Last updated: 31 August 2026
This page explains what we do with your personal data when you buy a book here. It is written to be read, not to be skimmed past.
The short version: we collect what we need to take your order and deliver your files, we keep the invoice as long as Dutch tax law requires, we do not sell anything to anyone, and there is no advertising tracker on this site. We do measure how the shop is used, but only if you agree to it first.
Who is responsible for your data
Chilla Verhagen
Ham 10
2685 WG Poeldijk, the Netherlands
Chamber of Commerce (KvK): 64875482
Email: emma@femalepsychologywithemma.com
We are the data controller. Because we are established in the Netherlands, the General Data Protection Regulation applies to everything we do with your data, wherever in the world you live.
What we collect, and why
- Your name and email address — to send your order confirmation and your download links, and to answer you if you write to us. Basis: performance of the contract.
- Your billing address and country — required on the invoice, and used to determine which tax rules apply. Basis: legal obligation.
- What you ordered, the amount and the date — to deliver it and to keep proper books. Basis: contract and legal obligation.
- The payment reference from Stripe — to match your payment to your order and to handle refunds or claims. Basis: contract and legitimate interest.
- Which files you downloaded and when — to reissue links when they fail, and as evidence if a payment is later questioned. Basis: contract and legitimate interest.
- IP address, browser and device information — security and diagnosing faults. Basis: legitimate interest.
- How you reached the shop (referring page, campaign tags if present) — to understand which of our own videos and pages lead to a sale. Basis: legitimate interest.
- How you move through the shop (which pages you view, which books you open, what you put in the basket, how far you get in checkout, and whether you buy) to see where people give up. This is Google Analytics, and it only runs if you accept analytics in the cookie banner. Basis: your consent.
We do not ask for anything we do not need. There is no birth date field, no phone requirement, no survey.
Your card details
We never see them. Payments are handled by Stripe, and your card number is entered directly into a field served by Stripe, not by us. What comes back to us is a reference, the last four digits, and whether the payment succeeded.
Stripe processes that data as an independent controller under its own privacy policy, which you can read on the Stripe website.
Who else sees your data
- Stripe — payment processing and claim handling.
- Google — Google Analytics and Google Tag Manager, which measure how the shop is used. Nothing reaches Google unless you accept analytics in the cookie banner.
- Our hosting provider — the servers where this site and its database run, in the Netherlands.
- Our email delivery — the mail server that sends your confirmation and download links.
- Our accountant and the Dutch tax authority — invoices, where the law requires it.
That is the whole list. We do not sell personal data, we do not rent it, and we do not pass it to advertisers or data brokers. There is no Meta pixel and no advertising cookie on this site, and the Google Analytics data is never used for advertising.
Data leaving Europe
Stripe is part of a group of companies with operations in the United States, so some payment data may be processed outside the European Economic Area. Those transfers rely on the European Commission’s Standard Contractual Clauses and on Stripe’s own safeguards. Google Analytics is the same story: if you accept it, some of that measurement data is processed by Google in the United States, under the same Standard Contractual Clauses. Everything else — the site, the database, the files, the email — stays on servers in the Netherlands.
How long we keep things
- Invoices and order records: seven years. Dutch tax law requires it and we have no discretion about it.
- Your download history: for as long as the shop exists, so that we can reissue your links if you lose them. Ask us to delete it and we will, subject to the invoice retention above.
- Emails you send us: two years, then deleted.
- Server logs: a few weeks, then overwritten.
- Analytics data: held by Google for the retention period set on the property, after which the visitor-level records are deleted and only aggregated figures remain.
Cookies
This site sets the cookies it needs to work, and, only if you allow it, two analytics cookies:
- WooCommerce — remembers what is in your basket and keeps you signed in through checkout.
- WooCommerce order attribution — seven short
sbjs_cookies that note which link brought you here, so an order can be traced back to the video or page that led to it. They last only for the visit. - Stripe — security checks on the payment step.
- WordPress — a session cookie, only if you are signed in to the site itself. Buying a book does not create an account and does not sign you in.
- Complianz — remembers the cookie choice you made, so the banner stops asking.
- Google Analytics (
_gaand_ga_X3430E2MD5) — set only after you press Accept. They let us count visitors and see where in the shop people stop. Press Decline and they are never set.
Until you choose, nothing is sent to Google at all. The analytics tag is held back entirely, not merely stripped of its cookies. You can change your mind at any time through the cookie banner, and if your browser sends a Do Not Track or Global Privacy Control signal we treat that as a decline and never ask. There are no advertising cookies on this site.
Marketing
Buying a book does not sign you up to anything. We do not run a mailing list at the moment. If we start one, joining will be a deliberate act on your part and every message will have an unsubscribe link.
Your rights
Under the GDPR you can ask us to:
- tell you what data we hold about you, and give you a copy;
- correct anything that is wrong;
- delete your data, where we are not legally required to keep it;
- restrict what we do with it, or object to processing based on legitimate interest;
- hand your data to you, or to someone else, in a portable format.
Email emma@femalepsychologywithemma.com and we will respond within one month. We will not charge you and we will not make it difficult.
If you live in California or another US state with its own privacy law, you have comparable rights, including the right to know what we collect and to ask for deletion. We do not sell or share personal information as those laws define it. Use the same email address.
If you are not happy with how we handled it
Tell us first — we would rather fix it. You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the supervisory authority in the country where you live.
Children
These books are written for adults, and this shop is not directed at anyone under sixteen. We do not knowingly collect data from children. If you believe a child has given us data, write to us and we will delete it.
Security
The site runs over an encrypted connection. Payment data never touches our servers. Access to order data is limited to the people who need it to run the shop. No system is perfectly secure, but if a breach ever affects your data we will tell you and the regulator, as the law requires.
Changes to this policy
If we change this page we will update the date at the top. If a change materially affects how we use your data, we will say so clearly rather than quietly editing the text.