Rik B.V. — Massage Education Programs for Canada

1. Who we are

Rik B.V. is the data controller for this website and for the processing described in this Policy.

Legal entity: Rik B.V.
Address: Beatrixhaven 27, 4251 NK Werkendam, Netherlands
Email: [email protected]
Jurisdiction: Netherlands and EU data protection law (GDPR)

2. Scope

We provide massage education programs tailored for residents of Canada. This Policy applies to visitors and users of our website and services, regardless of where they access from. All processing is managed by Rik B.V. in the Netherlands, and personal data may be transferred according to Section 10.

3. The data we collect

We collect and process the following categories of personal data:

Identification and contact data: name, email address, phone number.
Application and enrollment data: selected course, preferences, messages you provide.
Communication data: emails and messages exchanged with us.
Technical and usage data: IP address, device and browser information, pages visited, time spent, and interactions, collected via cookies or similar technologies.
Cookie data: functional and analytics information. For details, see our Cookies Policy.

4. How we collect data

Directly from you when you contact us or apply for a course.
Automatically via cookies and similar technologies when you browse our website.

5. Purposes and lawful bases

We process personal data for the following purposes and under the lawful bases described in Article 6 of the GDPR:

To provide information about courses, process applications, and deliver education services (contract or pre-contractual steps).
To communicate with you, respond to inquiries, and provide support (legitimate interests and/or contract).
To maintain, secure, and improve our website and services, including analytics and performance monitoring (legitimate interests).
To send service announcements and important updates (legitimate interests or contract).
To send optional marketing communications where permitted (consent, which you can withdraw at any time).
To comply with legal obligations, including tax and accounting where applicable (legal obligation).

6. Retention

We keep personal data only as long as necessary for the purposes outlined above:

Inquiry and application records: up to 24 months after last interaction, unless a longer period is needed to manage a request or dispute.
Enrollment and service records: for the duration of the course and for a reasonable period afterward to handle support and compliance.
Billing and accounting data (if applicable): retained as required by Dutch law, typically up to 7 years.
Cookie data: according to the lifetimes set in our Cookies Policy.

7. Sharing and disclosures

We do not sell personal data. We may share data with:

Service providers acting as processors (for hosting, security, email delivery, and website operations) under written agreements and confidentiality obligations.
Professional advisors (legal, compliance, accounting) when necessary.
Public authorities if required by law or to protect our rights or the rights of others.

8. Security

We implement technical and organizational measures to protect personal data, including HTTPS, access controls, encryption in transit, and security monitoring. While no system is perfectly secure, we work to prevent unauthorized access, disclosure, alteration, or destruction of data.

9. Your rights under GDPR

Subject to conditions and exceptions in the GDPR, you have the right to:

Access your personal data and obtain a copy.
Rectify inaccurate or incomplete data.
Erase data in certain circumstances.
Restrict processing in certain circumstances.
Data portability where technically feasible.
Object to processing based on legitimate interests or to direct marketing.
Withdraw consent where processing relies on consent (without affecting prior lawful processing).

To exercise your rights, contact us at [email protected]. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

10. International transfers

Because our audience is in Canada, personal data may be accessed from or transferred to countries outside the European Economic Area. Where such transfers occur, we rely on GDPR-compliant safeguards such as Standard Contractual Clauses and additional measures as needed.

11. Cookies and similar technologies

We use cookies to enable core site functions, improve performance, and understand aggregated usage patterns. You can manage preferences through your browser settings. Details are provided in our Cookies Policy.

12. Marketing communications

We may send optional updates about programs and events if you consent or if local laws allow. You can opt out at any time by following the instructions in the message or by contacting us at [email protected].

13. Children’s privacy

Our programs are intended for adults (18+). We do not knowingly collect data from minors. If you believe a minor has provided personal data, contact us so we can take appropriate steps.

14. Legal basis, jurisdiction, and contact

This website operates under the laws of the Netherlands. Any dispute related to privacy or data protection is subject to Netherlands jurisdiction. For questions or requests, contact:

Rik B.V., Beatrixhaven 27, 4251 NK Werkendam, Netherlands
Email: [email protected]

15. Updates to this Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The updated version will be posted on this page with the effective date.