Page 1 of 1

Founderspace Privacy policy

Who we are

Founderspace is a community and retreat programme for early-stage founders, operated as a sole trader (eenmanszaak/zzp'er) under Dutch law by Justin Joy Stomp. We are the data controller responsible for your personal data under the GDPR.

Contact: justin@founderspace.co

What data we collect

When you apply, register for a retreat, or become a member, we collect:

Name and email address Phone number Social media profiles or handles you provide Payment and billing details (processed via Stripe) Your answers submitted through our application forms (via Tally)

We do not collect sensitive personal data and we do not store payment card details ourselves.

Why we collect it

We use your data only to:

Process your application and manage your membership Process payments and send receipts Communicate with you about your membership, retreats, and community updates Send our newsletter (only if you opted in) Comply with our legal and financial obligations under Dutch law

We do not sell your data to third parties or use it for automated decision-making.

Legal basis for processing

Contract performance — to fulfil your membership or retreat booking Legitimate interests — communicating with applicants and members Legal obligation — retaining financial records as required by Dutch tax law Consent — sending newsletters (withdrawable at any time)

Third-party processors

Stripe — payment processing. Stripe handles all billing data securely. stripe.com/privacy Tally — application forms. Your responses are stored on Tally's servers. tally.so/help/privacy-policy

Both processors are contractually bound to handle your data in compliance with applicable data protection law.

How long we keep your data

Application data: up to 12 months after your application, then deleted Member data: duration of membership plus 12 months after it ends Payment records: 7 years, as required by Dutch tax law Newsletter subscribers: until you unsubscribe

Your rights

Under the GDPR you have the right to access, correct, delete, restrict, or port your data, and to object to processing. Email justin@founderspace.co and we'll respond within 30 days.

You can also file a complaint with the Dutch data protection authority: Autoriteit Persoonsgegevens — autoriteitpersoonsgegevens.nl

International transfers

Stripe and Tally may process data outside the EEA. Where this occurs, appropriate safeguards such as Standard Contractual Clauses are in place.

Updates

We may update this policy occasionally. Material changes will be communicated to active members by email.