Privacy Statement – MindSetFlow (EN)
Version: 1.0
Effective date: 4th of May, 2026
MindSetFlow values your privacy. In this statement, we explain what personal data we process, why we do so, how long we retain data and what rights you have. MindSetFlow processes personal data in accordance with the General Data Protection Regulation (GDPR).
1. Who is Mind, Set, Flow?
MindSetFlow, Amsterdam.
- Owner: Erik‑Jan Bosman
- Chamber of Commerce number: 42051987
- Contact information (privacy matters): erikjan@lightsalmon-moose-973986.hostingersite.com
- Data Protection Officer (DPO): Not applicable
MindSetFlow offers services to both individuals and businesses.
2. What personal data do we process?
We solely process data that is necessary for our services:
a) Contact & Intake
- Name
- Email address
- Phone number
- (Optional) Company name or organization
- Subject of the message / coaching question / quotes
b) Voor zakelijke klanten
- Naam contactpersoon
- Company name
- Function
- Business email address and phone number
- Billing information
c) Communication channels
- Telephony
- WhatsApp (after agreement)
d) Planning & appointments
- Data required to schedule appointments via Google Calendar
e) Payments & invoicing
- Invoice details
- Company details for business customers
- Payment status (administrative)
f) Coach notes/files
- We do not create comprehensive digital coaching files.
- Any minimal administrative notes will be limited and stored temporarily.
g) We do not process:
- Special categories of personal data (health, religion, ethnicity, etc.)
- Informaton via social media DMs (we respond, but do not store anything)
- Newsletter details (we do not send newsletters)
For clients under the age of 18, coaching is only possible with written consent from a parent/guardian.
3. Objectives and legal foundations
a) Responding to contact requests
- Purpose: To call or email you back in response to your request
- Legal foundation: Legitimate interest (you contact us yourself)
b) Provision of information upon request
- Objective: To provide information about services and opportunities
- Legal foundation: Consent
c) Execution of the agreement
- Purpose: Providing coaching, guidance or business services
- Legal foundation: Performance of the agreement
d) Invoicing and administration
- Goal: Financial administration, accounting and legal obligations
- Legal foundation: Legal obligation
4. Retention periods
- Contact requests: Maximum 1 calendar year after last interaction
- Invoicing and accounting: 7 years (legal obligation)
- Statistical website data: Anonymized, see section 6.
5. Data protection
We take appropriate technical and organizational measures to protect your data. Access is exclusively reserved for MindSetFlow. We use, among other things:
- MFA and password manager
- Encrypted storage (OneDrive / SharePoint)
- Secure web services (Hostinger, Cloudflare)
6. Website statistics and cookies
a) Statistics
This website uses privacy-friendly, self-hosted statistics via Burst Statistics.
This software does not place tracking cookies, does not share data with third parties and only processes anonymized, aggregated data. These measurements are intended to gain insight into general website usage. Consent is not required for this.
b) Cookies
This website uses necessary functional technology, such as limited browser storage to ensure the site functions properly (for example, remembering whether an element has already been displayed).
This technology does not contain any personally identifiable information and is not used for tracking or profiling purposes.
c) Why we do not display a cookie banner
We do not display a cookie banner because we do not use tracking or marketing cookies and only process privacy-friendly, anonymized statistics. The Dutch Data Protection Authority states that no consent is required for non-privacy-sensitive analytical measurements.
7. Transfer outside the EEA
Some tools (such as Google or Microsoft) may process data outside the EEA.
Where possible, we opt for European data centers and use standard contractual clauses (SCCs) when required.
8. Your privacy rights
- Right of access, rectification, erasure, restriction and transferability.
- You can object to data processing. To do so, please contact us at erikjan@lightsalmon-moose-973986.hostingersite.com.
We will respond within 30 days. Please send your request to erikjan@lightsalmon-moose-973986.hostingersite.com.
9. Minors
Coaching for individuals under the age of 18 is only possible with written consent from a parent or guardian.
10. Changes
This privacy statement may be updated. You will always find the most recent version on this page.
- Version 1.0 (4th of May, 2026): Initial version.
