Privacy Policy

Last updated: 15th January 2026

Introduction

BlueScriptorium B.V. ("we", "us", "our", or "BlueScriptorium") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, use our services, or interact with us in relation to our fitness franchise business.

Data Controller Information

BlueScriptorium B.V. acts as the data controller for the personal data we process. Our details are:

• Company: BlueScriptorium B.V.
• Registration Number: NL63728196
• Address: Eikenlaan 210, 1344 ZZ Almere, Flevoland, Netherlands
• Email: [email protected]
• Phone: +31 365162137

Data Collection

We collect and process various types of personal data depending on how you interact with us. The data we collect includes:

Information You Provide Directly

• Contact information (name, email address, phone number, postal address)
• Business information (company name, business experience, investment capacity)
• Communication preferences and enquiry details
• Information submitted through contact forms, franchise applications, or correspondence
• Marketing and communication preferences

Information Collected Automatically

• Website usage data (pages visited, time spent, navigation patterns)
• Technical information (IP address, browser type, device information)
• Cookies and tracking technologies data (as described in our Cookie Policy)
• Referral sources and website analytics data

How We Use Your Data

We use your personal information for the following purposes, based on legitimate business interests, contractual necessity, or your consent:

Franchise Services and Business Operations

• Processing franchise enquiries and applications
• Providing information about our franchise opportunities
• Conducting due diligence and background checks for potential franchisees
• Managing ongoing franchise relationships and support services
• Delivering training programmes and business support

Communication and Customer Service

• Responding to your enquiries and providing customer support
• Sending important business communications and updates
• Providing information about our services and franchise opportunities
• Conducting surveys and gathering feedback to improve our services

Marketing and Promotional Activities

With your consent or based on legitimate interests, how we use your information includes:

• Sending marketing communications about our franchise opportunities
• Providing personalised content and recommendations
• Conducting targeted advertising campaigns
• Organising events, webinars, and promotional activities

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please refer to our Cookie Policy.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal bases:

• Consent: When you have given clear consent for specific processing activities
• Contractual Necessity: When processing is necessary for the performance of a contract with you
• Legitimate Interests: When we have legitimate business interests that do not override your rights
• Legal Obligation: When we need to comply with legal or regulatory requirements

Data Sharing and Third Parties

We may share your personal data with trusted third parties in the following circumstances:

• Service providers who assist us in operating our business (IT support, marketing services, legal advisors)
• Professional advisors (lawyers, accountants, business consultants)
• Regulatory authorities when required by law
• Potential business partners or investors in connection with franchise development
• Analytics and advertising platforms (Google Analytics, Google Ads) subject to your consent

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Our data retention periods are:

• Contact enquiries: 3 years from last contact
• Franchise applications: 7 years for successful applications, 3 years for unsuccessful applications
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics data: 26 months (Google Analytics default)
• Legal and regulatory records: As required by applicable laws

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

Access and Information

• Right to access your personal data and receive information about how we process it
• Right to receive a copy of your personal data in a structured, machine-readable format

Correction and Deletion

• Right to rectify inaccurate or incomplete personal data
• Right to erasure ("right to be forgotten") in certain circumstances
• Right to restrict processing in specific situations

Consent and Objection

• Right to withdraw consent for processing based on consent
• Right to object to processing based on legitimate interests
• Right to object to direct marketing at any time

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and employee training
• Secure data storage and backup procedures
• Incident response and breach notification procedures

International Data Transfers

We primarily process data within the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for countries with adequate protection levels
• Certification schemes and codes of conduct

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out to us:

We will respond to your enquiry within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

Governing Law

This Privacy Policy is governed by Dutch law and the General Data Protection Regulation (GDPR). Any disputes arising from this policy will be subject to the jurisdiction of Dutch courts.