Privacy Policy

The data controller for the processing described in this Policy is:

• Wolf & Jaguar
• Chamber of Commerce (KvK) Number: 81572247 (Netherlands)
• Amsterdamseweg 114a, 6814GH Arnhem, The Netherlands
• Email: legal@wolfandjaguar.com

Depending on how you use our Services, we may process the following categories of personal data:

• Identity & contact data: name, email address, country of residence and, where relevant for invoicing, billing address and VAT number.
• Account data: hashed credentials, login timestamps, role and access rights.
• Purchase & payment data: product purchased, price, VAT treatment, invoice number, payment status and Mollie transaction reference. We do not receive or store your card or bank credentials.
• Learning data: your progress, journal entries and completion status within our programs (including SHAM).
• Support data: messages you send us, tickets and conversation history with our AI-assisted support.
• Technical data: IP address, browser type, device information and cookies strictly necessary to operate the site.
• Marketing data: your consent preferences and interactions with our emails, where applicable.

We process personal data on the following legal bases (Art. 6 GDPR):

• Performance of a contract (Art. 6(1)(b)): to deliver the Services you purchase, provide access to our programs, process payments through Mollie, and offer customer support.
• Compliance with a legal obligation (Art. 6(1)(c)): to comply with tax, accounting and consumer-protection obligations, including the statutory retention of invoices for 7 years under Dutch tax law.
• Legitimate interests (Art. 6(1)(f)): to secure our platform, prevent fraud and abuse, improve our Services, and analyse aggregated, non-identifying usage.
• Consent (Art. 6(1)(a)): for optional marketing emails and any non-essential cookies. You may withdraw consent at any time.

Our platform uses Artificial Intelligence (AI) to structure content, assist with customer support and automate administrative tasks. AI is used to support human decisions and to personalise the learning experience. We do not use AI to make solely automated decisions that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR. Where personalised pricing is used, we will clearly disclose this at the point of sale in accordance with the EU Omnibus Directive.

We share personal data only with carefully selected processors who act on our instructions under a data processing agreement:

• Mollie B.V. (Amsterdam, the Netherlands) — payment processing.
• Lovable Cloud / Supabase — hosting of our platform, database and authentication (EU region).
• Email delivery providers — for transactional emails (order confirmations, invoices, support replies) and, where you have consented, marketing emails.
• AI service providers — for content generation and support assistance, under contractual safeguards prohibiting use of your data for model training.

We do not sell your personal data. We may disclose data to competent authorities when legally required.

We prioritise processors that store data within the European Economic Area (EEA). Where a transfer outside the EEA is necessary, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) and, where applicable, supplementary measures.

• Invoices and financial records: 7 years, in line with Dutch tax law.
• Account and learning data: for as long as your account is active, and up to 24 months after inactivity, unless you request earlier deletion.
• Support conversations: up to 24 months after resolution.
• Marketing consent records: until you withdraw consent, plus a short period to evidence compliance.
• Server logs: a maximum of 12 months, for security and abuse prevention.

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Request erasure (“right to be forgotten”) where applicable.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting prior lawful processing.
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or your local supervisory authority.

To exercise these rights, contact us at legal@wolfandjaguar.com. We may ask you to verify your identity before responding.

We use strictly necessary cookies to operate our website, secure sessions and remember your preferences. We do not place tracking, advertising or profiling cookies without your prior consent. Where non-essential cookies are used, a consent banner will let you accept or refuse them, and you can change your preferences at any time.

We apply appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), access controls, row-level security in our database and regular backups. No system is entirely secure; if a data breach ever affects your rights and freedoms, we will notify you and the supervisory authority in line with Articles 33–34 GDPR.

Our Services are intended for individuals aged 18 and over. We do not knowingly collect personal data from children. If you believe a minor has provided us with personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time to reflect changes in our Services or legal requirements. The “Last updated” date at the top reflects the current version. Material changes will be communicated via email or a clear notice on the website.

Wolf & Jaguar
Email: legal@wolfandjaguar.com
Address: Amsterdamseweg 114a, 6814GH Arnhem, The Netherlands
KvK: 81572247