Privacy Policy
Effective Date: June 26, 2026
Last Updated: October 7, 2026
At Peaceful Dragon QiGong (https://peacefuldragonqigong.com), we value your privacy and aim to keep data collection minimal, transparent, and secure. This Privacy Policy details how we collect, store, and process personal information in compliance with the General Data Protection Regulation (GDPR / Dutch AVG).
1. Data Controller
The Data Controller responsible for your personal information is:
Business Name: Peaceful Dragon QiGong
Legal Entity: Sole Proprietorship (Eenmanszaak / ZZP)
Chamber of Commerce (KvK) Number: 98861379
Website: https://peacefuldragonqigong.com
Email: info [at] peacefuldragonqigong [dot] com
Location: Amsterdam, Netherlands
2. Personal Data We Collect
We only collect personal data necessary to provide our services, manage user accounts, process recurring memberships, execute bookings, and stay in touch:
Account & Membership Credentials: Email address, encrypted authentication details, and unique user identifiers generated when you register for a user account or subscribe to "The Library" dashboard.
Contact Information: Name, email address, and optional phone number (collected via opt-in forms, newsletter signups, lead magnets, or direct contact).
Billing & Recurring Transaction Data: Name, email address, billing address, Stripe customer IDs, active subscription statuses, order histories, and transaction details when subscribing to The Library or booking private 1-on-1 sessions.
Technical & Regional Data: We inspect HTTP request headers (such as the x-user-region header derived from your IP address) to determine your general geographical region (e.g., US or EU). This allows us to deliver accurate regional currency pricing and localized offer details. This data is processed ephemerally at the server level during your request and is not stored or linked to a persistent tracking profile.
Scheduling Data: Full name, email address, phone number, and time zone information provided when scheduling private 1-on-1 appointments.
Payment Security Note: Credit card and debit card processing are handled entirely by Stripe. Peaceful Dragon QiGong never processes, views, or stores raw credit card numbers on our website servers.
3. Legal Basis for Processing Data
Under Article 6 of the GDPR, we process your data on the following legal grounds:
Consent (Art. 6(1)(a)): When you voluntarily sign up for our newsletter, request a free 5-minute routine, or opt in to email sequences.
Performance of a Contract (Art. 6(1)(b)): Processing account creation, recurring billing, platform authentication, and appointment scheduling to deliver access to The Library and private 1-on-1 sessions.
Legal Obligation (Art. 6(1)(c)): Retaining financial transaction and invoice records to comply with Dutch tax administration laws (Belastingdienst).
Legitimate Interests (Art. 6(1)(f)): Processing technical header data, server logs, and authentication status for member dashboard functionality, security maintenance, fraud prevention, and responding to service inquiries.
4. Third-Party Service Providers
We do not sell, rent, or trade your personal information. We share minimal data exclusively with essential, GDPR-compliant service providers infrastructure:
Supabase: Backend database infrastructure and secure authentication engine used to manage registered user accounts, subscription access state, and dashboard access logs.
Stripe: Payment processor handling secure card processing, recurring subscription billing cycles, and invoicing across regional currencies.
Brevo: Marketing and transactional email service provider used for dispatching account notifications, newsletter broadcasts, automated lead sequences, and keyword DM follow-ups.
Calendly / Zoom: Scheduling software and video conferencing platforms used to book and conduct live virtual 1-on-1 sessions.
Vercel / Hosting Infrastructure: Secure cloud web hosting platform running our Next.js app over encrypted HTTPS connections.
5. Data Retention
User Account & Subscription Data: Retained for the duration of your active membership. If you delete your account or cancel your membership, account authentication details are purged or anonymized within 30 days, except where purchase logs must be kept for tax compliance.
Newsletter & Contact Details: Retained until you request deletion or click the "Unsubscribe" link in any email broadcast.
Financial & Invoice Records: Retained for 7 years to satisfy mandatory tax record-keeping requirements established by the Dutch Belastingdienst.
6. Your Rights
Under the GDPR / AVG, you have full rights regarding your personal data:
Right of Access: Request a copy of the personal data and account logs we hold about you.
Right to Rectification: Request correction of inaccurate personal details or account information.
Right to Erasure ("Right to be Forgotten"): Request deletion of your user account and contact data (excluding legal financial records required for tax audits).
Right to Withdraw Consent: Opt out of email updates or cancel your subscription at any time.
To exercise any of these rights, email us at info [at] peacefuldragonqigong [dot] com. We will respond within 30 days.
If you believe your privacy rights are being violated, you have the right to lodge a complaint with the Dutch Data Protection Authority: Autoriteit Persoonsgegevens (AP).
7. Cookies, Sessions & Security
Security: All communication between your device and https://peacefuldragonqigong.com/ is encrypted using SSL (HTTPS). User account passwords and authentication tokens are securely managed via encrypted database protocols.
Cookies & Local Storage: We utilize essential functional cookies and session storage strictly required for core platform performance—specifically to keep you securely logged into your member dashboard and to facilitate payment checkouts. We do not use third-party ad tracking or cross-site profiling cookies.
8. Contact Us
If you have any questions regarding this Privacy Policy or your personal data:
Peaceful Dragon QiGong
Email: info [at] peacefuldragonqigong [dot] com
Website: https://peacefuldragonqigong.com