What I collect, why, and what you can ask me to do about it.

Last updated 5 September 2026

Who is responsible for your data

Naira Agvanean Coaching (“I”, “me”) is the data controller for the information described here. Contact: [email protected].

What I collect

When you fill in a form

The newsletter form in the footer collects your first name and email address. The Mindset Check guide form collects your first name, email address and which result you received. The introduction call form collects your name, email, which programme you are asking about, and whatever you write in the message field.

When you take the Mindset Check

Your answers are processed entirely in your own browser and are never sent to me. Only the resulting category is stored, and only if you separately ask for the guide by email.

When we work together

Coaching generates notes, session recordings where agreed, scheduling details and correspondence, including messages you send between sessions. This is the most sensitive information I hold and it is treated accordingly.

Automatically, when you visit

The site is served by Cloudflare, which processes technical request data such as IP address, browser type and the page requested, in order to deliver the site and protect it from abuse. This is standard server logging rather than tracking, and I do not use it to build a profile of you.

What I deliberately do not do

No analytics, no advertising pixels, no social media trackers, no session recording, no profiling, no automated decision-making, and no selling or renting of anyone's data to anyone, ever. Fonts are served from this site rather than from a third party, so simply reading a page does not announce your visit to another company.

Why I process it, and on what legal basis

What	Why	Legal basis (GDPR)
Name and email from the newsletter form or a request for a guide	To send you the monthly letter, From the Wings, or the guide you asked for, until you unsubscribe	Consent, Art. 6(1)(a)
Introduction call requests	To reply and, if it fits, arrange a conversation before anything is booked	Steps prior to a contract, Art. 6(1)(b)
Session notes, recordings, correspondence	To deliver the coaching you engaged me for	Performance of a contract, Art. 6(1)(b)
Invoices and payment records	To meet accounting and tax obligations	Legal obligation, Art. 6(1)(c)
Server logs and spam filtering	To keep the site available and free of abuse	Legitimate interests, Art. 6(1)(f)

Who else sees it

I use a small number of service providers, each processing data only on my instructions:

• Cloudflare hosts the site and its form endpoint.
• Zite stores form submissions in a database I control.
• MailerLite holds the mailing list and sends the guide and any notes you asked for.
• Skool hosts the Dance Mindset Community. If you join, Skool handles your membership data under its own privacy policy, as a separate controller.
• Fillout runs the booking page for introduction calls and holds what you enter there.
• Video calling and scheduling tools used for sessions, and my accountant for invoicing.

Some of these providers are based outside the European Economic Area. Where that is the case, transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision. You can ask me for details.

How long I keep it

• Mailing list details: until you unsubscribe or ask me to delete them.
• Applications that do not become clients: up to twelve months, then deleted.
• Session notes and recordings: for the length of our work together and up to two years afterwards, so that returning clients keep their context. You can ask me to delete them sooner.
• Invoices: seven years, because Dutch tax law requires it.
• Server logs: a short rolling window set by Cloudflare.

Confidentiality of coaching

What you say in a session stays in the session. That includes from the person paying, if that is a parent or an institution. When I work with a school or company, they receive themes and attendance, never anything an individual dancer said. For dancers under 18, coaching starts only with a parent or guardian's written consent, and what is and is not shared is agreed in advance with all three of us.

There is one limit, and it is the ordinary one: if I believe someone is at serious risk of harm, I may need to act on that. I would tell you.

Your rights

Under the GDPR you can ask me to:

• give you a copy of the data I hold about you (access);
• correct anything inaccurate (rectification);
• delete it (erasure);
• pause what I do with it while something is disputed (restriction);
• hand it over in a portable format (portability);
• stop processing based on legitimate interests (objection);
• withdraw consent at any time, which does not affect what was lawful beforehand.

Email [email protected] and I will respond within one month. There is no charge. Every marketing email also has a one-click unsubscribe.

If you think I have handled your data badly, please tell me first so I can put it right. You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the supervisory authority where you live.

Cookies

This site currently sets no cookies and stores nothing on your device. There is no analytics, no advertising and no tracking, which is why you are not being asked to dismiss a consent banner. If that ever changes, you will be asked to consent before anything non-essential loads, refusing will be as easy as accepting, and you will be able to change your mind afterwards.

Security

The site is served over HTTPS. Form submissions travel to a server-side endpoint, and the database credential is held in encrypted storage, never in the website code where a visitor could read it. Session notes and recordings are kept in access-controlled storage. No system is perfect; if a breach ever affected your rights and freedoms, I would notify you and the regulator as the law requires.

Changes

If this policy changes materially, I will update the date above and, where the change affects you, say so by email.