Privacy Policy for Sakura Japanese Workshop
Last updated: [update date]
Applicable to: sakurajapanese.nl
Sakura Japanese Workshop (“we,” “our,” “us”) is committed to protecting your personal data and ensuring transparency about how we collect, use, and store information. This Privacy Policy explains what data we collect, why we collect it, and how we keep it secure.
We operate in accordance with the EU General Data Protection Regulation (GDPR) and relevant Dutch privacy laws.
1. Data Controller
Sakura Japanese Workshop
The Hague, The Netherlands
Email: info@sakurajapanese.nl
Website: https://www.sakurajapanese.nl
2. Personal Data We Collect
We may collect the following categories of personal data:
2.1 Information you provide directly
-
Name
-
Email address
-
Phone number
-
Preferred lesson time and course type
-
Level of Japanese or learning goals (if submitted voluntarily)
-
Message content via contact forms
-
Booking information for trial lessons
-
Payment details when using Stripe (we do not store full card details)
2.2 Information collected automatically
-
IP address
-
Browser type and device information
-
Pages visited and time spent on the website
-
Referring URL
-
Cookies and tracking pixels
2.3 Information collected from advertising platforms
We use:
-
Google Ads (including Lead Form Extensions)
-
Meta Ads (Facebook/Instagram)
Data collected may include:
-
Name and email submitted through Google Lead Forms
-
Campaign- or ad-level tracking information
-
Conversion data (e.g., form submitted, trial booked)
We process this data for marketing purposes and to follow up with your inquiry.
3. How We Use Your Data
We use your personal data for the following purposes:
-
To respond to inquiries and provide information about our classes
-
To manage bookings for trial lessons and regular courses
-
To send invoices and process payments
-
To improve our website and services
-
To run advertising campaigns (Google Ads, Meta Ads)
-
To follow up with potential students who submitted lead forms
-
To send newsletters or updates (only when consent is provided)
-
To meet legal and tax obligations
We will not sell your data to third parties.
4. Legal Basis for Processing
We process your data under these GDPR legal bases:
-
Consent — when you submit a form, subscribe to a newsletter, or accept marketing cookies
-
Contractual necessity — when managing bookings or purchases
-
Legitimate interest — analytics, marketing optimization, fraud prevention
-
Legal obligation — invoicing and tax requirements
5. Sharing Your Data
We may share your data with trusted third parties:
-
Wix – website hosting and form handling
-
Stripe – secure payment processing
-
Google Ads / Google Analytics – advertising and analytics
-
Meta Ads – advertising
-
Email service providers – for newsletters and communication
-
Booking or scheduling tools (if used)
All third parties comply with GDPR and process data under appropriate agreements.
We do not transfer your data outside the EU except where the service provider is certified under appropriate mechanisms (e.g., EU-US Data Privacy Framework).
6. Cookies & Tracking Technologies
Our website uses cookies for:
-
Website functionality
-
Analytics (Google Analytics 4)
-
Advertising (Google Ads, Meta Pixel)
-
Conversion tracking
-
Traffic measurement and optimization
Visitors can manage or withdraw cookie consent at any time through our cookie banner.
7. Data Retention
We retain personal data only as long as necessary:
-
Contact form inquiries: 12 months
-
Customer data related to purchases: 7 years (Dutch tax law)
-
Google or Meta lead data: up to 90 days, unless you become a customer
-
Newsletter subscription: until you unsubscribe
8. Your Rights Under GDPR
You have the following rights:
-
Access your personal data
-
Request correction or deletion
-
Withdraw consent at any time
-
Request data portability
-
Object to processing
-
File a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
To exercise these rights, contact us at info@sakurajapanese.nl.
9. Security Measures
We take appropriate measures to protect your data:
-
Encrypted website (HTTPS)
-
Secure servers via Wix
-
Restricted access to personal data
-
Encrypted payment processing via Stripe
-
Regular security reviews
10. Children’s Privacy
Our services are offered to individuals of all ages, but we only collect children’s personal data when provided voluntarily by a parent or guardian for class registration.
We do not knowingly collect children’s data directly without parental consent.
11. Changes to This Policy
We may update this Privacy Policy periodically. The updated version will always be posted on this page with a new “Last updated” date.
12. Contact
If you have any questions regarding this Privacy Policy or your personal data, please contact:
