Privacy Policy
Last updated: 7 April 2026
Empower Speech is committed to protecting your personal data. This privacy policy explains what data we collect, why we collect it, how we protect your data, and what rights you have.
1. Data Controller
The data controller responsible for the processing of personal data via this website is:
Empower Speech Therapy KvK number: 84447117 AGB code: 05325912 Email: cara@empowerspeechtherapy.nl Website: www.empowerspeechtherapy.nl
2. What personal data do we collect?
Via the contact form
When you fill in our contact form, we collect the following data:
- Name (required)
- Email address (required)
- Phone number (optional)
- City (optional)
- Reason for contact (required, selection from predefined options)
Automatically collected data
When visiting our website, the following data is automatically processed by our hosting provider:
- IP address
- Browser type and version
- Pages visited and time of visit
This data is only processed in aggregated form to improve website performance and cannot be traced back to individual persons.
What we do NOT collect
We do not collect, store, or process any medical or health data via this website. The contact form is explicitly not intended for sharing medical information. Medical data is only discussed during in-person or telephone consultations, subject to professional confidentiality.
3. Purposes and legal basis
| Purpose | Legal Basis |
|---|---|
| Processing your contact request | Consent (Art. 6(1)(a) GDPR) |
| Sending a confirmation email | Consent (Art. 6(1)(a) GDPR) |
| Improving website performance via analytics | Legitimate interest (Art. 6(1)(f) GDPR) |
| Website security (CAPTCHA) | Legitimate interest (Art. 6(1)(f) GDPR) |
4. Processors and third parties
We use the following third parties (processors) to operate this website:
| Processor | Service | Location | Data storage | Safeguard |
|---|---|---|---|---|
| Vercel Inc. | Hosting and analytics | US | Temporary (caching) | EU-US Data Privacy Framework, DPA, ISO 27001 |
| Nuntly | Email delivery | EU | EU | GDPR-compliant by design, DPA |
| Cloudflare Inc. | CAPTCHA security | US | Temporary | EU-US Data Privacy Framework |
| Sanity AS | Content management (CMS) | Norway (EU/EEA) | EU | GDPR-compliant, DPA |
5. Transfers outside the EEA
Some of our processors are located in the United States:
- Vercel and Cloudflare are certified under the EU-US Data Privacy Framework (DPF), which provides an adequate level of protection for the transfer of personal data from the EU.
- Additionally, EU Standard Contractual Clauses (SCCs) apply as a supplementary safeguard.
Our email provider Nuntly and content management system Sanity process all data within the EU/EEA.
6. Retention periods
- Contact form data: is forwarded by email and not stored in a database. The retention period depends on the practice's email management. Data is deleted once the contact request has been handled, unless a treatment relationship is established.
- Analytics data: Vercel Analytics is cookieless and processes data in aggregated form. No personal data is retained.
- CAPTCHA tokens: are not retained after verification.
7. Your rights
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access (Art. 15 GDPR) — You can request which data we process about you.
- Right to rectification (Art. 16 GDPR) — You can have incorrect data corrected.
- Right to erasure (Art. 17 GDPR) — You can request the deletion of your data.
- Right to restriction of processing (Art. 18 GDPR) — You can request a restriction on the processing of your data.
- Right to data portability (Art. 20 GDPR) — You can receive your data in a structured format.
- Right to object (Art. 21 GDPR) — You can object to the processing of your data.
- Right to withdraw consent (Art. 7(3) GDPR) — You can withdraw your previously given consent at any time.
To exercise your rights, please contact us at: cara@empowerspeechtherapy.nl
We will respond to your request within 30 days.
Filing a complaint
If you believe that your personal data is not being processed correctly, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):
- Website: www.autoriteitpersoonsgegevens.nl
- Phone: 088 - 1805 250
8. Cookies
This website does not use tracking cookies.
- Vercel Analytics and Speed Insights are cookieless and do not collect personal data.
- Cloudflare Turnstile (CAPTCHA) may set functional and security cookies. These cookies are strictly necessary for the security of the contact form and are exempt from consent requirements under Article 5(3) of the ePrivacy Directive.
9. Healthcare
Empower Speech Therapy is a speech therapy practice. Although we provide healthcare services, we do not collect any medical or health data (special categories of personal data within the meaning of Art. 9 GDPR) via this website.
- The contact form does not contain fields for medical information and displays a warning not to include health data.
- Medical information is only discussed during in-person or telephone consultations and is subject to professional confidentiality (beroepsgeheim) under Dutch law (WGBO).
- The processing of medical data within a treatment relationship is governed by a separate processing register in accordance with the Dutch Medical Treatment Contracts Act (WGBO) and the GDPR.
10. Changes
We may update this privacy policy from time to time. The most current version is always available on this page. In the event of significant changes, we will inform you accordingly.