RIK — Modern Wellness Education for Canada

1. Who we are

Controller: RIK

Brouwersplein 18
2013 PG Haarlem
Netherlands

RIK operates from the Netherlands and provides online educational programs for residents across Canada.

2. Scope

This Policy applies to personal data we process when you browse our site, make an inquiry, enroll in a course, participate in learning activities, or communicate with us by email. It applies to all visitors and learners, including residents of Canada. Our processing is governed by the laws of the Netherlands and, where applicable, the EU General Data Protection Regulation (GDPR).

3. Personal data we collect

Identification and contact data: full name, email address, phone number.
Enrollment data: selected program, preferences, messages you provide, consent choices.
Usage and technical data: device information, browser type, pages viewed, timestamps, approximate location derived from IP, cookie identifiers. See our Cookie Policy.
Communication data: emails, form submissions, support requests, and related metadata.
Payment-related information: we record payment status and transaction references. Card details are handled by payment service providers and are not stored by us.

4. Sources of data

Directly from you when you complete forms, enroll, or contact us.
Automatically from your device via cookies and similar technologies when you use our site.
From service providers (for example, analytics or payment processors) as necessary to deliver our services.

5. Purposes of processing

Provide and operate our educational platform, process enrollment, and deliver course materials.
Communicate with you about programs, schedules, and updates you request.
Support, troubleshooting, and service improvement based on aggregated insights.
Security, fraud prevention, and abuse detection.
Compliance with legal obligations and recordkeeping requirements in the Netherlands.
Analytics to understand site usage and enhance the learner experience. See the Cookie Policy for choices.

6. Legal bases under GDPR

Performance of a contract: to register you for a program and provide access to learning materials.
Consent: for optional communications and non-essential cookies or analytics where required.
Legitimate interests: to secure our services, prevent misuse, and improve learning experiences, provided these interests are not overridden by your rights.
Legal obligation: to keep records for tax and compliance under Dutch law.

7. Cookies and similar technologies

We use essential cookies for site functionality and analytics cookies to understand how our site is used. You can learn more about categories, retention periods, and controls in our Cookie Policy.

8. Data sharing and recipients

Service providers acting on our behalf (hosting, analytics, communication, payment, and support). These providers process data under written contracts and are bound by confidentiality and security obligations.
Professional advisors and auditors under confidentiality duties when necessary.
Public authorities or law enforcement when we are legally required to do so.
Corporate transactions: in the event of a merger, restructuring, or transfer, data may be shared as permitted by law.

9. International data transfers

Because we serve learners in Canada, personal data may be transferred from the Netherlands to Canada and to other countries where our service providers are located. When transferring data outside the European Economic Area, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses and implement technical and organizational measures to protect your data. You may request information about these safeguards using the contact details below.

10. Data retention

Inquiry data (forms and emails): up to 24 months after last interaction.
Enrollment and contract records: up to 7 years to meet Dutch accounting and tax requirements.
Analytics data: typically 14 to 26 months, depending on configuration, or shorter where feasible.
Security logs: up to 12 months unless longer is needed to investigate incidents.

We may retain data longer if required to establish, exercise, or defend legal claims. When retention ends, we delete or irreversibly anonymize data.

11. Your rights under GDPR

Subject to conditions and exceptions in law, you have the right to:

Access your personal data and obtain a copy.
Rectify inaccurate or incomplete data.
Erase your data (“right to be forgotten”).
Restrict processing in certain circumstances.
Data portability for information you provided to us.
Object to processing based on legitimate interests or direct marketing.
Withdraw consent at any time where processing is based on consent.

To exercise your rights, contact us using the details in Section 16. We may request information to verify your identity. We aim to respond within one month.

You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

12. Security

We apply technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. While we work to safeguard your information, no method of transmission or storage is completely secure.

13. Children’s privacy

Our services are intended for adults. We do not knowingly collect personal data from children under 16 years of age. If you believe a child has provided us with personal data, contact us and we will take appropriate steps to delete the information.

14. Automated decision-making

We do not use automated decision-making that produces legal or similarly significant effects on individuals.

15. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on this page and indicate the date of the latest revision.

16. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, contact:

RIK
Brouwersplein 18, 2013 PG Haarlem, Netherlands
Email: [email protected]

Governing law and jurisdiction: The laws of the Netherlands.

For information about cookies and analytics controls, visit our Cookie Policy. For rules of site use, see our Terms of Use.