Who is responsible
Tattoo Birdy, Kennemerlaan 44, 1972 EP IJmuiden (KvK [to be added]) is responsible for processing your personal data on Birdy Black. Questions? Email [email protected].
What we process
| Data | Why | Legal basis |
|---|---|---|
| Name, email address, password (hashed), language | Your account and signing in | Performance of the contract |
| Lessons watched and progress | Picking up where you left off, showing progress | Performance of the contract |
| Membership, purchases, invoices | Payments and bookkeeping | Performance of the contract, legal obligation |
| Technical data (IP address, browser) in server logs | Security and fixing errors | Legitimate interest |
We never sell your data and don't use it for advertising.
Who else processes your data
We use these processors, under data processing agreements:
- Laravel Cloud – hosting of the website and database.
- Stripe – payments and invoices. Stripe processes your payment details itself; we never see full card or account numbers.
- Bunny.net (EU) – storing and streaming the videos.
- Email service – for emails such as password resets and confirmations.
Where data is processed outside the EU, this is based on the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
How long we keep data
- Account data and progress: as long as your account exists. When you delete your account, we erase it.
- Invoice and payment data: 7 years, as required by law.
- Server logs: up to 30 days.
Your rights
You have the right to access, correct, delete, restrict, object to and port your data.
- Access and portability: download all your data under Settings → Profile → Download my data.
- Deletion: under Settings → Profile → Delete account.
- For anything else: email [email protected]. We respond within a month.
If you disagree with how we handle your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local authority.
Cookies and statistics
We only use functional cookies, no tracking or advertising cookies. See Cookies.