Privacy policy

Nature of Wonder is the trading name of Sacha Post’s sole proprietorship, established at Dorpsstraat 265, 1733 AK Nieuwe Niedorp, the Netherlands, and registered with the Dutch Chamber of Commerce under number 85533165. Sacha Post is responsible for the processing described here. You can contact us via sacha@natureofwonder.nl .

What we use

We use only the data needed for a clear purpose:

• Contact. Your name, contact details and message let us answer you and make arrangements.
• Letters. Your email address and consent let us send the free letters and manage your subscription. A newsletter choice during checkout is separate from the purchase. A standalone subscription is confirmed through your mailbox.
• Bookings, products and memberships. We keep your name, email address, selected offer, accepted terms, price and payment status to perform the agreement and keep the required records. We ask for a telephone number where needed. Mollie holds the payment-method details.
• Practical information. If meals are included, email only the allergy or dietary requirement that we need. We do not need a medical, religious or philosophical explanation.
• Feedback and testimonials. We use feedback to improve a programme. We publish a testimonial only with separate consent. The evidence record contains the submitted text, first name, email address, language, date and form version.
• Calls and recordings. With prior consent, we may record and automatically transcribe a Google Meet call. We share it only with people connected to the programme or call. For longer programme development, we retain only notes from which you can no longer reasonably be identified.
• Rewilding and emergency contact. At departure, you complete a paper safety form with necessary health information and, if you choose, the name and telephone number of an emergency contact. You send that person the short notice on the form in advance. We use the information only for safe guidance and a possible emergency.
• Operations and recovery. Protected operational logs may contain data from an accepted contact or feedback form and limited booking or payment information. This lets us complete a request that has stalled. They do not contain passwords, full payment details or usable confirmation and download links.
• Website and security. Access and security logs may contain your IP address, time, requested page, response status and technical browser information. We use them to deliver and protect the site and investigate misuse, faults and security incidents.

Your name, email address and necessary booking and payment information are required to perform an agreement. Without them, we cannot complete your booking. The letters, Signal, publication of testimonials, recordings and loading of external video are voluntary.

We process data for contact and preparation at your request, to perform an agreement, to meet legal record-keeping duties or for our legitimate interest in a reliable and secure service. We ask for consent where needed for letters, publication, recordings and sensitive information.

A message or dietary requirement may sometimes reveal health, religious or philosophical information. We do not ask why when practical information is enough. If we intentionally use such information for a separate purpose, we ask for explicit consent. In an acute emergency, we may use necessary information to protect a vital interest.

Do not put medical information or payment details in a general contact or feedback form.

Who receives data

We share only what is needed:

• openbsd.amsterdam hosts the website and self-managed mailing lists within the European Union;
• Amazon SES sends customer and operator messages, including the daily audit email, without open or click tracking;
• Google Workspace stores correspondence, calendar and contact data, notifications, audit emails and any Meet recordings and transcripts. Storage in the EU data region is configured for supported services;
• Mollie processes payments and keeps data needed for its legal duties, security and fraud prevention;
• a daily encrypted backup is sent to a server managed by Nature of Wonder in Amsterdam;
• a venue or caterer receives only headcounts and practical dietary requirements, without names where possible;
• guides receive only information needed for their role;
• Signal participation is voluntary. Other members see your profile and may see your telephone number, depending on your settings and their address books;
• Garmin/MapShare may show the group’s recent position during Rewilding to people with the private link and access code. The link is disabled when we leave the wilderness, and Nature of Wonder keeps no separate copy of the location data;
• api.video provides video on a small number of pages. Its player loads only when you choose to play a video;
• emergency services, a doctor, insurer or your emergency contact receive only the information needed in an emergency.

We do not sell personal data, use it for automated decisions or profiling, or provide personal data to AI services for business development.

Some providers may process data outside the European Economic Area. This happens only where the law recognises adequate protection or another valid safeguard applies, such as standard contractual clauses. You can ask us which safeguard applies to a particular service.

Retention

• Data that forms part of the financial records is kept for seven years. Other agreement data is removed when it is no longer needed for delivery or a possible dispute.
• Newsletter data remains on the active list until you unsubscribe. Consent and withdrawal evidence is kept only as long as needed to manage the subscription and demonstrate compliance.
• Consent for a published testimonial, photograph or recording is kept while we use the material. If you withdraw consent, we remove the material from channels that we control. We cannot recall letters already sent or printed material.
• Allergy and dietary information is removed within thirty days after the programme.
• The paper Rewilding form and emergency-contact details are destroyed on the return journey and are not scanned or backed up. Only necessary information about an actual incident may be kept for as long as its handling requires.
• Raw Meet recordings and transcripts are removed within eighteen months. Truly anonymised notes may be retained longer.
• A temporary Signal group for a programme may remain as a voluntary alumni group for no more than eighteen months. You may leave at any time.
• Logs managed by Nature of Wonder rotate daily and are kept for no more than one month. A separate incident record may remain while its handling requires it.
• The daily audit email may contain a readable copy of the previous 24 hours of operational logs. Audit emails and notifications in Google Workspace are kept only while needed for delivery, recovery, contact or a possible dispute.
• Encrypted daily backups are kept for no more than one month and are used only for recovery. Earlier deletions are applied again after a restore.

Your rights

You may request access, correction, erasure, restriction or transfer of your data. You may object to processing based on a legitimate interest and withdraw consent. Withdrawal applies to future use. Some records must remain because of a legal duty, agreement or dispute.

Send a request via sacha@natureofwonder.nl . We may ask you to confirm your identity. You may also complain to the Dutch Data Protection Authority.

We use access controls, encrypted connections and encrypted backups. Only authorised administrators can access operational files. If this policy changes materially, we update the date and inform affected people where required.