Privacy Policy
Effective date: 20 October 2025
At ScoreSprint (“we”, “us”, “our”), we value your privacy. This policy explains what personal data we collect, why we collect it, and how we use and protect it.
1) Who we are (Data Controller)
ScoreSprint - Yoav Grinberg
KvK: 98643762
BTW/VAT: NL005344661B36
Registered address: Telgen 13AR, Hengelo, Overijssel, the Netherlands
Email: scoresprint.eu@gmail.com
Phone: +31 6 15 14 86 14
We are the data controller for the personal data processed via this website and in connection with our services.
2) The data we collect
We may collect the following categories of data:
- Contact details: name, email address, phone number, (optional) postal address.
- Student information: IB course (AA/AI, SL/HL), year (DP1/DP2), goals, availability, and any information you share in forms or during onboarding.
- Billing and payments: transaction amounts/date, partial payment details (actual payment data is processed by our payment providers, not stored by us).
- Account/usage data: pages viewed, device/browser information, IP address, cookies (see section 8).
- Communications: emails, messages, call notes.
We do not intentionally collect special categories of data (e.g., health, religion). Please avoid sharing such information.
3) Why we collect it
We process personal data to:
- Provide services: schedule and deliver lessons/bootcamps; send homework, feedback, and study materials.
- Customer support and communication: respond to enquiries; send updates and parent reports.
- Payments and administration: invoicing, payment processing, accounting, tax compliance.
- Website operation and improvement: hosting, security, analytics, performance monitoring.
- Marketing (light-touch): with consent or where permitted, inform you about relevant services or availability.
4) Legal bases
We process your data on one or more of the following bases:
- Contract: to deliver the services you request and manage your account.
- Consent: for specific activities (e.g., contact forms, optional marketing). You can withdraw consent at any time.
- Legal obligation: to meet Dutch/EU accounting and tax rules.
- Legitimate interests: to run and protect our business (website security, fraud prevention, basic analytics, service improvement). We balance these interests against your rights.
5) Data retention
- Client and billing records: generally 7 years to comply with Dutch tax law.
- Contact/lead enquiries: up to 2 years after last contact if you do not become a client (or sooner upon request).
- Student materials/notes: for the duration of the engagement and up to 2 years thereafter, unless you request deletion earlier (subject to legal obligations).
- Cookies/analytics: per the cookie’s lifetime (see section 8).
We delete or anonymise data when no longer needed.
6) Security
We use appropriate technical and organisational measures to protect your data, including TLS/HTTPS, access controls, least-privilege practices, and secure cloud services.
7) Third-party service providers (processors)
We use trusted providers to run our website and services. These parties process personal data on our behalf under GDPR-compliant agreements and only as instructed by us. Typical providers include:
- Website/hosting and platform: Wix.
- Email and productivity: e.g., Google Workspace.
- Scheduling/meetings: e.g., Zoom.
- Payments: Wix Payments and/or third-party processors (e.g., Stripe, Mollie). These providers handle payment data directly.
- Analytics and performance: Wix analytics and/or other analytics tools.
- File delivery and storage: secure cloud storage for study materials and homework.
We may also share data when required by law, to protect our rights, or with your explicit consent.
8) Cookies and similar technologies
Our Wix website may use cookies and similar technologies to make the site work, keep it secure, remember your preferences, and understand basic usage (analytics). You can manage cookies via your browser settings. If you use an in-page cookie banner, your choices will be respected.
Typical categories: Strictly Necessary, Functional, Analytics/Performance, and Marketing. Some features may not function without certain cookies.
9) International transfers
Wix is headquartered in Israel and may store/process data on servers in the EU, Israel, the US, or other locations. Where data is transferred outside the EEA, Wix and other processors use appropriate safeguards to protect your information.
10) Your rights
Under the GDPR, you have the right to:
- Access your personal data and receive a copy.
- Rectify inaccurate or incomplete data.
- Erase your data (“right to be forgotten”) in certain cases.
- Restrict or object to processing in certain cases.
- Data portability (receive your data in a usable format).
- Withdraw consent at any time (where processing is based on consent).
To exercise your rights, email scoresprint.eu@gmail.com. We will respond within one month in line with GDPR timelines. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
11) Children and parental consent
Our services are aimed at high school students and their parents/guardians. Where a student is under 16 (the Dutch age of digital consent), we require parental or guardian consent for processing the student’s personal data and for providing services.
12) Marketing communications
We only send marketing updates with your consent or where otherwise permitted. You can opt out at any time by using the unsubscribe option in our messages or by contacting us at scoresprint.eu@gmail.com.
13) No automated decision-making
We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.
14) Changes to this policy
We may update this policy from time to time to reflect legal, technical, or business changes. The latest version will always be posted on this page, with the effective date at the top.
15) Contact
Questions about privacy or this policy?
Email scoresprint.eu@gmail.com or write to us at the address in section 1.