Version: 20 August 2026

Introduction

Your privacy is important to me. That is why I handle your personal data with care and confidentiality, in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch data protection law.

In this privacy statement, you can read which personal data I process, why I do so, and how I handle it. This statement also explains what rights you have regarding the processing of your personal data.

This statement applies exclusively to my services and website. My website, www.tristanlavender.com, may contain links to third-party websites, such as LinkedIn, YouTube, and Spotify. I am not responsible for how these parties handle personal data and cookies, and recommend that you consult their privacy and cookie policies.

About Tristan Lavender Speaking & Consulting

Where “I” or “my” is used in this statement, it refers to my sole proprietorship, Tristan Lavender Speaking & Consulting, based in Ede (6717 XM), the Netherlands, and registered with the Dutch Chamber of Commerce (Kamer van Koophandel) under number 68514433.

If you have any questions about privacy or the protection of your personal data, please contact me at info@tristanlavender.com

Use of personal data

How I obtain personal data

I process your personal data because you use my services and/or because you provide this information to me yourself, for example when you subscribe to my newsletter or submit a contact request. In the context of a consultancy engagement, I may also receive personal data from a client.

Personal data I process

Below is an overview of the personal data I may process about you:

• Your first and last name
• Your organization’s name and address
• Your job title
• Your email address and email correspondence
• Your telephone number
• Your profile photograph
• Your internet browser and device type
• Your IP address
• Event-related information
• Billing and payment information
• Information about your activities on this website
• Information provided during intake calls, keynote presentations, workshops, or consultancy engagements

I do not process more personal data than is necessary for the purposes described below.

Purposes and legal bases for processing

I process personal data for the following purposes. For each purpose, I explain the applicable legal basis under the GDPR.

  • To respond to contact requests submitted through my website, by email, or by telephone. – Because I have a legitimate interest in doing so.
  • To contact you or respond to questions as part of providing my services. – Because this is necessary for the performance of the agreement.
  • To issue invoices and process payments. – Because this is necessary for the performance of the agreement.
  • To comply with a legal obligation, such as filing tax returns. – To comply with a legal obligation.
  • To send my newsletter. – Based on consent.
  • To display a testimonial on my website and/or in other communication channels. – Based on consent.
  • To improve the user experience on this website. – Because I have a legitimate interest in doing so.

Special categories of personal data and/or sensitive data

I do not explicitly ask for special categories of personal data through my website, such as information about diagnoses such as autism or ADHD. When you submit a contact form or send me an email, I ask you to exercise discretion when sharing such personal information. If you nevertheless choose to voluntarily share this type of information with me, I will process it only to the extent necessary to respond to your question or message.

During consultancy engagements, keynote presentations, and workshops, participants may also voluntarily share personal experiences or circumstances, including information about autism, ADHD, or other forms of neurodivergence. I treat this information as strictly confidential. In reports or advice provided to clients, such information is only anonymized and processed at group level, and is never shared in a way that could identify you without your prior, explicit consent.

Minors

I do not intend to collect personal data from website visitors under the age of 16, unless they have consent from a parent or guardian. However, I cannot verify whether a visitor is over the age of 16. If you believe that I have collected personal data from a minor without such consent, please contact me, and I will delete the information.

How long I retain your data

I do not retain your personal data for longer than is necessary to achieve the purposes for which it was collected.

I retain data that you have provided based on your consent for as long as you have not withdrawn your consent and as long as the data remains necessary for the purpose for which it was collected.

For data subject to a statutory tax or administrative retention requirement, I retain the data for the legally required period of seven years.

Sharing data with third parties

I never sell your personal data to third parties. I only share your personal data with third parties when this is necessary to perform an agreement with you, when you have given your consent, or when I am legally required to do so.

I enter into data processing agreements with parties that process personal data on my behalf (processors) to ensure an appropriate level of security and confidentiality. I remain responsible for these processing activities.

International data transfers

Some of my service providers may need to process personal data outside the European Economic Area (EEA). Where this is the case, I ensure that appropriate safeguards are in place to protect your personal data.

For sending my newsletter, I use Kit, a service provider based in the United States. Kit uses the EU-U.S. Data Privacy Framework and, where applicable, Standard Contractual Clauses (SCCs) to provide appropriate protection for personal data.

Automated decision-making

I do not use automated decision-making. Decisions are made by me and not solely by automated systems.

Accessing, correcting, or deleting your data

Under the European General Data Protection Regulation (GDPR), you have a number of rights regarding your personal data and how it is processed:

• You have the right to access, correct, or delete your personal data.
• You have the right to withdraw your consent to the processing of your personal data or to object to the processing of your personal data by Tristan Lavender Speaking & Consulting.
• You have the right to data portability. This means that you can request that I send the personal data I hold about you in a computer-readable format to you or to another organization specified by you.

You can send a request to access, correct, delete, or transfer your personal data, or to withdraw your consent or object to the processing of your personal data, to info@tristanlavender.com. I will respond as soon as possible and no later than four weeks after receiving your request.

If you have a complaint about the way I process your personal data, I would be happy to hear from you. You also have the right to lodge a complaint with the national supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). You can do so via the Autoriteit Persoonsgegevens website.

Security

I take the protection of your personal data seriously and take appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized modification.

My website uses a secure connection (SSL), and access to personal data is limited to authorized individuals.

If you believe that your personal data is not adequately protected or that there are indications of misuse, please contact me at info@tristanlavender.com.

Cookies

This website only uses technical and functional cookies, as well as analytical cookies that do not infringe on your privacy.

A cookie is a small text file that is stored on your computer, tablet, or smartphone when you first visit this website.
• Technical cookies are necessary for the technical functioning of the website and to ensure ease of use.
• Functional cookies remember certain choices or preferences, such as a language preference, to make the website more user-friendly.
• Analytical cookies provide me with insight into how the website is used, so that I can optimize it and improve the user experience.

Google Analytics 4 (analytical cookies)

I use Google Analytics on my website to gain insight into how visitors use my website. I have configured Google Analytics so that the statistics are anonymous and cannot be traced back to a specific individual. The data is retained for a maximum of 14 months. Read more in Google’s privacy policy. If you would prefer Google Analytics not to use your data, you can opt out.

Google may process data in the United States, outside the European Economic Area (EEA). Google participates in the EU-U.S. Data Privacy Framework, which provides an appropriate level of protection for personal data.

Opting out of cookies

You can opt out of cookies by configuring your internet browser not to store cookies. You can also delete any information previously stored through your browser settings.

Changes

This statement was last updated on August 20, 2026. Tristan Lavender Speaking & Consulting reserves the right to amend this privacy statement. Any changes will be published on this page. If the changes have a direct impact on you, I will inform you directly wherever possible.

Questions?

If you have any questions after reading this privacy statement, you can always contact me at info@tristanlavender.com.