract (delivering the services you buy), legal obligation (e.g. tax and accounting records), and our legitimate interests (running and securing our business). Where required, we rely on your consent — for example, optional marketing emails, which you can withdraw at any time.

5. Payment processing

Payments are handled by Stripe and Mollie, which are PCI-DSS compliant. Card and bank data are processed directly by these providers under their own privacy terms. We receive only a token and the information needed to reconcile your payment.

6. Sharing your data

We share data only with parties that help us deliver the service, under appropriate agreements:

Payment providers (Stripe, Mollie).
Scheduling, email and hosting providers.
The coach delivering your session, limited to what's needed to prepare and run it.
Authorities where legally required.

Where a provider is located outside the EU/EEA, we rely on appropriate safeguards such as EU Standard Contractual Clauses.

7. How long we keep data

We keep account and booking data for as long as you have an account and as needed to provide the service. Invoices and payment records are retained for the period required by Dutch tax law (generally seven years). After that, data is deleted or anonymised.

8. Your rights

Under the GDPR you have the right to access, correct, delete, restrict, or object to the processing of your data, and the right to data portability. To exercise any of these, email ceo@nextstepupward.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. Security

We use encryption in transit, access controls, and reputable processors to protect your data. No system is perfectly secure, but we take reasonable technical and organisational measures to keep your information safe.

10. Cookies

We use only the cookies needed to run the site and, where enabled, privacy-friendly analytics. You can control cookies through your browser settings.

11. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a new "last updated" date.

12. Contact

Questions about your privacy? Email ceo@nextstepupward.com and we'll be glad to help.