EN

Privacy Statement

Version July 2026

At Studio Sprout we work with children, and with what parents entrust to us. Handling personal data carefully is a natural part of that. In this privacy statement you can read which data we process, why we do so, how long we keep it, and what rights you and your child have. We process personal data in accordance with the General Data Protection Regulation (GDPR).

1. Who we are

Studio Sprout is the children’s coaching practice of Renée van Hagen and Davita Wopereis in Amsterdam. Each of us is independently responsible, as data controller, for the data of the families we guide. Separate arrangements, agreed per partnership with the school, apply to the school programmes of Stichting Studio Sprout.

  • Renée van Hagen, Chamber of Commerce 71702911, VAT NL213022497B01
  • Davita Wopereis, Chamber of Commerce 95768394, VAT NL005173360B27
  • Practice address: Orteliusstraat 24-3, Amsterdam
  • Privacy contact: studiosprout.amst@gmail.com

2. Whose data we process

We process data of parents and caregivers who contact us or book a programme or e-consultation, of the children we coach, and of visitors to our website studiosprout.nl.

3. What data we process and why

Of parents and caregivers

  • Name, address, phone number and e-mail address: to stay in touch, plan appointments and invoice.
  • Payment and invoice details: for our administration and because the Dutch Tax Authority requires this of us.
  • Content of intake conversations, e-consultations and parent meetings: to tailor the guidance to your situation.

Of the child

  • Name, date of birth and school: to tailor the coaching to the child’s age and context.
  • The support need, relevant background information and information about wellbeing and development: to guide the child properly. This may include special categories of personal data (for example about health); we only process these with the explicit consent of the parents with custody.
  • Session notes and progress in the file: to build up the programme carefully and discuss progress with parents.

Of website visitors

  • Data you enter yourself via the contact or booking form: name, e-mail address and your message, to answer your question.
  • Limited, anonymised visitor statistics to improve our website. We do not use tracking for advertising.

4. Children’s data and consent

Our clients are younger than 16. Where we process data on the basis of consent, we therefore ask that consent from the parents or legal guardians with custody. Where custody is shared, we ask both parents with custody to agree to the programme. Consent given can always be withdrawn; this does not affect the processing that took place before the withdrawal.

What a child shares during a session is treated confidentially. We report progress to parents in broad terms and share details only where this is in the child’s interest, preferably in consultation with the child.

5. Legal bases

We process personal data on the basis of the following legal grounds under the GDPR:

  • Performance of a contract: carrying out the coaching programme or e-consultation you book with us.
  • Consent: for processing special categories of personal data about the child and, for example, for sharing a report with a school.
  • Legal obligation: keeping our financial records for the Dutch Tax Authority.
  • Legitimate interest: maintaining a limited, careful administration and securing our systems.

6. How long we keep data

  • The child’s file: up to 2 years after completion of the programme, unless parents request earlier deletion or there is a reason to keep it longer that we agree with you.
  • Invoice and payment data: 7 years, in line with the Dutch fiscal retention obligation.
  • Contact form and e-mail correspondence without a programme: a maximum of 1 year after the last contact.

Once the retention period has passed, we delete or anonymise the data.

7. Who we share data with

We never sell data to third parties and do not share substantive information about you or your child without your consent. We do use a small number of service providers who process data on our behalf, such as our website hosting, e-mail provider, scheduling or booking system, and accounting software. We enter into data processing agreements with these parties, so that your data remains secure there as well.

Sharing with third parties such as a school, general practitioner or other care providers only happens at your request or with your written consent.

8. Exception: the child’s safety

We work in accordance with the Dutch reporting code for domestic violence and child abuse (Meldcode huiselijk geweld en kindermishandeling). In case of serious concerns about a child’s safety, we may, preferably after consulting the parents, seek advice from or file a report with Veilig Thuis (the Dutch safety authority). In that situation it may be legally permitted and necessary to share data without consent.

9. How we secure data

We take appropriate technical and organisational measures to protect personal data against loss and unauthorised access. This includes secured devices with access codes and two-factor authentication, encrypted connections (https) on our website, and files that are only accessible to the coach guiding that child. Should a data breach nonetheless occur that poses a risk to those involved, we report this to the Dutch Data Protection Authority and inform the parents concerned.

10. Your rights and your child’s rights

As a parent or legal guardian, you can exercise the following rights for yourself and on behalf of your child:

  • Access: request which data we process about you and your child.
  • Rectification: have incorrect or incomplete data corrected.
  • Erasure: have data deleted, insofar as we are not legally required to keep it.
  • Restriction and objection: have processing restricted or object to a processing activity.
  • Data portability: receive data in a common digital format.
  • Withdrawal of consent: withdraw previously given consent at any time.

Send your request to studiosprout.amst@gmail.com. We respond within one month. To make sure a request genuinely comes from you, we may ask for additional verification.

11. Cookies

Our website only uses functional cookies and, where applicable, anonymised statistics. For any non-essential cookies, we first ask for your consent via the cookie notice on the website.

12. Filing a complaint

Do you have a question or complaint about how we handle personal data? Please contact us first via studiosprout.amst@gmail.com; we would be glad to work it out together. You also always have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

13. Changes

We may update this privacy statement, for example due to changes in our services or in the law. The current version is always published on studiosprout.nl. In case of significant changes, we actively inform the parents of ongoing programmes.

Studio Sprout | Orteliusstraat 24-3, Amsterdam | studiosprout.amst@gmail.com | studiosprout.nl

This is an English translation provided for convenience. In case of any discrepancy, the Dutch version of this privacy statement prevails.