Privacy Policy

This Privacy Policy explains how BizzSurfer (“we”, “us”) collects, uses, and protects personal data when you visit bizzsurfer.com, use BizzSurfer Go!, request a demo, or otherwise interact with us. We operate under the General Data Protection Regulation (GDPR) and Dutch privacy law.

1. Data Controller

The data controller is Coach4expats, The Netherlands
hello@bizzsurfer.com.

For privacy questions, contact us at hello@bizzsurfer.com.

2. What we collect

Information you give us

• Name, work email, company, and the message you submit through our contact / demo form.
• Any additional information you choose to share when you email us or book a meeting.
• Account information (email, profile details) when you sign up for BizzSurfer Go!.

Information collected automatically

• Standard server and analytics data: IP address (truncated where possible), device and browser type, referring page, pages viewed, and timestamps.
• Cookies and similar technologies — see section 7.

3. Why we use your data

• To reply to your demo requests and messages.
• To operate, secure, and improve the website and BizzSurfer Go!.
• To measure aggregate traffic and performance.
• To comply with legal obligations.

We do not sell your personal data, and we do not use it for automated decision-making that produces legal effects on you.

4. Legal basis under GDPR

• Art. 6(1)(a) — Consent: for non-essential analytics and marketing cookies, and for newsletter subscriptions (you can withdraw this at any time).
• Art. 6(1)(b) — Contract / pre-contractual steps: when you request a demo, create an account, or purchase a subscription and we handle your request.
• Art. 6(1)(f) — Legitimate interest: to secure the site, prevent abuse, and understand aggregate usage.
• Art. 6(1)(c) — Legal obligation: when we must retain records (e.g. tax, accounting).

5. How long we keep it

• Demo and contact requests: up to 24 months after last contact, then deleted or anonymised.
• Email correspondence: up to 36 months, unless a longer retention is legally required.
• Account data: for as long as your account is active, then deleted within 12 months of closure.
• Website analytics: up to 14 months in aggregated form.
• Server logs: typically 30 days.

6. Third-party services

We rely on a small number of carefully selected processors to run the site and product:

• Vercel & Cloudflare — hosting, edge delivery, and privacy-friendly traffic metrics.
• Supabase — database, authentication, and file storage for BizzSurfer Go!.
• Stripe — payment processing for subscriptions and marketplace transactions.
• Brevo — newsletter delivery and transactional email.
• Google Tag Manager & Google Analytics — measurement tags, only activated after you give consent.
• Resend — delivers emails sent through our contact and transactional flows.
• Contentful — content management for our blog / insights section.
• Microsoft 365 (Outlook Bookings) — used when you book a demo meeting.

Each processor handles data under a data processing agreement and in line with this policy.

7. Cookies

We use two categories of cookies and similar technologies:

• Essential: required for the site to work and be secure (e.g. authentication sessions, routing). These do not need consent.
• Analytics & marketing: loaded via Google Tag Manager (including Google Analytics) to help us understand how the site is used. These are only set after you accept them in our cookie banner. You can change your choice at any time by clearing cookies or using the banner's “Reject” option on your next visit.

8. Your rights under GDPR

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure (“right to be forgotten”).
• Request restriction of processing.
• Data portability — receive your data in a structured, commonly used format.
• Object to processing based on legitimate interest.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email hello@bizzsurfer.com. We respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority, Autoriteit Persoonsgegevens.

9. International transfers

Some of our processors (notably Vercel, Cloudflare, Stripe, and Google) are based in the United States. When personal data is transferred outside the European Economic Area, we rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses (SCCs), together with the technical and organisational safeguards each provider offers.

10. Security

We use HTTPS everywhere, encrypt data at rest, limit access to personal data on a need-to-know basis, and review our security practices regularly. No online service can be 100% secure, but we take reasonable steps to protect your information.

11. Changes to this policy

We may update this policy to reflect changes in our services or the law. The “Last updated” date at the top shows the latest version. Significant changes will be highlighted on this page.

12. Contact

Coach4expats, The Netherlands
hello@bizzsurfer.com

See also our Terms of Service.