What we do with your data, in plain language.

1. Who is responsible

Plentiful is run by Dorothy Seguy and Laura Hockensmith, trading as Plentiful, Tuinstraat 133, 1015 PA Amsterdam, the Netherlands. We are the controller for the data described here. Anything about this policy: [email protected].

2. The short version

• We collect your email address when you ask for it: to get the letter, a resource, or a seat in a programme.
• We never sell, rent or swap your data.
• This website sets no cookies and runs no tracking scripts.
• Every email we send has a one-click unsubscribe.
• You can ask us at any time what we hold about you, and to correct or delete it.

3. What we collect, why, and on what basis

The letter. When you subscribe to Letters from Plentiful we store your email address and the date and source of your subscription (for example "website, resources page"). We use it to send you the weekly letter. Legal basis: your consent, which you can withdraw with the unsubscribe link in any email.

Resources. When you request a free resource (a cheat sheet, a worksheet, a brief), we store your email address and which resource you asked for, and we email it to you. Legal basis: performing what you asked for. If you also tick the box for the letter, that is a separate consent, handled as above. If you don't tick it, you get the resource and nothing else.

Companies. When you request the Money Made Simple brief with a work email, we store your email address and may follow up once, personally, about workshops for your organisation. Legal basis: our legitimate interest in responding to a business enquiry. You can tell us to stop at any time and we will.

Programmes and bootcamps. When you register for a paid programme we store your name, email address, invoice details and payment confirmation, and any answers you give in a pre-session survey. We use them to run the programme, send you practical information, and meet our bookkeeping obligations. Legal basis: the contract with you, and the legal duty to keep financial records.

Contact. If you email us, we keep the correspondence for as long as needed to deal with it and, for business contacts, to keep the relationship going. Legal basis: legitimate interest.

Email engagement. Our email platform records whether a letter was opened and which links were clicked. We use this in aggregate to see what is read and to improve the letter, and occasionally to invite our most engaged readers to a short conversation. You can turn off open tracking in your subscriber settings. Legal basis: legitimate interest.

This website. The site sets no cookies and loads no third-party scripts, fonts or analytics. Our host, Cloudflare, processes your IP address and browser details to deliver the pages and protect against abuse, and keeps short-lived server logs for that purpose.

4. Who processes data for us

Provider	What for	Where
beehiiv, Inc.	Newsletter, subscriber list, resource delivery, subscribe forms	United States, under the EU Standard Contractual Clauses
Cloudflare, Inc.	Website hosting and protection	EU data centres where available; Cloudflare's EU Data Processing Addendum applies
[Payment provider]	Payments for programmes	[To confirm once the checkout is set]
[Video platform, e.g. Zoom or Teams]	Live online sessions	[To confirm]
Our accountant	Invoices and bookkeeping	Netherlands

Each of them may only use your data to provide their service to us. We don't share your data with anyone else, unless the law requires it.

5. How long we keep it

• Letter and resource subscribers: until you unsubscribe. Unsubscribed addresses stay on a suppression list so we don't email you again by mistake.
• Business enquiries: as long as the relationship is active, and at most two years after our last contact.
• Programme registrations and invoices: seven years, because Dutch tax law requires it.
• Survey answers from sessions: anonymised after the programme ends.

6. Your rights

You can ask us to show you the data we hold about you, correct it, delete it, restrict what we do with it, or give it to you in a portable format. You can object to processing based on legitimate interest, and withdraw consent at any time without affecting what happened before. Email [email protected]; we answer within a month. If you're not happy with our answer, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

7. Children

Plentiful is for adults. We don't knowingly collect data from anyone under 16. If you think we have, tell us and we'll delete it.

8. Security

Data lives with the providers above, behind their access controls, and access on our side is limited to the two of us. This website is served over HTTPS only.

9. Changes

If we change this policy in a way that matters, we'll say so in the letter and update the version and date at the top of this page.

Note for Laura and Dorothy: this is a proposal, not legal advice. The bracketed items need filling in, and a one-hour review by a Dutch privacy lawyer is worth it before the paid programmes scale.