Privacy Policy (Blaxtar Innovation Group B.V.)

Last updated: 5 October 2026

This Privacy Policy explains how Blaxtar Innovation Group B.V. (“Blaxtar”, “we”, “us”) collects and uses personal data when you visit www.blaxtar.com, contact us, subscribe to updates, or submit information through advertising lead forms (including Meta/Facebook/Instagram Lead Ads).

1. Who is responsible for your data?

Controller: Blaxtar Innovation Group B.V.
Chamber of Commerce (KvK): 97042609
VAT (BTW): NL867886882B01
Contact: kevin@blaxtar.com

2. What data we collect

• Identity & contact data: name, email address, phone number, company name, job title.
• Communication data: messages you send us, call notes, meeting requests.
• Lead form data: any information you submit in a lead form (e.g., Meta Lead Ads).
• Website usage data: IP address, device/browser info, pages viewed, referral source, approximate location (city/country), timestamps.
• Marketing preferences: consent status, opt-in/opt-out records.

3. How we collect data

• When you fill in a website form (contact, intake, newsletter, booking).
• When you email us or communicate with us directly.
• When you submit your information through Meta/Facebook/Instagram lead forms.
• When you browse our website (via cookies and similar technologies, where enabled).

4. Why we use your data (purposes)

• Respond to inquiries and provide requested information.
• Schedule calls and deliver services or proposals.
• Manage leads and customer relationships (CRM).
• Send relevant updates and marketing communications (where permitted).
• Improve our website, security, and user experience.
• Comply with legal obligations and enforce our rights.

5. Legal bases (GDPR/AVG)

• Consent (e.g., newsletter sign-up; certain cookies; marketing where required).
• Contract / pre-contract steps (e.g., responding to a request for services).
• Legitimate interests (e.g., basic lead management, service improvement, fraud prevention), balanced against your rights.
• Legal obligation (e.g., accounting/tax compliance where applicable).

6. Meta/Facebook/Instagram Lead Ads disclosure (Facebook compliance)

If you submit data to us through a Meta/Facebook/Instagram Lead Ad, your information is governed by this Privacy Policy, and we will use it to respond to your request and for lead management and follow-up as described here.

Important: Meta (Facebook/Instagram) may independently process your data as a separate controller under its own policies.

7. Cookies and similar technologies

We may use cookies and similar technologies to enable site functionality, measure performance, improve content, and support advertising/attribution (where applicable). Where required, we ask for your consent before placing non-essential cookies. You can also manage cookies through your browser settings.

8. Sharing your data

We do not sell your data. We share it only where necessary, with recipients bound by data processing agreements or equivalent safeguards: Webflow Inc. (USA) for website hosting and CMS; Meta Platforms Inc. (USA) as joint controller for lead ad data; email and CRM providers (such as Google Workspace) for follow-up communication; the Dutch Tax Administration (Belastingdienst) where legally required; and facilitators and staff, only to the extent needed to deliver a programme.

9. International transfers

If we use providers outside the EEA, we ensure appropriate safeguards (e.g., Standard Contractual Clauses) where required.

10. How long we keep your data

We keep personal data only as long as necessary for its purpose or as required by Dutch law. Enquiry and contact data: up to 2 years after last contact, or until you ask us to delete it. Programme participant data and financial records: 7 years, in line with Dutch tax and accounting obligations (art. 52 AWR). Marketing data: until you withdraw consent or opt out. After that, data is securely deleted or anonymised.

11. Your rights (EEA/UK)

You may have rights of access, correction, deletion, restriction, objection, and portability (where applicable), and the right to withdraw consent at any time. To exercise your rights, email kevin@blaxtar.com.

We respond to requests within 30 days, as required by the GDPR and the Dutch GDPR Implementation Act (Uitvoeringswet AVG). You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl). We do not use your data for automated decision-making or profiling with legal or similarly significant effects.

12. Marketing communications

You can opt out of marketing emails at any time via the unsubscribe link (if present) or by emailing us.

13. Children’s privacy

Our services and lead ads are not intended for minors, and we do not knowingly collect personal data from minors.

14. Security

We take reasonable technical and organizational measures to protect your data. No method of transmission or storage is 100% secure.

15. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date.

‍