Privacy Statement

1 · Introduction

JDO Academy B.V. ("JDO Academy", "we", "us" or "our") attaches great importance to the protection of your privacy and personal data. We process personal data carefully, transparently and in accordance with the General Data Protection Regulation (GDPR) and other applicable laws and regulations.

JDO Academy B.V. operates under several trade names, including JDO Academy and JDO Collective. This privacy statement applies to all services and activities offered under these trade names.

In this privacy statement we explain which personal data we collect, why we process it, how we protect your data, which parties we work with and which rights you have with regard to your personal data.

This privacy statement applies to all services, products and activities of JDO Academy B.V., including but not limited to:

• the website;
• the JDO Academy App;
• the online learning environment;
• training programs;
• trainings;
• masterclasses;
• workshops;
• Hybrid Programs;
• Online Guided Programs;
• Immersion Programs;
• events;
• retreats;
• coaching;
• community;
• memberships;
• newsletters;
• webshop;
• all other services offered by JDO Academy.

By using our services or website, you agree that your personal data is processed as described in this privacy statement.

2 · Data controller

The data controller for the processing of personal data is:

If you have any questions about this privacy statement or about the processing of your personal data, you can always contact us using the contact details above.

3 · To whom does this privacy statement apply?

This privacy statement applies to everyone who uses the services of JDO Academy, including:

• visitors to our website;
• students;
• course participants;
• participants in trainings;
• participants in masterclasses;
• participants in retreats;
• users of the JDO Academy App;
• members of our community;
• members;
• webshop customers;
• suppliers;
• freelancers;
• collaboration partners;
• applicants;
• persons who contact JDO Academy.

4 · Which personal data do we process?

Depending on the service you use, we may process the following personal data.

4.1 · Identification data

• First name
• Last name
• Name prefix
• Gender (if relevant)
• Date of birth
• Nationality (if necessary for international programs)

4.2 · Contact details

• Street name
• House number
• Postal code
• City
• Country
• Phone number
• WhatsApp number
• Email address

4.3 · Business data

When you are a business customer, we may also process:

• Company name
• Chamber of Commerce (KvK) number
• VAT number
• Billing address

4.4 · Financial data

For payments we may process:

• invoice details;
• payment status;
• payment references;
• order number;
• purchase history.

JDO Academy does not process full credit card details. Payments are processed via certified payment providers such as Stripe and Klarna.

4.5 · Education data

When you take a training program, we process, among other things:

• chosen training program;
• progress;
• attendance;
• assignments;
• feedback;
• coaching notes;
• practical results;
• certificates;
• competencies achieved;
• exam results where applicable.

4.6 · Digital data

When you use our website or digital learning environment, we may automatically collect data such as:

• IP address;
• device data;
• browser type;
• operating system;
• language settings;
• pages visited;
• date and time of visit;
• click behavior;
• session data;
• login data;
• log files.

4.7 · Photo and video material

During trainings, events, retreats, photoshoots or other activities, photos and videos may be taken. These may only be used in accordance with this privacy statement and any separate consent declarations.

5 · How do we collect personal data?

We collect personal data in various ways.

Directly from you, for example when you:

• request a brochure;
• book a training program;
• create an account;
• place an order;
• make contact;
• send a WhatsApp message;
• send an email;
• fill in a form;
• participate in an event.

Automatically, when using:

• our website;
• the JDO Academy App;
• the online learning environment;
• cookies;
• analytical software.

Via third parties, in some cases we receive data via:

• payment providers;
• accounting software;
• education partners;
• collaboration partners;
• marketing platforms;
• social media (if you contact us yourself via these platforms).

6 · Why do we process your personal data?

We process personal data solely for legitimate and clearly defined purposes, including:

• performing agreements;
• providing training programs;
• granting access to the online learning environment;
• granting access to the JDO Academy App;
• organizing trainings;
• scheduling coaching sessions;
• issuing certificates;
• customer service;
• administration;
• invoicing;
• payment processing;
• communication;
• quality improvement;
• securing our systems;
• sending newsletters;
• informing about new training programs;
• complying with legal obligations;
• handling complaints;
• preventing fraud.

We never process personal data for purposes that are incompatible with the purposes stated above.

7 · On what legal basis do we process personal data?

JDO Academy processes personal data only when there is a legal basis for doing so, as referred to in Article 6 of the GDPR.

7.1 · Performance of an agreement

We process most personal data because it is necessary for the performance of an agreement with you, for example when you take a training program, participate in a Hybrid, Online Guided or Immersion Program, attend a masterclass or retreat, purchase products or use the JDO Academy App.

7.2 · Legal obligation

In some cases we are legally obliged to process personal data, for example for tax legislation, financial administration, invoicing and statutory retention periods.

7.3 · Consent

For certain processing operations we ask for your consent in advance, including receiving newsletters, marketing communications, the use of photos or videos for promotional purposes and certain cookies. You can withdraw your consent at any time without this affecting the lawfulness of the processing prior to the moment of withdrawal.

7.4 · Legitimate interest

In some cases we process personal data on the basis of a legitimate interest, such as improving our services, quality monitoring, securing systems, fraud prevention and internal administration. In doing so, we always carefully weigh our interest against your privacy.

8 · The JDO Academy App

JDO Academy offers various training programs and programs through the JDO Academy App, available in the App Store and Google Play Store. The app is built on the Passion.io platform. To gain access, a personal account is created that gives you access to online lessons, video modules, assignments, downloads, workbooks, coaching material, replay recordings, community content and additional learning materials. Each user receives personal login details. It is not permitted to share your account or login details with others.

9 · Online learning environment

Our online learning environment is accessible only to registered students. Within this learning environment, personal data is processed that is necessary for providing our training programs, such as module progress, completed lessons, assignments, certificates, personal notes, communication between student and trainer and attendance at live sessions.

10 · Live lessons and coaching

Within various training programs, JDO Academy organizes live coaching sessions and online lessons, among others via Google Meet. During these sessions, participants may be visible or audible to other participants. We ask participants to treat each other's privacy respectfully.

11 · Replay recordings

Some live lessons may be recorded. These recordings are intended solely for participants of the relevant program and are not made public. If a participant objects to being visible or audible in a recording, they can contact JDO Academy in advance about this.

12 · Community

JDO Academy has an online community. Participation is voluntary. Within the community, participants can share personal data themselves, such as name, profile photo, messages and images. We advise participants to handle the information they publish themselves carefully. JDO Academy is not responsible for personal data that participants voluntarily share with other participants.

13 · Memberships

If you participate in a JDO Academy membership, we process only the personal data that is necessary for your membership, payments, access to exclusive content, participation in live sessions and communication regarding the membership.

14 · Retreats, events and in-person trainings

When you participate in a retreat, event, workshop or in-person training, additional personal data may be necessary, such as travel information, accommodation details, dietary requirements, emergency contact details and logistical planning. When special categories of personal data are necessary (such as medical information or allergies), we process this only on the basis of your explicit consent or another valid legal basis.

15 · International participants

JDO Academy provides training programs for participants from various countries. We always process personal data in accordance with the applicable European privacy legislation (GDPR) and take appropriate measures when data is processed or stored internationally.

16 · Communication

When you contact JDO Academy, we process only the personal data that is necessary to handle your question, request or inquiry, via email, phone, WhatsApp, the contact form, social media or in-person conversation.

17 · Newsletters and marketing communications

We send newsletters only when you have given consent for this, or when this is permitted by law. Every newsletter contains an unsubscribe option. You can unsubscribe at any time.

18 · Use of email

We use email solely for answering questions, customer service, training programs, administrative communication, quotations, invoices, appointments, certificates and other communication that is necessary for our services.

19 · WhatsApp

JDO Academy uses WhatsApp for customer contact. We advise against sending confidential or sensitive personal data via WhatsApp.

If you provide separate consent, JDO Academy may contact you via WhatsApp about your enquiry, courses and relevant updates. We record the date, source and version of your consent. You can withdraw your consent easily and free of charge at any time by sending STOP or contacting us. JDO may use Noa, the JDO team's AI assistant, for an initial response. You can always ask to speak to a team member.

20 · Social media

When you contact us via social media, we process only the data that you share with us yourself. The privacy terms of the relevant platform also apply to the use of social media.

21 · Payments

For the processing of payments, JDO Academy works with professional payment providers including Stripe, Klarna and banks. JDO Academy does not store full credit card details or bank details.

22 · Invoicing and administration

Administrative data is retained in accordance with the statutory tax retention periods of 7 years.

23 · External service providers (processors)

To carry out our services, JDO Academy uses carefully selected external service providers, including:

• Google Workspace (email, documents, calendar and storage);
• Passion.io (JDO Academy App);
• MailBlue / ActiveCampaign (email marketing and customer communication);
• Google Meet (online lessons and coaching);
• Shopify (webshop);
• Stripe (payments);
• Klarna (installment payments);
• Wefact (invoicing and administration);
• Zapier (automated integrations between systems).

When we use external processors, we conclude a data processing agreement where legally required.

24 · Sharing personal data with third parties

JDO Academy never sells your personal data to third parties. We provide personal data only when this is necessary for the performance of an agreement, the delivery of our services, compliance with a legal obligation, the protection of our rights or your explicit consent.

25 · International transfer of personal data

Some service providers may process personal data outside the European Economic Area (EEA). Where this is the case, we ensure that this transfer takes place in accordance with the GDPR, via an adequacy decision of the European Commission or the standard contractual clauses approved by the European Commission (Standard Contractual Clauses).

26 · Cookies

Our website uses cookies and similar techniques to make the website function properly, remember your preferences, collect statistics, improve the user experience and enhance security. Where legally required, we ask for consent in advance for placing non-essential cookies.

27 · Analytical data

To gain insight into the use of our website, we may use analytical services. As far as possible, this data is processed anonymized or pseudonymized.

28 · Security of personal data

JDO Academy takes appropriate technical and organizational measures to protect personal data against loss, unauthorized access, misuse, alteration or disclosure. Among other things, we use secure connections (SSL), strong passwords, access restrictions, secure cloud storage, periodic software updates, secure back-ups and, where necessary, two-factor authentication. Employees and external parties who have access to personal data are bound by a duty of confidentiality or a comparable contractual obligation.

29 · Retention periods

JDO Academy does not retain personal data longer than necessary for the purpose for which it was collected, unless we are legally obliged to retain data longer. The main retention periods are:

After the applicable retention period has expired, personal data is deleted or anonymized, unless a legal obligation prescribes a longer retention period.

30 · Your privacy rights

Under the GDPR you have the right to:

• request access to your personal data;
• have incorrect personal data corrected;
• have personal data deleted when there is a legal ground for doing so;
• have the processing of personal data restricted;
• object to certain processing operations;
• receive your personal data in a structured, commonly used and machine-readable form (data portability);
• withdraw consent previously given.

Withdrawing consent does not affect the lawfulness of the processing prior to the moment the consent was withdrawn.

31 · Exercising a request

If you wish to exercise one or more of the above rights, please contact us via: info@jdo-academy.com. In principle, we respond within one month of receiving your request.

32 · Minors

Our training programs and services are in principle aimed at adults. We do not knowingly collect personal data from persons under the age of 16 without the consent of a parent or legal guardian.

33 · Data breaches

When there is a data breach that is likely to pose a risk to the rights and freedoms of data subjects, JDO Academy acts in accordance with the applicable legal obligations and reports this, if required, to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

34 · Links to external websites

Our website may contain links to third-party websites. JDO Academy is not responsible for the content, security or privacy practices of these external websites.

35 · Changes to this privacy statement

JDO Academy reserves the right to change this privacy statement. The most current version is always published on our website.

36 · Complaints

Do you have questions or complaints about the way JDO Academy processes your personal data? Please first contact us via info@jdo-academy.com or +31 75 207 3411. If you believe that we do not process your personal data carefully, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

37 · Applicable law

This privacy statement is governed solely by Dutch law. Disputes are, insofar as legally permitted, submitted to the competent court in The Netherlands.

38 · Contact

39 · Final provision

This privacy statement was established by JDO Academy B.V. and takes effect on 7 July 2026. By using the services, website, JDO Academy App or other services of JDO Academy, you acknowledge that you have taken note of this privacy statement.