Privacy Policy

Last updated: 14 October 2026

1. Who we are

Realize Now is the trade name of Wim De Grave, operating as a sole proprietorship (eenmanszaak) registered with the Dutch Chamber of Commerce (KvK) under number 63466279.

For the purposes of the General Data Protection Regulation (GDPR), I am the data controller responsible for the personal data processed through Realize Now.

Contact details

Business name: Realize Now
Legal name: Wim De Grave
Business address: Lagunesingel 128, 6642 EC Beuningen
Email: w.degrave@hotmail.com
Website: https://realize-now.nl

2. What personal data I collect

Depending on how you interact with Realize Now, I may process the following categories of personal data:

Contact and identification details: name, email address, telephone number and other details you provide.
Booking and customer information: appointment details, service or programme selected, communications, invoices and payment status.
Payment and transaction information: transaction references and payment status supplied by payment providers. Card details are generally processed by the payment provider rather than stored directly by me.
Information you share during sessions: personal experiences, goals, challenges, reflections and other information you voluntarily disclose.
Session recordings and related files: audio or video recordings, transcripts, summaries and session notes, where you have separately agreed to the relevant processing.
Training and programme information: participation, progress, submitted exercises and communications relating to a programme or training.
Website and technical information: information necessary for website security and operation, including limited technical information where applicable.
Newsletter preferences: your subscription status, preferences and interactions with newsletter communications, where recorded by the mailing platform.

Please avoid sending sensitive personal information through ordinary email or general contact forms unless it is necessary and you understand how it will be handled.

3. Why I process personal data

I process personal data only for specified purposes and where a valid legal basis applies.

Purpose	Legal basis, where applicable
Responding to enquiries and managing bookings	Steps taken at your request before entering a contract, or legitimate interests where appropriate
Providing sessions, programmes and digital products	Performance of a contract
Processing payments, invoices and accounting	Contractual necessity and legal obligations
Maintaining relevant service notes and continuity between sessions	Contractual necessity or legitimate interests, depending on the circumstances
Recording or transcribing sessions	Separate consent where relied upon as the legal basis
Using recordings for training, demonstrations or promotional content	Separate, specific consent where relied upon as the legal basis
Sending newsletters and marketing communications	Consent or another legally permitted basis, as applicable
Maintaining website security and responding to technical issues	Legitimate interests or legal obligations, where applicable
Meeting legal obligations and handling complaints or disputes	Legal obligations or legitimate interests, as applicable

Where information reveals special categories of personal data under the GDPR, such as health information, an additional legal condition may be required. I will only process such information where the applicable legal requirements are met.

4. Personal development sessions and recordings

Personal development sessions may involve information of a personal or sensitive nature. I treat this information confidentially and apply appropriate safeguards.

Sessions may take place through Cal, Zoom or WhatsApp, depending on the arrangements for your appointment.

Sessions are not automatically recorded simply because recording is technically available.

Where recording, transcription or AI-assisted processing is proposed, I will explain the relevant purpose and obtain the required consent before processing begins.

Depending on the service and your separate choices, the purposes may include:

Reviewing my own work and improving the quality of my services.
Supporting continuity and reviewing previous sessions.
Creating training materials or demonstrations.
Producing transcripts, summaries or other outputs using AI-assisted tools.

These purposes are distinct. Agreeing to one does not automatically mean you agree to all of them.

Where consent is the legal basis, you may withdraw it at any time. Withdrawal does not make processing carried out before withdrawal unlawful. Refusing optional recording or AI processing will not, by itself, prevent you from receiving the service, although an alternative arrangement may be needed.

Public or promotional use: Identifiable recordings, statements or excerpts will not be published for promotional purposes on the basis of consent to internal review or session continuity. Any proposed public use requires separate, specific permission and appropriate safeguards.

I will only use recording, transcription, storage and AI providers after assessing their suitability for the intended processing.

5. Service providers and sharing of data

I use third-party services to operate Realize Now. Depending on the service you use, these may include:

Cal.com: appointment scheduling.
Stripe: payment processing.
Zoom, WhatsApp and Cal: online communication and sessions.
Google Forms: collection of information submitted through forms.
Sweet, provided through Tijdvooreensite: customer relationship management and related administration.
Microsoft Outlook and Gmail: email and business communications.
Mailchimp: newsletter distribution and mailing-list management.
Recording, transcription and AI providers: only where applicable to the service and the relevant processing has been properly authorised.

These providers may process personal data on my behalf, act as independent controllers for certain activities, or perform different roles depending on the service. I will use appropriate contractual arrangements where required.

I do not sell your personal data.

I may disclose information where required by law, where necessary to establish or defend legal claims, or where otherwise permitted by applicable law.

6. International data transfers

Some service providers may process or store personal data outside the European Economic Area (EEA).

Where personal data are transferred internationally, I will ensure that the transfer meets the requirements of the GDPR, for example through an applicable adequacy decision or appropriate safeguards.

The specific countries and transfer mechanisms depend on the providers and services actually used. These details should be verified against their current documentation before this policy is published.

7. How long I keep personal data

I retain personal data only for as long as necessary for the purpose for which it was collected, subject to applicable legal obligations and the need to establish or defend legal claims.

In particular:

Bookings and customer records: for the period necessary to administer the service and handle relevant follow-up.
Financial and accounting records: for the legally required retention period.
Session notes: for as long as reasonably necessary for service continuity and other disclosed purposes.
Recordings, transcripts and AI-generated summaries: according to a defined retention schedule linked to the purpose for which they were created.
Newsletter data: until you unsubscribe or the data are no longer needed, subject to any necessary records of consent or suppression.
Enquiries and form submissions: for as long as necessary to respond and manage any resulting relationship.

Specific retention periods for session notes, recordings, transcripts, summaries and inactive customer records will be defined and applied in practice. Recordings and transcripts will not be retained indefinitely merely because storage is available.

8. How I protect personal data

I take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include access restrictions, account security, appropriate provider agreements, secure storage and deletion procedures.

No method of electronic transmission or storage can be guaranteed to be completely secure. If a personal data breach occurs, I will respond in accordance with applicable legal requirements.

9. Cookies and website technologies

The website may use cookies or similar technologies required for its operation, security and functionality.

If optional analytics, advertising or tracking technologies are introduced, they will be disclosed appropriately and consent will be obtained where legally required before they are activated.

The specific cookies and technologies used depend on the website configuration and the services enabled through Sweet or other providers. A cookie notice or consent mechanism will be provided where required.

10. Your privacy rights

Subject to the conditions and exceptions in the GDPR, you may have the right to:

Access your personal data.
Correct inaccurate or incomplete data.
Request deletion of your data.
Restrict certain processing.
Object to certain processing.
Receive certain data in a portable format.
Withdraw consent where processing is based on consent.
Lodge a complaint with a data protection authority.

To exercise your rights, contact me at [your privacy contact email]. I may need to verify your identity before responding.

I will respond within the period required by law. Some information may need to be retained where a legal obligation applies or where it is necessary to establish, exercise or defend legal claims.

11. Children's data

Realize Now's services are intended for adults aged 18 and over unless a specific service expressly states otherwise. I do not knowingly collect personal data from children in connection with services intended for adults.

If you believe that a child has provided personal data inappropriately, please contact me so that I can assess the situation.

12. Complaints

If you have a concern about how your personal data are handled, please contact me first so I can try to resolve it.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): https://autoriteitpersoonsgegevens.nl/

13. Changes to this Privacy Policy

This Privacy Policy may be updated to reflect changes in my services, tools, legal obligations or data-processing practices.

The latest version will be published on this page with its revision date. Where required by law, I will provide additional information or notify affected individuals about material changes.

14. Contact

For questions about this Privacy Policy or the processing of your personal data, contact:

Realize Now
Wim De Grave
Lagunesingel 128, 6642 EC Beuningen
w.degrave@hotmail.com
KvK: 63466279