Privacy Policy

Last updated: 2 October 2026

At TidyUp Your Workspace, we value your privacy and aim to handle your personal information carefully and transparently.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, who we may share it with, and what rights you have.

This Privacy Policy applies when you visit our website, purchase one of our digital products or services, contact us, or otherwise interact with TidyUp Your Workspace.

1. Who We Are

TidyUp Your Workspace is responsible for the processing of personal data described in this Privacy Policy.

Email: romee@tidy-up.nl
Chamber of Commerce (KvK): 42153502
VAT ID: NL004010499B58
Phone: +31 6 21544970

If you have any questions about this Privacy Policy or about how your personal data is handled, you can contact us at romee@tidy-up.nl.

2. Personal Data We May Collect

The personal data we collect depends on how you interact with us.

We may process the following categories of personal data:

When you make a purchase

We may collect:

• your name;
• email address;
• billing address;
• country or region;
• order and product information;
• payment status;
• transaction details;
• VAT or tax-related information where applicable; and
• other information necessary to process and administer your purchase.

Payments are processed through third-party payment providers such as Stripe. Payment providers may collect payment details such as your card or bank information directly.

TidyUp Your Workspace generally does not receive or store your complete payment card details.

When you contact us

If you contact us by email, a website form, WhatsApp or another communication channel, we may process:

• your name;
• email address;
• telephone number;
• the contents of your message;
• attachments or information you choose to provide; and
• other information necessary to respond to your request.

When you purchase customized services

If you purchase a customized Notion workspace, consulting service or another tailored service, we may also process information that you provide in order for us to perform the agreed work.

This may include:

• business information;
• project requirements;
• contact details;
• documents or files you provide;
• feedback and communications; and
• information necessary to build or configure the agreed workspace.

We ask you not to provide personal data that is unnecessary for the service.

When you visit our website

Certain technical information may be processed automatically when you visit our website, such as:

• IP address;
• browser type;
• device information;
• operating system;
• date and time of your visit;
• pages visited; and
• technical information necessary for the website to operate securely.

Whether additional information is collected depends on the cookies, analytics or other website technologies we use.

3. Why We Process Your Personal Data

We only process personal data when there is a valid legal basis for doing so.

Depending on the situation, we process your personal data for the following purposes.

To process purchases and provide products

We use your personal data to:

• process your order;
• confirm your payment;
• deliver digital products;
• provide access to purchased products;
• communicate about your order; and
• provide customer support.

The legal basis for this processing is generally the performance of a contract or taking steps at your request before entering into a contract.

To provide customized services

When you hire us for a customized service, we process the information necessary to perform the agreed work.

The legal basis for this processing is generally the performance of a contract.

To communicate with you

We may use your contact details to answer questions, respond to requests, resolve problems or communicate with you about a product or service.

Depending on the situation, this processing is based on:

• performance of a contract;
• taking steps before entering into a contract; or
• our legitimate interest in communicating with customers and people interested in our services.

To meet legal and administrative obligations

We may process and retain certain transaction, invoice and accounting information when required under applicable tax, accounting or other legal requirements.

The legal basis for this processing is our legal obligation.

To protect our business and website

We may process certain information where reasonably necessary to:

• prevent fraud;
• maintain website security;
• protect our intellectual property;
• establish or defend legal claims; or
• prevent misuse of our products and services.

Where applicable, this processing is based on our legitimate interests, provided those interests do not override your fundamental rights and freedoms.

The GDPR permits processing on several legal grounds, including contractual necessity, legal obligations, consent and legitimate interests.

4. Payments and Stripe

We use Stripe to process certain payments.

When you make a payment, Stripe may process information such as:

• your name;
• email address;
• billing information;
• payment method information;
• transaction information;
• device or technical information; and
• information used for fraud prevention and payment security.

Stripe may act as a processor on behalf of businesses for some payment-processing activities and as an independent controller for certain activities it determines itself. Stripe states that its European GDPR establishment is in Ireland and that its role depends on the particular processing activity.

Stripe processes your personal data according to its own privacy documentation and applicable data protection laws.

5. WhatsApp

If you choose to contact TidyUp Your Workspace through WhatsApp, the information you send through WhatsApp may also be processed by WhatsApp and its associated service providers.

This may include your:

• telephone number;
• profile information;
• message content; and
• technical or communication metadata.

Use of WhatsApp is subject to WhatsApp's own privacy terms.

You are not required to use WhatsApp. You can also contact us by email at romee@tidy-up.nl.

6. Contact Forms and Email

When you submit a form on our website or email us, we use the information you provide to handle your request.

We do not use information submitted through a contact form for unrelated purposes unless:

• you have consented to this;
• we have another valid legal basis; or
• we are required to do so by law.

Please do not submit confidential or sensitive personal information unless it is genuinely necessary for your request.

7. Cookies and Similar Technologies

Our website may use cookies or similar technologies.

Some cookies may be strictly necessary for the website to function properly, for example for security or technical functionality.

If we use optional cookies for purposes such as analytics, advertising or tracking, we will request consent where required by applicable law.

You can withdraw or change your cookie preferences where such functionality is available.

8. Who We Share Personal Data With

We do not sell your personal data.

We may share personal data with service providers where this is necessary to operate our business or provide our services.

These may include providers of:

• payment processing, such as Stripe;
• website hosting;
• email services;
• website forms, such as Tally;
• cloud storage;
• communication services;
• accounting or bookkeeping services;
• IT and technical support; and
• other services necessary to operate our business.

We only share information that is reasonably necessary for the relevant purpose.

Service providers may process personal data on our behalf or, in certain circumstances, act as independent data controllers.

We may also disclose personal data if required by law, a court order or a competent public authority.

Services that load on our website

When you visit our website, your browser connects directly to the following third-party services. As part of that connection, they receive technical information such as your IP address, browser type and the page you are visiting.

• Google Fonts (Google) provides the fonts used on every page of our website. Your browser loads them from Google’s servers.
• Stripe provides the “Buy now” button and checkout on our templates page. Stripe’s script loads when you open that page, and the information you enter at checkout is processed by Stripe, as described in section 4.
• Tally provides the template request form on our templates page. The form loads from Tally’s servers, and the information you enter in it is processed by Tally on our behalf.

These services process this information according to their own privacy policies.

9. International Data Transfers

Some of the service providers we use may process personal data outside the Netherlands or outside the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, we aim to ensure that appropriate safeguards are in place as required by applicable data protection law.

Depending on the provider and destination, these safeguards may include:

• an adequacy decision adopted by the European Commission;
• Standard Contractual Clauses approved by the European Commission; or
• another legally permitted transfer mechanism.

10. How Long We Keep Personal Data

We do not keep personal data longer than reasonably necessary for the purpose for which it was collected, unless a longer retention period is required by law.

Retention periods depend on the type of information.

For example:

• Order and payment information: retained for as long as necessary to administer purchases and comply with applicable financial and tax obligations.
• Invoices and accounting information: retained for the period required under applicable Dutch tax and accounting laws.
• Customer communications: retained for as long as reasonably necessary to handle your request, maintain relevant business records or resolve disputes.
• Project information: retained for as long as necessary to provide the service and for a reasonable period afterwards where needed for support, administration or legal claims.
• Website and technical information: retained only for as long as necessary for security, technical operation or the purpose for which it was collected.

When information is no longer required, we will delete or anonymize it where reasonably possible.

11. How We Protect Your Personal Data

We take reasonable technical and organizational measures to protect personal data against:

• unauthorized access;
• accidental loss;
• misuse;
• disclosure;
• alteration; and
• destruction.

However, no online system or method of electronic storage can be guaranteed to be completely secure.

We therefore cannot guarantee absolute security, but we take reasonable steps appropriate to the nature of the information we process.

12. Your Privacy Rights

Under the GDPR, you may have several rights relating to your personal data.

Depending on the circumstances, these include the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• object to certain processing;
• receive certain personal data in a portable format;
• withdraw your consent where processing is based on consent; and
• lodge a complaint with a data protection authority.

These rights are subject to certain legal requirements and exceptions.

To exercise one of your rights, contact us at:

romee@tidy-up.nl

We may need to ask for additional information to verify your identity before fulfilling a request.

Under the GDPR, organizations must generally respond to valid requests without undue delay and normally within one month.

13. Complaints

If you have questions or concerns about how we handle your personal data, we would appreciate the opportunity to address them first.

You can contact us at:

romee@tidy-up.nl

You also have the right to lodge a complaint with the Dutch data protection authority:

Autoriteit Persoonsgegevens

More information is available through the website of the Autoriteit Persoonsgegevens.

14. Automated Decision-Making

TidyUp Your Workspace does not currently use personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals.

If this changes, we will update this Privacy Policy where required.

15. Children

Our products and services are not specifically directed at children.

We do not knowingly seek to collect personal data from children where parental consent or another legal basis would be required.

If you believe that a child has provided personal data to us improperly, please contact us so that we can review the situation.

16. Third-Party Websites and Services

Our website may contain links to third-party websites or services, including platforms such as Notion, Stripe, WhatsApp or social media platforms.

These third parties are responsible for their own privacy practices.

We recommend reviewing their privacy policies before providing personal information through those services.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example if:

• our services change;
• we start using new service providers;
• our website functionality changes; or
• applicable privacy laws change.

The latest version will be published on our website and the “Last updated” date at the top of this page will be updated accordingly.

18. Contact

For questions about this Privacy Policy or the processing of your personal data, please contact:

Email: romee@tidy-up.nl
Chamber of Commerce (KvK): 42153502
VAT ID: NL004010499B58
Phone: +31 6 21544970