Privacy Policy

Who is responsible for your data

I am. Arlette Vonk, a Dutch sole proprietorship, an eenmanszaak, Chamber of Commerce (KvK) number 42050733, contact arlette@arlettevonk.com. Under the GDPR, I am the data controller for the personal data described here.

What I collect, and why

I keep this short on purpose. Asking for something once and choosing to receive emails are always separate choices.

When you ask for something once

The Monday Morning Checklist. I collect your email address. I send you one confirmation email and, after you confirm, the checklist. Nothing is sent before you confirm. The legal basis is your consent, given through that confirmation.

The VONK Playbook Toolkit. I collect your email address and send you the Toolkit once, straight away. The legal basis is that you asked for it.

Asking for either does not sign you up for any other emails.

When you choose a short email series

The checklist form has a separate, optional box for a short series of four emails about the five unwritten rules and The VONK Playbook. You receive them only if you tick that box. The checklist arrives either way. The legal basis is your consent. You can withdraw it at any time with the unsubscribe link in every email. After that, no further emails of this kind are sent.

The Toolkit form has a separate, optional box for a series of five weekly emails about the human side of digital transformation and The VONK Playbook Team Workshop. If you tick it, you first receive a separate email asking you to confirm. The series starts only after you click the button in that email. The Toolkit arrives either way. The legal basis is your consent. You can withdraw it at any time with the unsubscribe link in every email.

When you join the VONK updates list

On the VONK page you can leave your name and email address to hear what comes next. I only accept this with your explicit consent, and I store the wording you agreed to. The legal basis is your consent. You can withdraw it at any time by replying to any update or by emailing me.

When you contact me or ask about the workshop

I collect your name, email address, your message, the topic you choose on the contact form, and your organisation if you add it. I use this only to read and reply to you. Asking me something does not add you to any mailing list. The legal basis is my legitimate interest in answering people who contact me, and, when you ask about the workshop or another service, taking the steps you asked for before we might agree on something.

Proof of your consent

For each email series I keep a separate record of when you ticked the box, the exact wording you saw and how it was collected. For the Toolkit series, my email service also records when you confirmed. I do not record your IP address. These records are stored in the European Union (Frankfurt). I keep them to be able to show that the emails you received were sent lawfully.

When you buy The VONK Playbook

The book is sold through Amazon. Amazon handles your order, payment and delivery under its own privacy policy. I receive no personal data about you from Amazon. If you bought the earlier PDF edition through Gumroad (before October 2026), Gumroad passed me limited order information, such as your name, email address and country, which I keep for as long as Dutch tax law requires.

The earlier Vonk Assessment

Until October 2026 this website offered a short assessment. If you asked for your result by email, I hold your email address, your first name if you gave it, the rule you chose and a link to your result. I no longer offer the assessment or collect this data.

Analytics

I use Plausible to see how many people visit the website and which pages they read. Plausible does not use cookies and does not follow you across other websites. It does not store IP addresses. It uses them only to count visits per day, with a daily code that is deleted after 24 hours, so it cannot recognise you on a later day. The data is processed and stored in the European Union. The figures I see are aggregated, and I cannot use them to identify you.

Cookies

This website does not set tracking cookies and does not store anything in your browser.

Who else handles your data

To run this business I work with a small number of trusted providers. They process data on my instructions.

• Kit, my email service for the checklist, the Toolkit and the optional email series, based in the United States.
• Netlify, which hosts this website and runs its forms, based in the United States. The consent records are stored in the European Union (Frankfurt).
• Microsoft (Microsoft 365), my email provider, where form notifications and our email conversations arrive.
• Plausible, my analytics tool, based in the European Union.
• Gumroad (Gumroad, Inc.), which processed purchases of the earlier PDF edition until October 2026.

Amazon sells and delivers the book as an independent company, under its own privacy policy.

Some of these providers process data outside the European Economic Area, mainly in the United States. Where that happens, it is done under the safeguards the GDPR requires. I do not sell your data, and I do not share it with anyone for advertising.

How long I keep your data

I keep your data only as long as I need it. Every year on 1 October I review what I hold and remove what I no longer need.

• One-time requests (checklist, Toolkit): these details are kept in my email service. My website passes them on and does not save them in its own storage. My hosting provider may briefly keep technical logs that contain them, under its own policy. Once delivered, I remove your details from my email service at the next yearly review, unless you also receive an email series or updates from me, or we are in touch for another reason.
• Email series and VONK updates: your details stay while you are subscribed.
• A request for the Toolkit series that you never confirm: no series emails are sent, and I remove the request and its record at the next yearly review.
• If you unsubscribe: I keep only your email address and the fact that you unsubscribed, for as long as I send emails. This helps prevent you from being emailed again by mistake. All other details about you in my email service, such as tags and form answers, are removed at the next yearly review. Messages, enquiries and order records follow their own rules in this list.
• Proof of consent: this is separate from the unsubscribe note above. It shows what you agreed to, when and how. I keep it so I can show, if asked, that you gave permission for the emails you received. I keep it until the first yearly review that falls at least five years after you unsubscribe, and then delete it. If a question or complaint about those emails is still open, I keep the proof until it is resolved. If you sign up again later, your new consent gets its own proof and its own period.
• Messages from the contact form and workshop enquiries: reviewed every year and deleted when no longer relevant, unless we are working together or the law requires me to keep them.
• Earlier assessment results: removed at the yearly review under the same rules as one-time requests.
• Order records: kept for as long as Dutch tax law requires, which is currently seven years.

My providers may keep backups for a limited time after I delete something, under their own policies.

Your rights

The GDPR gives you clear rights over your data. You can ask me to:

• show you the data I hold about you
• correct it if it is wrong
• delete it
• limit how I use it
• send it to you in a portable form
• stop using it, and withdraw any consent you gave

To use any of these, email me at arlette@arlettevonk.com. I will respond within one month. If you believe I have handled your data poorly, you can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.

Children

This website and The VONK Playbook are made for working professionals. They are not directed at children, and I do not knowingly collect data from anyone under 16.

Changes to this policy

I may update this policy as the business grows. The current version always lives on this page, with the date at the top.