PRIVACY

Privacy policy

Last updated: 21 September 2026

Who we are

Esoteric Mastery, Veldhuizen 3, Building 4, 7371 GM Loenen, the Netherlands. Chamber of Commerce (KvK) number 42165215. We are the controller for the personal data described here. You reach us at info@esotericmastery.com.

What this policy covers

This policy explains which personal data we process when you visit esotericmastery.com, write to us, register for a training or event, share an experience for publication, subscribe to our updates, buy something from us, or take part in one of our online programmes. It also explains why we process it, how long we keep it, and what your rights are.

Which data we process, and why

When you visit the site. Our host records your IP address, browser type, the pages you request and the time of the request in server logs. We use this to keep the site running and secure. Legal basis: our legitimate interest in a working, safe website. Retention: server logs are kept for at most 30 days.

When you write to us through the contact form or by e-mail: your name, e-mail address, the subject you chose and your message. We use this to answer you. Legal basis: our legitimate interest in answering the people who contact us, or the steps needed before entering into an agreement with you. Retention: as long as needed to handle your question, and at most two years after our last contact.

When you share an experience through the form on Shared Experiences: your name, how you describe yourself, your text, and, if you add one, your photo and e-mail address. Your words, name and photo are published on the site only after you have given your consent on the form and after we have read and approved them ourselves. Your e-mail address is never published; we use it only to write back. Legal basis: your consent. You can withdraw it at any time by writing to info@esotericmastery.com; we then remove the experience from the site. Retention: for as long as the experience is published, and up to one year after withdrawal for our records.

When you register for a training, event or personal session, or buy something: your name, e-mail address, telephone number, billing address, what you ordered, and the payment confirmation we receive from our payment provider. We never see or store your full card or bank details; those go directly to the payment provider. We use this data to deliver what you ordered, to invoice you, and to meet our legal bookkeeping obligations. Legal basis: performance of a contract, and legal obligation for the bookkeeping. Retention: seven years after the transaction, as Dutch tax law requires.

When a training asks for it: for certain live trainings, intensives and ritual experiences we may ask about physical or psychological conditions that matter for your safety and for the way we work with you. We ask this only when it is relevant, we treat it as confidential, only Don Rodolfo and the facilitator of that training see it, and we process it solely on the basis of your explicit consent, which you can withdraw. Retention: until the training has ended, plus three months; then it is deleted.

When you take part in an online programme: your account details, which programme you are enrolled in, which modules you have opened or completed, and questions you send in for the recorded Q&A. We use this to give you access to the right material at the right time and to run the programme. Legal basis: performance of a contract. Retention: for the duration of your access, and two years after it ends, so that you can ask for it to be restored.

When you subscribe to our updates: your e-mail address and, if you give it, your first name. We send you word of new trainings and dates, nothing else, and every message has an unsubscribe link. Legal basis: your consent. Retention: until you unsubscribe.

Who processes data for us

We use a small number of service providers, each bound by an agreement that limits what they may do with your data:

  • Combell (Belgium): hosting of the website and of our e-mail. Data stays in the European Union.
  • Stripe (Stripe Payments Europe, Ireland): payment processing. Stripe is the controller for the card and bank details you enter on their payment page; see Stripe’s own privacy policy.
  • MailBlue (Netherlands), on the ActiveCampaign platform (ActiveCampaign LLC, United States, under the EU standard contractual clauses): keeping our mailing list and sending our updates, if you subscribed. You confirm your subscription by e-mail before anything is sent, and every message carries an unsubscribe link.

We do not sell personal data, and we do not share it with anyone else unless the law requires it.

Transfers outside the European Union

Our providers process data within the EU. Where a provider nonetheless transfers data outside the EU, that happens under the European Commission’s standard contractual clauses or an adequacy decision.

Cookies

The site sets only the cookies it needs to work: the cookie that remembers the language you chose, the session cookie when you are logged in, and, if you buy something, the cookie that holds your basket. These are strictly necessary and need no consent. We do not use advertising cookies. If we ever add analytics, we will ask for your consent first and describe the cookies here.

How we protect your data

The connection to the site is encrypted (HTTPS). Access to the administration is limited to the people who need it, protected with strong passwords, and attempts to break in are throttled. Uploaded images are checked and stripped of location data before they are stored. Backups are made regularly and kept within the EU.

Your rights

You have the right to see the personal data we hold about you, to have it corrected or deleted, to limit or object to its processing, to receive it in a portable form, and to withdraw any consent you gave. Write to info@esotericmastery.com; we answer within one month. You also have the right to lodge a complaint with the supervisory authority: in the Netherlands the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or the authority in your own country.

Children

Our trainings and programmes are for adults. We do not knowingly process data of anyone under 18.

Changes

When this policy changes, the new version is published here with a new date. For substantial changes that affect you, we let you know by e-mail if we have your address.

—