Privacy Policy
Effective Date: June 26, 2026
Last Updated: August 7, 2026
At Peaceful Dragon QiGong (https://peacefuldragonqigong.com), we value your privacy and aim to keep data collection minimal, transparent, and secure. This Privacy Policy details how we collect, store, and process personal information in compliance with the General Data Protection Regulation (GDPR / Dutch AVG).
1. Data Controller
The Data Controller responsible for your personal information is:
Business Name: Peaceful Dragon QiGong
Legal Entity: Sole Proprietorship (Eenmanszaak / ZZP)
Chamber of Commerce (KvK) Number: 98861379
Website: https://peacefuldragonqigong.com
Email: info [at] peacefuldragonqigong [dot] com
Location: Amsterdam, Netherlands
2. Personal Data We Collect
We only collect personal data necessary to provide our services, manage bookings, and stay in touch:
Contact Information: Name, email address, and optional phone number (collected via newsletter forms, direct contact, or booking forms).
Billing & Transaction Data: Name, email, billing address, regional currency details (USD/EUR), and order details when purchasing a class, workshop, or attending an event.
Technical & Regional Data: We inspect HTTP request headers (such as the x-user-region header derived from your IP address) to determine your general geographical region (e.g., US or EU). This allows us to deliver accurate regional currency pricing and localized offer details. This data is processed ephemerally at the server level during your request and is not stored or linked to a tracking profile.
Scheduling Data: Full name, email address, phone number, and time zone information provided when scheduling appointments through our calendar integrations.
Payment Security Note: Credit card and payment processing are handled entirely by Stripe. Peaceful Dragon QiGong never processes, views, or stores credit card numbers on our website servers.
3. Legal Basis for Processing Data
Under Article 6 of the GDPR, we process your data on the following legal grounds:
Consent (Art. 6(1)(a)): When you voluntarily sign up for our newsletter or request information.
Performance of a Contract (Art. 6(1)(b)): Processing contact, scheduling, and payment details to fulfill orders, issue booking links, and host classes.
Legal Obligation (Art. 6(1)(c)): Retaining financial transaction records to comply with Dutch tax administration laws (Belastingdienst).
Legitimate Interests (Art. 6(1)(f)): Processing technical header data (such as regional header inspection) for site functionality, optimal website performance, fraud prevention, and responding to inquiries.
4. Third-Party Service Providers
We do not sell or trade your data. We only share minimal personal data with essential, GDPR-compliant service providers:
Stripe: Payment gateway for secure card processing across regional currencies (USD/EUR).
Calendly: Scheduling software for class scheduling and single-use booking link management.
Zoom: Video conferencing provider for conducting live 1-on-1 virtual sessions.
Brevo: Email service provider for automated booking notifications and newsletter delivery.
Hosting & Infrastructure: Secure web servers utilizing encrypted HTTPS connections.
5. Data Retention
Newsletter & Contact Details: Retained until you request deletion or click "Unsubscribe" in any email.
Financial & Invoice Records: Retained for 7 years to satisfy the legal tax record-keeping requirements of the Dutch Belastingdienst.
6. Your Rights
Under the GDPR / AVG, you have full control over your personal data:
Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Ask us to update or correct inaccurate details.
Right to Erasure ("Right to be Forgotten"): Request deletion of your contact data (excluding financial records required for tax audits).
Right to Withdraw Consent: Opt out of newsletter updates at any time.
To exercise any of these rights, email us at info [at] peacefuldragonqigong [dot] com. We will respond within 30 days.
If you feel your privacy rights are being violated, you also have the right to lodge a complaint with the Dutch Data Protection Authority: Autoriteit Persoonsgegevens (AP).
7. Cookies & Security
Security: All data transmitted to and from https://peacefuldragonqigong.com/ is encrypted using SSL (HTTPS).
Cookies: We use essential functional cookies required for basic functionality (e.g., secure payment checkout). We do not use invasive tracking or third-party ad profiling cookies.
8. Contact Us
If you have any questions regarding this policy or how your data is handled:
Peaceful Dragon QiGong
Email: info [at] peacefuldragonqigong [dot] com
Website: https://peacefuldragonqigong.com