Skip to main content

Privacy Policy

Last Updated: March 12, 2026

This Privacy Policy explains how BdB Hold B.V. (“we”, “us”, “our”) collects, uses, and protects personal data when you visit our website and when you request information or registration details for our online professional education programs. BdB Hold B.V. operates as an independent provider of online workplace education serving learners throughout Canada.

1. Introduction & Controller Identity

BdB Hold B.V. is the data controller for the processing described in this Privacy Policy. That means we determine why and how personal data is processed when you interact with this website, submit a form, or communicate with our learner support team.

Data Controller (legal entity): BdB Hold B.V.
Registered address: Smederijstraat 24, 2861 GP Bergambacht, Netherlands
Contact email: [email protected]
Phone: +31 182 523 784

If you have questions about privacy, you can contact us using the details above. We do not appoint a Data Protection Officer for this website because we do not carry out large-scale processing of special-category data as part of the services described here.

2. Personal Data We Collect

We collect information that helps us operate the website, respond to inquiries, and provide learner support. The exact data depends on how you interact with the site.

  • Identity and contact details: name, email address, phone number, and the program or workshop you select.
  • Form content: messages, learning goals, schedule preferences, and other details you include in a registration request.
  • Technical data: IP address, browser type/version, device and operating system, language settings, approximate location derived from IP (country/region), and date/time of requests.
  • Usage data: pages viewed, time on page, referrer information, and click paths that help us understand which content is useful.
  • Cookies and identifiers: first-party cookies (for essential site functions and to store cookie choices) and, if you consent, analytics and marketing cookies described in Section 4.
  • Conversion events: events indicating that a form was submitted or that a key page was reached, used to measure performance when consent is provided.

We do not intentionally request or require special-category data (such as health information, religious beliefs, political opinions), government identification numbers, or financial account details for the normal operation of this website. Please do not include sensitive information in free-text form fields.

3. Why We Process Personal Data & Legal Basis (GDPR Art. 6)

We process personal data only when we have a lawful basis under the General Data Protection Regulation (GDPR). The lawful basis depends on the purpose.

  • Contact and registration requests: to receive, review, and respond to your request; to provide registration instructions and learner support. Legal basis: Art. 6(1)(b) (steps prior to entering a contract) and Art. 6(1)(a) (consent) where applicable.
  • Analytics (optional): to understand how the site is used and improve content, navigation, and performance. Legal basis: Art. 6(1)(a) (consent).
  • Marketing/remarketing (optional): to measure advertising performance, attribute conversions, and build audiences for advertising campaigns. Legal basis: Art. 6(1)(a) (consent).
  • Security and fraud prevention: to protect the website and users, prevent abuse, and maintain service integrity. Legal basis: Art. 6(1)(f) (legitimate interests).
  • Legal obligations: to comply with applicable legal requirements. Legal basis: Art. 6(1)(c) (legal obligation).

Automated decision-making (GDPR Art. 22): We do not engage in automated decision-making or profiling that produces legal or similarly significant effects. When we route inquiries (for example, based on a selected program), it is used to direct your message to the right educational workflow and does not create binding decisions about eligibility.

4. Cookies & Tracking

We use cookies and similar technologies to run the website and, if you choose, to understand usage and measure advertising performance. Cookies are small text files stored on your device. Some cookies are set by us (first-party), and others may be set by third-party providers.

We group cookies and tracking into three categories. These categories match our Cookie Policy.

Essential cookies (always active)

Essential cookies are required for the website to function. They support core features such as maintaining a site session and storing your cookie preferences. These cookies do not require consent under EU rules when used strictly for necessary functions.

  • Examples: _site_session, cookie_consent.
  • Typical retention: session to 12 months depending on the cookie.

Analytics cookies (consent-based)

If you consent to analytics cookies, we may use Google Analytics 4 (GA4) to understand aggregated site usage, such as which pages are visited and how users navigate between sections. Where available, IP anonymisation is used to reduce identifiability. Analytics helps us improve curriculum descriptions, learning resources, and site performance.

  • Examples: _ga, _ga_XXXXXXXXXX.
  • Data retention: typically 14 months for analytics reporting settings.

Marketing cookies (consent-based)

If you consent to marketing cookies, we may use cookies and pixel tags for advertising measurement, remarketing, and conversion attribution. These tools help us understand which ads lead to site visits or form submissions, and they may be used to build custom and lookalike audiences.

  • Examples: _gcl_au, _fbp, _fbc.
  • Typical retention: up to 90 days, depending on the provider and configuration.

Beyond cookies, some measurement tools rely on pixel tags and server-side events (for example, where conversion events are sent from a server after a form is submitted). These events can include identifiers derived from a combination of IP address and User-Agent. If used, these tools are enabled only when you have provided appropriate consent for the relevant category.

5. Consent (EEA/UK)

Users in the European Economic Area (EEA) and the United Kingdom receive a consent notice under GDPR/UK GDPR. Analytics and marketing cookies activate only after explicit, informed, freely given consent (Art. 6(1)(a)).

Your choice is recorded in the cookie_consent browser cookie (stored for up to 12 months). You can withdraw consent at any time by using “Manage cookie preferences” in the footer or by clearing cookies in your browser. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. Sharing With Advertising & Service Partners

We use service providers to operate and improve the website. Depending on your consent settings, some providers may receive limited data such as cookie identifiers, page events, and conversion signals.

We do not sell personal data. We instruct providers to process data on our behalf for the purposes described in this Privacy Policy. These providers may not use site data for their own independent commercial purposes.

7. International Transfers

Some providers (for example, Google and Meta) may process data outside the EEA/UK, including in the United States. When personal data is transferred internationally, we rely on lawful transfer mechanisms such as the EU–US Data Privacy Framework (DPF) where applicable, the UK Extension to the DPF, and where needed, Standard Contractual Clauses (EU 2021/914) or the UK International Data Transfer Addendum/IDTA as fallback mechanisms.

We also apply practical safeguards where feasible, such as minimisation of data and the use of consent-based activation for marketing and analytics tools.

8. Retention

We keep personal data only as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.

  • Contact and registration submissions: typically up to 2 years from the last interaction, to support follow-up and learner support continuity.
  • Email correspondence: for the duration of the relationship plus 1 year, unless longer retention is needed for legal reasons.
  • Server logs and security records: typically up to 90 days, unless required for investigation of abuse or incidents.
  • Analytics data: typically 14 months (as configured in analytics tools), subject to your consent choices.
  • Marketing cookies: retained according to cookie lifetimes (often 90 days), subject to your consent choices.
  • Cookie consent record: up to 3 years for audit and compliance purposes.
  • Legal and tax: where applicable, retained for periods required by Dutch law (often 7 years for business administration records, depending on the record type).

9. Your Rights (GDPR & UK GDPR)

If GDPR/UK GDPR applies to you, you have rights regarding your personal data. These include:

  • Right of access (Art. 15)
  • Right to rectification (Art. 16)
  • Right to erasure (Art. 17)
  • Right to restriction of processing (Art. 18)
  • Right to data portability (Art. 20)
  • Right to object (Art. 21)
  • Right to withdraw consent at any time (Art. 7(3))
  • Right to lodge a complaint with a supervisory authority (Art. 77)

To exercise your rights, email us at [email protected]. We normally respond within 30 days. For complex requests, this may be extended by up to an additional 60 days, as permitted by law.

In the Netherlands, the supervisory authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). You can learn more at https://autoriteitpersoonsgegevens.nl/. For general EU information, you can also visit https://edpb.europa.eu/.

10. Children

This website is not directed at individuals under 16. We do not knowingly collect personal data from minors. If you believe a child under 16 has provided personal data without verifiable parental consent, contact us and we will take reasonable steps to delete the information promptly.

11. Do Not Track

Some browsers offer “Do Not Track” (DNT) signals. This website does not respond to DNT signals. Third-party providers may have their own handling of such signals; please review their documentation for details.

12. Data Deletion Requests

You can request deletion of personal data by emailing [email protected] with the subject line “Data Deletion Request”. We may ask for additional information to verify your identity and locate relevant records. We aim to complete requests within 30 days, unless legal obligations require continued retention of certain records.

13. Business Transfers

If BdB Hold B.V. undergoes a merger, acquisition, reorganisation, asset sale, financing, or insolvency event, personal data may be transferred as part of that transaction. If such a transfer materially changes how personal data is used, we will provide notice on the website.

14. California (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) may provide additional rights. Over the past 12 months, we may have collected categories of personal information such as identifiers (name, email, IP address, device identifiers) and internet/network activity (site interactions). If you consent to marketing cookies, data may be shared with advertising partners for cross-context behavioral advertising.

We do not sell personal information as defined by CCPA. We may share personal information for cross-context behavioral advertising when consent is provided, and you can opt out via our cookie preferences panel.

California residents may have the right to know, delete, correct, and opt out of sale/sharing, and the right to non-discrimination. To submit a request, email [email protected] with the subject “California Privacy Request”. We may need to verify your identity. Authorized agents may submit requests with proof of authorisation.

15. Virginia (VCDPA)

If you are a Virginia resident, you may have rights to access, correct, delete, and obtain a copy of your personal data, and to opt out of targeted advertising. We do not sell personal data or engage in profiling that produces legal or similarly significant effects.

To submit a request, email [email protected] with the subject “Virginia Privacy Request”. If we deny your request, you may appeal by emailing with the subject “Appeal of Refusal — Privacy Request”. We will respond to appeals within 60 days. If your appeal is unsuccessful, you may contact the Virginia Attorney General.

16. Nevada

Nevada residents may submit a verified opt-out request by emailing us with the subject “Nevada Do Not Sell Request”. We do not currently sell personal information under Nevada Revised Statutes Chapter 603A.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or how the website operates. If changes are material, we will provide a notice on the homepage at least 14 days before the update takes effect. The “Last Updated” date at the top of this page will also be revised.

18. Contact

For privacy questions, requests, or complaints, contact:

BdB Hold B.V.
Smederijstraat 24
2861 GP Bergambacht, Netherlands
Email: [email protected]
Phone: +31 182 523 784