Privacy Policy (Blaxtar Innovation Group B.V.)

Last updated: 29 January 2026

This Privacy Policy explains how Blaxtar Innovation Group B.V. (“Blaxtar”, “we”, “us”) collects and uses personal data when you visit www.blaxtar.com, contact us, subscribe to updates, or submit information through advertising lead forms (including Meta/Facebook/Instagram Lead Ads).

1) Who is responsible for your data?

Controller: Blaxtar Innovation Group B.V.
Chamber of Commerce (KvK): 97042609
VAT (BTW): NL867885166B01
Contact: kevin@blaxtar.com

2) What data we collect

Identity & contact data: name, email address, phone number, company name, job title.
Communication data: messages you send us, call notes, meeting requests.
Lead form data: any information you submit in a lead form (e.g., Meta Lead Ads).
Website usage data: IP address, device/browser info, pages viewed, referral source, approximate location (city/country), timestamps.
Marketing preferences: consent status, opt-in/opt-out records.

3) How we collect data

When you fill in a website form (contact, intake, newsletter, booking).
When you email us or communicate with us directly.
When you submit your information through Meta/Facebook/Instagram lead forms.
When you browse our website (via cookies and similar technologies, where enabled).

4) Why we use your data (purposes)

Respond to inquiries and provide requested information.
Schedule calls and deliver services or proposals.
Manage leads and customer relationships (CRM).
Send relevant updates and marketing communications (where permitted).
Improve our website, security, and user experience.
Comply with legal obligations and enforce our rights.

5) Legal bases (GDPR/AVG)

Consent (e.g., newsletter sign-up; certain cookies; marketing where required).
Contract / pre-contract steps (e.g., responding to a request for services).
Legitimate interests (e.g., basic lead management, service improvement, fraud prevention), balanced against your rights.
Legal obligation (e.g., accounting/tax compliance where applicable).

6) Meta/Facebook/Instagram Lead Ads disclosure (Facebook compliance)

If you submit data to us through a Meta/Facebook/Instagram Lead Ad, your information is governed by this Privacy Policy, and we will use it to respond to your request and for lead management and follow-up as described here.

Important: Meta (Facebook/Instagram) may independently process your data as a separate controller under its own policies.

7) Cookies and similar technologies

We may use cookies and similar technologies to enable site functionality, measure performance, improve content, and support advertising/attribution (where applicable). Where required, we ask for your consent before placing non-essential cookies. You can also manage cookies through your browser settings.

8) Sharing your data

We may share personal data with trusted service providers (e.g., hosting, analytics, CRM, email, scheduling, invoicing) who help us operate our business. We share only what is necessary and do not sell your personal data.

9) International transfers

If we use providers outside the EEA, we ensure appropriate safeguards (e.g., Standard Contractual Clauses) where required.

10) How long we keep your data

We keep personal data only as long as necessary. Lead/inquiry data is typically kept up to 24 months after last meaningful contact (unless you become a client or request deletion sooner), subject to legal requirements.

11) Your rights (EEA/UK)

You may have rights of access, correction, deletion, restriction, objection, and portability (where applicable), and the right to withdraw consent at any time. To exercise your rights, email kevin@blaxtar.com.

12) Marketing communications

You can opt out of marketing emails at any time via the unsubscribe link (if present) or by emailing us.

13) Children’s privacy

Our services and lead ads are not intended for minors, and we do not knowingly collect personal data from minors.

14) Security

We take reasonable technical and organizational measures to protect your data. No method of transmission or storage is 100% secure.

15) Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date.

2. What personal data we collect

Depending on how you interact with us, we may collect: Identity & contact data: name, email address, phone number, company name, job title.
‍Communication data: messages you send us, call notes, meeting requests.
‍Lead form data: any information you submit in a lead form (e.g., Meta Lead Ads).
‍Website usage data: IP address, device/browser info, pages viewed, referral source, approximate location (city/country), timestamps.
‍Marketing preferences: consent status, opt-in/opt-out records.

3. How we collect your data

We collect data through the following means: Website contact form: when you submit an enquiry via www.blaxtar.com.
‍Meta Lead Ads: when you complete a lead form on Facebook or Instagram. Meta acts as separate controller for the ad platform; data is transferred to Blaxtar under Meta’s lead sharing terms.
‍Direct communication: email, phone, or in-person contact.
‍Bootcamp registration: when you register for or enquire about a programme.
‍Cookies & tracking: automatically collected when you browse our website (see Section 8).

4. Legal basis and purposes of processing

We only process your personal data where we have a valid legal basis under GDPR Art. 6: Performance of a contract (Art. 6(1)(b)): to process bootcamp registrations, send confirmations, and manage your participation.
‍Legitimate interest (Art. 6(1)(f)): to respond to enquiries, maintain business records, and improve our services, balanced against your privacy rights.
‍Consent (Art. 6(1)(a)): to send marketing communications and place non-essential cookies. You may withdraw consent at any time without affecting prior processing.
‍Legal obligation (Art. 6(1)(c)): to comply with Dutch tax law (Belastingwet), accounting obligations (art. 52 AWR), and other statutory requirements.
‍Note: we do not use your data for automated decision-making or profiling with legal or similarly significant effects.

5. How long we retain your data

We retain personal data only as long as necessary for the relevant purpose or as required by Dutch law: Enquiry & contact data: up to 2 years from last contact, or until deletion is requested.
‍Bootcamp participant data: up to 7 years after programme end, in line with Dutch tax and accounting obligations (art. 52 AWR).
‍Marketing data: retained until you withdraw consent or opt out.
‍Financial records: 7 years as required by Dutch law.
‍After expiry: data is securely deleted or anonymised. We do not retain data longer than necessary.

6. Who we share your data with

We do not sell your data. We share it only where necessary with the following recipients, each bound by data processing agreements or equivalent safeguards: Webflow Inc. (USA): website hosting and CMS — transfers covered by EU Standard Contractual Clauses (SCCs).
‍Meta Platforms Inc. (USA): joint controller for lead ad data; transfers covered by SCCs.
‍Email & CRM providers: used for follow-up communications (e.g. Google Workspace) — SCCs apply.
‍Dutch Belastingdienst: where legally required.
‍Facilitators & staff: only to the extent necessary for programme delivery. We do not transfer your data to third countries without appropriate safeguards in place.

7. Your rights under GDPR & Dutch law

Under the GDPR and the Uitvoeringswet AVG you have the following rights, which you can exercise by emailing office@blaxtar.com. We respond within 30 days: Access (Art. 15): request a copy of your personal data.
‍Rectification (Art. 16): request correction of inaccurate or incomplete data.
‍Erasure (Art. 17): request deletion where there is no overriding legal ground to retain it.
‍Portability (Art. 20) & Objection (Art. 21): receive your data in machine-readable format, or object to processing based on legitimate interest, including direct marketing.
‍Complaint right: you have the right to lodge a complaint with the Dutch Data Protection Authority — Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl, +31 (0)70 888 85 00.