Privacy Policy

This Privacy Policy describes how GH&F B.V. collects, uses, shares, and protects personal data when you use our educational website and related services. We operate from the Netherlands and process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Dutch law.

Who We Are

Data Controller: GH&F B.V.
Address: Distelvlinderberm 70, 3994 WT Houten, Netherlands
Email: [email protected]

We provide independent educational content about writing instruments for readers across Canada. We do not sell physical products on this site.

Scope

This policy applies to visitors of our website and participants who interact with our courses, contact forms, or educational resources available on our domain.

Personal Data We Process

• Contact details: name, email address, and optionally telephone number when you write to us.
• Course interest and messages: topics you select and the text you provide in forms.
• Technical data: IP address, device and browser characteristics, pages viewed, timestamps, and referral information, collected via essential logs and optional analytics cookies.
• Communication metadata: time we contacted you, message subject, and our replies.
• Preference data: cookie preferences and consent records.

Purposes and Legal Bases

• Responding to your inquiries and providing educational support (Art. 6(1)(b) GDPR — performance of a contract or pre‑contractual steps; and/or Art. 6(1)(f) — legitimate interests in operating an educational portal).
• Managing course registrations, sending learning materials, and providing service updates (Art. 6(1)(b) GDPR).
• Improving content quality, measuring usage, and maintaining security and performance (Art. 6(1)(f) GDPR — legitimate interests).
• Using optional analytics cookies only with your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time.
• Complying with legal obligations, including record keeping and responding to lawful requests (Art. 6(1)(c) GDPR).

Cookies and Similar Technologies

We use essential cookies to operate the site and, with your permission, optional analytics to understand content performance. For details about types of cookies, purposes, storage periods, and how to change your preferences, see our Cookies Policy.

Data Retention

• Contact inquiries: up to 24 months after the last interaction.
• Course‑related records: up to 5 years to manage learning history and support requests.
• Consent records and cookie preferences: retained for as long as required to demonstrate compliance, typically up to 24 months.
• Server logs and security records: typically 12 months, unless needed for incident investigation.

We may retain information longer where required to establish, exercise, or defend legal claims or to comply with statutory obligations.

Data Sharing and Recipients

We do not sell personal data. We share data only with trusted service providers who act on our instructions (processors) to help us operate this educational website, such as secure hosting, email delivery, and optional analytics. Where appropriate, we sign data processing agreements and require adequate safeguards.

International Data Transfers

Because our readership is primarily in Canada, some processing or access to personal data may occur outside the European Economic Area. When transferring personal data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses and implement technical and organisational measures to protect your data.

Security

We apply industry‑standard safeguards, including HTTPS encryption, access controls, data minimisation, and regular reviews of system configurations. No internet service is completely risk‑free; we encourage you to use strong passwords and keep software up to date.

Your Rights Under GDPR

Subject to conditions and applicable law, you have the right to:

• Access your personal data and obtain a copy.
• Request correction of inaccurate or incomplete data.
• Request erasure (“right to be forgotten”).
• Restrict processing.
• Object to processing based on legitimate interests, including profiling for analytics.
• Data portability, where technically feasible.
• Withdraw consent at any time for processing that relies on consent.
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

To exercise your rights, contact us at [email protected]. We may need to verify your identity before fulfilling a request.

Children’s Privacy

Our resources are suitable for learners, but we do not knowingly collect personal data from children under 16 without verifiable consent from a parent or legal guardian. If you believe a child under 16 provided personal data to us without consent, please contact us and we will take appropriate steps to delete such data.

Automated Decision‑Making

We do not use automated decision‑making or profiling that produces legal or similarly significant effects on individuals.

Do Not Track

Some browsers offer a “Do Not Track” signal. We do not change our practices in response to this signal. You can control analytics through our cookie preferences or your browser settings. See the Cookies Policy for options.

Changes to This Policy

We may update this Privacy Policy to reflect changes in law, technology, or our services. We indicate the effective date below and, where appropriate, notify users of significant changes.

Contact

For questions about this Privacy Policy or our data practices, email [email protected].

Effective date: 06 August 2026