This Privacy Policy explains how Isabel Fonseca ("I", "me", "my") collects, uses and protects your personal data when you visit isabelfonseca.com or get in touch through this website. It is written to comply with the EU General Data Protection Regulation (GDPR).
I take your privacy seriously and only collect the information I genuinely need to respond to you and provide my coaching services.
Who is responsible for your data
The data controller for this website is Isabel Fonseca, trading as NextFem Leaders School, based in Amsterdam, the Netherlands.
You can reach me about anything in this policy by email at info@isabelfonseca.com.
Chamber of Commerce (KvK) number: 91062144. VAT (BTW) number: NL004862163B22.
What information I collect
I only collect personal data that you choose to give me. Depending on how you use the site, that may include:
- Contact form — your first and last name, email address, phone number (optional) and the message you send.
- Personalised-events enquiry form — your name, email address, phone number, the type of event you are interested in, preferred date, event location, budget, number of participants, preferred method of contact and any additional comments.
- Newsletter — your email address, if you choose to subscribe.
- Next-Level Scorecard — your answers to the scorecard questions and, if you ask for your snapshot by email, your first name and email address. When you book a strategy session from the scorecard, your snapshot is passed to the booking form. If you arrived from an advert or a campaign link, I record which campaign it was (the "utm" tags in the web address).
How I use your information, and my legal basis
I use the information you provide to respond to your enquiry, to discuss and deliver coaching or events, and — if you have asked for it — to send you my newsletter. Scorecard answers are used to email you your snapshot if you ask for it, to prepare your strategy session if you book one, and to follow up with you personally about your snapshot.
Your scorecard snapshot is put together automatically, but it is a coaching self-assessment only: it has no legal or similarly significant effect on you, and everyone who completes it is offered a free strategy session. I do not otherwise use your data for automated decision-making or profiling.
Under the GDPR, my legal bases for processing your data are:
- Taking steps at your request before entering into a contract, and my legitimate interest in responding to your enquiries — for the contact form.
- Taking steps at your request — for booking a strategy session from the Next-Level Scorecard.
- Your consent, given when you ask for your Next-Level Scorecard snapshot by email — to send it to you and to follow up with you personally, as the form explains. I will not add you to my newsletter unless you subscribe separately, and you can ask me to stop at any time.
- Your consent — for sending you the newsletter. You can withdraw this at any time using the unsubscribe link in every email.
- My legitimate interest in understanding how the site is used, so I can improve it — for the cookieless analytics described below.
Cookies and analytics
This website does not use tracking or advertising cookies, and there is no cookie banner because none is needed.
To understand how the site is used, I use privacy-friendly, cookieless analytics (Vercel Web Analytics and PostHog). Neither stores cookies or anything else on your device, and neither identifies individual visitors. They measure aggregate traffic and which links on the site are clicked. On the scorecard page they also count, in aggregate, how many people start, complete, email and book from the scorecard, and which campaign they came from.
To tell one visit from another within a day, PostHog briefly uses your IP address and browser type to create a temporary code that changes every day. Your IP address itself is not stored, and PostHog's servers are in the EU.
The scorecard page uses no ad pixels. Your answers stay in your browser while you answer; nothing is sent until you ask for your results by email.
Who I share your information with
I never sell your personal data. I share it only with the service providers that help me run this website and respond to you, and only as far as needed. Each acts as a data processor under a data-processing agreement:
- Resend — delivers form submissions to my inbox as email, and sends you your scorecard results if you ask for them.
- MailerLite — manages newsletter subscriptions and sends newsletter emails, if you have subscribed.
- Vercel — hosts this website and provides the cookieless analytics described above.
- PostHog — provides the cookieless analytics described above, including the link-click and scorecard counts.
- Calendly — if you book a free strategy session, your booking details are handled by Calendly under its own privacy policy. When you continue to booking from the scorecard, your name, email address, a summary of your scorecard and the campaign you came from are passed to Calendly to pre-fill the booking form.
International data transfers
Some of these providers process data outside the European Economic Area, including in the United States. Where that happens, the transfer is protected by appropriate safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
How long I keep your information
I keep enquiry messages and scorecard results for as long as needed to respond to you and for a reasonable period afterwards in case of follow-up, then delete them. Newsletter subscription data is kept until you unsubscribe. Where I am legally required to keep records (for example, for tax purposes), I keep them for the period the law requires.
Your rights
Under the GDPR, you have the right to:
- Access the personal data I hold about you.
- Have inaccurate data corrected.
- Have your data erased.
- Restrict or object to how I process your data.
- Receive your data in a portable format.
- Withdraw consent at any time, where processing is based on consent.
Exercising your rights and making a complaint
To exercise any of these rights, email me at info@isabelfonseca.com and I will respond within one month.
If you believe I have not handled your data properly, you have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
Changes to this policy
I may update this policy from time to time. Any changes will be posted on this page with a revised "last updated" date.