Privacy Statement

Who is responsible for your data?

UPLFT is operated by Wouter Boot, trading as UPLFT. UPLFT is responsible for the personal data processed through this website, applications, payment flow, and cohort delivery.

• Company name: UPLFT
• KvK number: 52241378
• VAT ID: NL001133968B22
• Email: wout@uplft.net

What personal data do I collect?

I collect the data you provide when you apply, communicate with me, reserve a seat, pay, or join the cohort. This may include:

• name and email address
• business, service, website, LinkedIn profile, and current business stage
• application answers about your 6-week goal, blockers, support needs, availability, and what you can offer others
• billing details such as buyer type, billing country, legal business name, VAT ID, KVK number, and billing address when provided
• payment status and invoice-related information
• messages, onboarding answers, check-ins, commitments, proof points, feedback, and permission preferences during the cohort

I do not ask for special categories of personal data, such as health information, religious beliefs, political opinions, or criminal data. Please do not include that kind of information in your application or check-ins.

Why do I use your data?

I use your personal data for these purposes:

• to review your application and assess fit for the cohort
• to contact you about your application, acceptance, payment, onboarding, and cohort participation
• to reserve your seat, process payment, create invoices, and keep required business records
• to run the cohort, match circles, facilitate weekly sessions, support check-ins, and protect the standard of the group
• to collect anonymized proof, feedback, and learning so I can improve the program and explain what happened
• to ask for explicit permission before using any identifiable testimonial, screenshot, photo, business name, or specific outcome publicly
• to keep the website, form, payment flow, and records secure

Legal bases

Depending on the situation, I process your data because:

• it is necessary before entering into an agreement or to deliver the cohort after acceptance
• it is necessary to comply with legal obligations, such as tax and accounting rules
• there is a legitimate interest in reviewing applications, running a safe and useful cohort, improving the offer, and keeping records secure
• you have given permission for specific uses, such as optional proof or testimonial use; nothing identifiable is shared publicly without explicit written approval

Who can receive your data?

I do not sell your personal data. I only share data when needed to run the website, application, payment, administration, or cohort. Relevant service providers may include:

• Formspree, for application form submissions
• Stripe, for payments, tax, invoices, and payment records; UPLFT receives payment confirmation and invoice details, not your full card details
• Cloudflare Pages, for website hosting and security
• email and administration tools used to communicate and keep business records
• WhatsApp, if you join a private cohort circle

If you click an external link, such as LinkedIn, that service processes data under its own privacy policy.

International transfers

Some service providers may process data outside the European Economic Area. Where that happens, I rely on the safeguards provided by those service providers, such as adequacy decisions, standard contractual clauses, or other GDPR-approved transfer mechanisms.

How long do I keep your data?

I do not keep personal data longer than necessary. In general:

• application data from people who do not join is normally kept for up to 12 months, unless a shorter or longer period is needed for follow-up, disputes, or legal reasons
• participant data is kept for as long as needed to run the cohort, provide support, evaluate results, and maintain reasonable business records
• invoice, tax, and accounting records are kept for the legally required retention period
• anonymized proof, lessons, and aggregate insights may be kept longer because they are no longer intended to identify you

Security

I take reasonable measures to protect personal data, including using reputable service providers, limiting access, and only collecting data that is needed for the application, payment, and cohort process.

Your rights

Under the GDPR, you may have the right to access, correct, delete, restrict, transfer, or object to the use of your personal data. You may also withdraw permission where processing is based on permission.

To make a request, email wout@uplft.net. I may need to verify your identity before handling the request.

You also have the right to lodge a complaint with the Dutch Data Protection Authority, Autoriteit Persoonsgegevens.

Cookies and analytics

This website does not currently use advertising cookies, tracking cookies, or analytics scripts placed by UPLFT. Basic technical data may be processed by the hosting provider to make the website work and keep it secure. If this changes, this privacy statement will be updated.

Changes

This privacy statement may be updated when the website, application process, payment flow, or cohort delivery changes. The latest version will be available on this page.