Privacy Policy

This policy explains what personal data we collect when you visit our site, place an order, or order a Refill Pack, why we collect it, and the rights you have over it. We keep data collection strictly limited to what we need to deliver our products and support your team.

01

Who we are

Orange Minds B.V. is the data controller responsible for your personal data.

Company: Orange Minds B.V.
Address: Grasweg 163, 1031 HX Amsterdam, The Netherlands
CoC (KvK): 83833552 | VAT-ID: NL863003928B01
Contact: hello@curatedworkshops.com

02

What we collect

Depending on how you interact with Curated, we collect:

• Order, invoicing and shipping details. Your name, email, company name, billing and shipping address, VAT number where applicable, and the invoice details needed to fulfil orders, including bulk orders processed by invoice.
• Refill Pack details. The unique code printed inside your box, and the email address you give us when you order a Refill Pack. We use the code to confirm that the box exists and that a refill is due, and the email address to send you the order. The Script, the audio Guide Notes, the invite templates and the host tips are reached through the QR code in the box and need no code and no email address.
• Newsletter subscription, optional. Your email address, if you explicitly choose to subscribe.
• Payment data. Online card payments are handled directly by Stripe. We never see, process, or store your full card details.
• Communications and booking details. Email correspondence and the information you provide when booking a call with Robert or Margriet.
• Workshop feedback. What you tell us through the feedback page in the box, if you choose to fill it in.
• Waitlist and workshop voting data. Your email address, product votes, and interest preferences when you join a waitlist for upcoming workshops or vote on future box topics.
• Usage data. Anonymised analytics on site usage. See section 07.

03

Why we use it, and our legal basis

• To ship your order, send invoices and supply Refill Packs: performance of a contract. We need your details to deliver physical boxes and process payment, whether by card or by invoice.
• To send our newsletter: consent. If you opt in, we send at most one email per month. You can unsubscribe with a single click. We never use your data for marketing emails unless you have subscribed.
• To answer questions and host calls: legitimate interest. Helping you prepare for your session or answering questions about room setup.
• To improve the workshops: legitimate interest. Reading the feedback you send us after running a box.
• To meet legal and tax obligations: legal obligation. Retaining order and invoice records for Dutch tax compliance.
• To notify you about new workshops and waitlist updates: consent. If you sign up for a waitlist or vote for a topic, we use your email address to tell you when that box launches. You can opt out at any time.

04

Who we share it with

We never sell your personal data. This is the complete list of the parties that process data on our behalf, and what each of them does. It is the only such list we keep, so there is nothing to compare it against and nothing that can quietly fall out of date.

Some of these providers process data outside the European Economic Area. For HubSpot and for Google, transfers are covered by the EU-US Data Privacy Framework. For the others, transfers are covered by the European Commission's Standard Contractual Clauses.

05

How long we keep it

We retain order, invoice and accounting records in SnelStart for seven years, because Dutch tax law requires it. Box codes and the email address attached to them are kept for as long as the box is in use, so that Refill Packs can be ordered. Support emails and CRM records are kept for as long as necessary to support your workshop, or until you ask us to delete them. Newsletter subscriber data is stored until you unsubscribe. Workshop feedback is kept for as long as we are improving that box. If you left your email address with it, we remove that address once we have replied to you, so what is left cannot be traced back to a person.

06

Your rights

Under the GDPR, you have the following rights regarding your data:

• Access and rectification. The right to view or update your data.
• Erasure and restriction. The right to request that we delete or restrict the processing of your data.
• Data portability. The right to receive a copy of your personal data in a structured, commonly used digital format.
• Objection and consent withdrawal. The right to object to processing or unsubscribe from communications at any time.

To exercise any of these rights, email us at hello@curatedworkshops.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority, Autoriteit Persoonsgegevens.

07

Cookies and how we measure visits

We use functional cookies to keep the website working. For anything beyond that, there are two separate things, and the difference matters.

Framer Analytics runs on every visit and asks you nothing. It sets no cookie and stores nothing on your device. To tell visits apart it combines your IP address and browser into a hashed value using a secret that changes every day, which means the value cannot be traced back to you and cannot be followed from one day to the next. There is no profile and nothing is sold on. Because nothing is stored on or read from your device, no consent is required for it. We still tell you it happens, because measuring is processing.

Google Analytics only runs if you accept it. It does place a cookie on your device, so it stays off until you say yes in the cookie banner, and you can change your mind at any time through the cookie settings in the footer.

For the full cookie details, see our Cookie Policy.

08

Changes

If we update this policy, we will update the date at the top. Material changes will be communicated via our site or directly by email.