Privacy Policy

Northmere Academy B.V. (Northmere Academy) is the data controller for personal data processed through this website and course platform. Registered address: Herengracht 182, 1016 BR Amsterdam, Netherlands. Company reg. no. KvK 89452117 (Netherlands Chamber of Commerce). Data protection enquiries: legal@northmere-academy.eu.

• Account data: name, email address, password hash, account settings.
• Purchase data: order reference, amount, VAT country, payment status. Full card details are handled by our payment provider and never reach our servers.
• Learning data: module progress, quiz results, certificate status.
• Support data: messages you send us and our replies.
• Technical data: IP address, device and browser type, and aggregated usage analytics.

• To deliver the course you purchased and maintain your account.
• To process payments, issue receipts and meet tax obligations.
• To provide support and respond to your enquiries.
• To improve course content and platform reliability using aggregated insights.
• To send service messages such as access instructions and important platform notices.

• Contract: providing course access, support and account management.
• Legal obligation: retaining invoicing and tax records.
• Legitimate interests: platform security, fraud prevention and service improvement.
• Consent: non-essential cookies, analytics and any marketing emails.

We use essential cookies to keep you signed in and to secure the platform, and optional cookies for analytics and preferences. Full detail is in our Cookie Policy, and you can change your choices at any time.

We use privacy-respecting analytics to understand which pages and modules are used, in aggregate. We do not build advertising profiles, and we do not sell or rent personal data to anyone.

Transactional emails — receipts, access instructions, security notices — are necessary to deliver your purchase and cannot be opted out of while your account is active. Any optional educational or product emails require your consent and include an unsubscribe link.

• Account and learning data: for as long as your account remains active.
• Invoicing and tax records: retained for the statutory period (typically 6–10 years).
• Support correspondence: up to 24 months after the case is closed.
• Analytics data: aggregated and retained no longer than 14 months in identifiable form.

We rely on a small set of processors: a payment provider, an email delivery service, cloud hosting and video delivery, and an analytics provider. Each is bound by a data processing agreement and may only process data on our documented instructions.

We prefer EU or EEA hosting. Where a processor operates outside the EEA, transfers are protected by an adequacy decision or by Standard Contractual Clauses together with supplementary technical measures such as encryption in transit and at rest.

Under the GDPR you have the right to:

• Access a copy of the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data where no legal retention obligation applies.
• Restrict or object to certain processing.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time, without affecting prior lawful processing.
• Lodge a complaint with your national supervisory authority.

We respond to verified requests within one month.

Write to legal@northmere-academy.eu for any privacy matter, or to support@northmere-academy.eu for general support. Postal: Northmere Academy B.V., Herengracht 182, 1016 BR Amsterdam, Netherlands.