Privacy Policy

1. Who We Are

HERWORK is a brand operated by Back2Health, a registered trade name of Xpertplanning, a sole proprietorship registered in the Netherlands.

For the purposes of applicable data protection law, Xpertplanning is the data controller responsible for the personal data described in this Privacy Policy.

Legal business name: Xpertplanning
Trading name: Back2Health
Brand: HERWORK
Chamber of Commerce number: 86506137
VAT identification number: NL004263344B73
Business address: Staverenstraat 15, 7418 CJ Deventer, The Netherlands
Email: jennifer@back2health.nl
Telephone: +31 6 55148431

References in this Privacy Policy to “HERWORK”, “we”, “us” or “our” refer to Xpertplanning trading as Back2Health and operating the HERWORK brand.

​

2. Personal Data We Collect

We only collect personal data that is reasonably necessary to operate our website, provide our products and services, communicate with you and meet our legal obligations.

Depending on how you interact with HERWORK, we may collect the following categories of personal data.

Information You Provide Directly

This may include:

• your first and last name;

• your email address;

• your telephone number, where provided;

• billing or contact address;

• information you enter into forms on our website;

• marketing preferences and records of consent;

• messages, enquiries and other communications you send to us;

• information you provide when requesting a free HERWORK resource;

• information you provide when placing an order.

Purchase and Transaction Information

When you purchase a HERWORK digital product, we may process information including:

• the product purchased;

• order number;

• date and time of purchase;

• purchase amount and currency;

• payment and order status;

• billing information;

• refund or cancellation information where applicable.

Payments are processed using third-party payment providers such as Stripe.

HERWORK does not need to receive or store your complete payment card details in order to process your purchase. Payment information may instead be collected and processed directly by our payment provider.

Technical and Usage Information

When you use our website, certain information may be collected automatically by our website platform or through cookies and similar technologies.

This may include:

• IP address;

• browser type;

• device type;

• operating system;

• approximate location derived from technical information;

• pages visited;

• date and time of visits;

• website interactions;

• referral information;

• cookie identifiers;

• security and diagnostic information.

More information about cookies and similar technologies will be available in our Cookie Policy.

​

3. How We Use Your Personal Data

We may use your personal data to:

• process and administer your orders;

• provide access to purchased digital products;

• send transactional and order-related communications;

• provide requested free HERWORK resources;

• respond to enquiries and provide customer support;

• maintain customer and transaction records;

• administer our website;

• protect our website, customers and business against fraud, misuse and security threats;

• troubleshoot technical issues;

• manage refunds, disputes and customer complaints;

• comply with accounting, tax and other legal obligations;

• establish, exercise or defend legal claims;

• improve our website, products and customer experience;

• send marketing emails where we have the appropriate permission or another lawful basis to do so.

We do not sell your personal data.

​

4. Legal Bases for Processing

Where the General Data Protection Regulation or another law requiring a lawful basis applies, we rely on one or more of the following legal bases.

Performance of a Contract

We process information when it is necessary to enter into or perform a contract with you.

For example, this applies when we:

• process an order;

• take payment;

• provide a digital product;

• send order information;

• respond to questions about your purchase.

Consent

We rely on your consent where required, including for certain marketing communications and non-essential cookies or tracking technologies.

You may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Legal Obligations

We may process and retain personal data where necessary to comply with legal, tax, accounting or regulatory obligations.

Legitimate Interests

We may process personal data where this is necessary for our legitimate business interests and those interests are not overridden by your rights and interests.

This may include:

• protecting HERWORK against fraud and abuse;

• securing and maintaining our website;

• administering our business;

• handling disputes;

• improving our products and operations;

• keeping appropriate evidence of transactions and communications.

Where consent is legally required, we will not rely on legitimate interests instead of obtaining that consent.

​

5. Free Resources and Forms

When you request a free resource such as The Imperfect First Step, we use the information you provide to deliver that resource and administer your request.

Receiving a requested resource does not automatically require you to subscribe to ongoing marketing communications.

Where a separate marketing opt-in is displayed, choosing whether to subscribe is voluntary.

If you choose to receive HERWORK marketing communications, we may use your email address and related information to send tools, ideas, product information, offers and other HERWORK content.

You can unsubscribe at any time by using the unsubscribe link included in marketing emails or by contacting us at jennifer@back2health.nl.

Transactional communications that are necessary to deliver something you requested or purchased may still be sent even if you do not subscribe to marketing communications.

​

6. Payments

HERWORK currently uses Stripe to process online payments.

When you make a payment, Stripe may receive and process personal and financial information required to process the transaction, prevent fraud, comply with financial regulations and provide its payment services.

Stripe may act as a processor on our behalf for certain activities and as an independent controller for certain payment, regulatory, fraud-prevention and compliance activities.

Your use of Stripe's services may therefore also be subject to Stripe's own privacy practices.

​

7. Website Platform

Our website is built and hosted using Wix.

Wix provides services including website hosting, forms, customer records, ecommerce functionality, digital product delivery, communications, security and website infrastructure.

Wix may process personal data of HERWORK website visitors and customers on our behalf in order to provide these services.

Wix may also use subprocessors involved in areas such as hosting, email delivery, security and infrastructure.

​

8. Sharing Personal Data

We may share personal data with service providers where this is necessary to operate HERWORK.

At present, our principal service providers include:

Wix
Website hosting, ecommerce, forms, digital product delivery, customer management, communications and website infrastructure.

Stripe
Payment processing, fraud prevention and payment-related services.

We may also disclose information where reasonably necessary:

• to comply with a legal obligation;

• in response to a lawful request by a public authority;

• to protect our legal rights;

• to investigate fraud or misuse;

• to establish, exercise or defend legal claims;

• in connection with a restructuring, sale or transfer of all or part of our business, subject to applicable privacy law.

We do not provide personal data to third parties in exchange for money.

​

9. International Data Transfers

Some of the technology providers used by HERWORK operate internationally.

As a result, personal data may be processed in countries outside the European Economic Area.

Where applicable data protection law requires safeguards for such transfers, we and our service providers rely on recognised transfer mechanisms such as adequacy decisions, Standard Contractual Clauses or other lawful transfer mechanisms.

Wix states that website-user data is initially processed by Wix.com Ltd. in Israel and may subsequently be transferred within its international group or to subprocessors using applicable safeguards. Stripe similarly uses international data-transfer mechanisms where required.

​

10. How Long We Keep Personal Data

We do not intend to keep personal data longer than necessary for the purpose for which it was collected, except where longer retention is required or permitted by law.

Retention periods depend on the type of information and the reason it is processed.

Transaction and accounting records may be retained for the period required under Dutch tax and accounting legislation.

Under current Dutch fiscal rules, core business administration generally has to be retained for seven years. Certain records may be subject to longer statutory retention periods, including records falling within applicable VAT One Stop Shop requirements.

Marketing information may be retained until you unsubscribe or otherwise withdraw your consent, subject to retaining limited information where necessary to record and respect your preference.

Customer-support correspondence may be retained for as long as reasonably necessary to resolve the matter and protect our legitimate interests.

Technical and security information is retained only for as long as reasonably necessary for security, troubleshooting and operational purposes, subject to the retention settings of the services we use.

​

11. Marketing Communications

We only send marketing communications where permitted under applicable law.

Where we ask for consent, the marketing consent is separate from the provision of a purchased product or requested free resource.

You may unsubscribe at any time by clicking the unsubscribe link in our marketing emails or contacting jennifer@back2health.nl.

Unsubscribing from marketing does not prevent us from sending essential transactional messages relating to an order, download, account, support request or other service you requested.

​

12. Cookies and Similar Technologies

Our website may use cookies and similar technologies for purposes such as:

• operating essential website functions;

• maintaining security;

• remembering preferences;

• measuring website performance;

• understanding website usage;

• supporting ecommerce functions.

Where consent is legally required for non-essential cookies or similar technologies, those technologies should only be activated after the required consent has been obtained.

You can manage your choices through the cookie controls made available on our website.

A separate Cookie Policy will provide more detailed information about the cookies and similar technologies used on HERWORK.

 

13. Security

We take reasonable organisational and technical measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or misuse.

We also use established service providers such as Wix and Stripe that maintain their own security measures.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

​

14. Your Privacy Rights

Depending on the law that applies to you, you may have rights concerning your personal data.

Under the GDPR, these may include the right to:

• request access to your personal data;

• request correction of inaccurate or incomplete data;

• request deletion of your personal data in certain circumstances;

• request restriction of processing;

• object to certain processing;

• receive certain personal data in a portable format;

• withdraw consent where processing is based on consent;

• lodge a complaint with a competent data protection authority.

These rights are not absolute and may be subject to legal exceptions.

For example, we may need to retain certain transaction information even after a deletion request if we are legally required to retain that information.

To exercise a privacy right, contact:

jennifer@back2health.nl

We may ask for information reasonably necessary to verify your identity before fulfilling a request.

​

15. Complaints

If you have a concern about how we process your personal data, we encourage you to contact us first so that we can investigate and address the matter.

You also have the right, where applicable, to lodge a complaint with a competent data protection authority.

For HERWORK's Dutch establishment, the relevant supervisory authority is the:

Autoriteit Persoonsgegevens
The Netherlands

You may also have the right to contact the data protection authority in the country where you live or work.

​

16. Automated Processing

HERWORK does not currently use personal data to make solely automated decisions that produce legal or similarly significant effects concerning you.

Certain technology or payment providers may use automated systems for purposes such as fraud detection, security or payment processing in accordance with their own legal obligations and privacy practices.

​

17. Children's Privacy

HERWORK products and services are not specifically directed at children.

We do not knowingly seek to collect personal data from children for marketing purposes.

If you believe that a child has provided us with personal information inappropriately, please contact us at jennifer@back2health.nl.

​

18. Third-Party Websites

Our website or communications may contain links to websites operated by third parties.

HERWORK is not responsible for the privacy practices or content of third-party websites.

We recommend reviewing the privacy information of any third-party website you visit.

​

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, service providers or applicable law.

When we make changes, we will update the “Last updated” date at the top of this page.

Material changes may also be communicated through our website or other appropriate means where required.

​

20. Contact

For questions about this Privacy Policy or the processing of your personal data, contact:

HERWORK
Operated by Back2Health
A registered trade name of Xpertplanning

 

Staverenstraat 15
7418 CJ Deventer
The Netherlands

 

Email: jennifer@back2health.nl
Telephone: +31 6 55148431

Chamber of Commerce: 86506137
VAT ID: NL004263344B73