The data controller for personal information collected through The Winning Brief website and its own services is The Winning Brief BV, represented by Mabel Leung.

Legal business name

The Winning Brief BV

Contact person

Mabel Leung

Registered office

Leffingestraat 200
8400 Oostende, West Flanders, Belgium

Belgian enterprise number

0730.728.516

VAT number

BE0730.728.516

Privacy contact

mleung@thewinningbrief.eu

General contact

contact@thewinningbrief.eu

Telephone

+32 495 34 91 10

For privacy questions or requests to exercise your rights, email mleung@thewinningbrief.eu.

This policy explains how we handle personal data when you visit thewinningbrief.eu, contact us, book or buy coaching, inquire about a team workshop, enroll in our digital course, request a free resource, or subscribe to our communications.

Some activities take place on third-party platforms, including Calendly and Thinkific. Those providers may also handle information under their own privacy notices. We encourage you to read the relevant notice when moving to those services.

Depending on how you interact with us, this may include:

• Contact and professional information: name, email address, telephone number, organization, job role, and information in an inquiry.
• Booking and training information: preferred dates, booking details, training goals, participant numbers, and arrangements needed to provide coaching or workshops.
• Purchase and account information: products or services ordered, payment status, billing details, invoices, and relevant course or booking identifiers. Payments are handled through the checkout or payment provider used for the transaction.
• Free-resource and communication preferences: email address, a record of a playbook request, newsletter choice, consent status, and interactions with our emails where enabled.
• Technical information: IP address, browser or device information, security logs, and, where allowed by your preferences, website usage and cookie or similar tracking data.

We generally receive this information directly from you, through our website forms, or through the platforms used to provide a service you request. We may also receive booking, order, and enrollment confirmations from those providers.

Under the EU General Data Protection Regulation (GDPR), our reasons for processing personal data depend on the activity. The table below outlines the principal purposes and legal bases. Where legitimate interests apply, those interests include responding to professional inquiries, operating a secure website, and administering our services.

We do not require you to agree to newsletters as a condition of contacting us, booking a service, or requesting the free playbook.

One-to-one coaching. We use relevant contact, payment-confirmation, and scheduling information to organize booked sessions and purchased coaching hours. Calendly may collect booking information when you choose an appointment.

Team workshops. We use a contact person's information, requested goals, participant information supplied to us, and relevant practical arrangements to prepare proposals and deliver agreed training.

Command the Room. Our digital course is offered through Thinkific, which may process enrollment details, course-account information, progress, and purchases according to the functions used. Where your enrollment relates to a purchase from us, we may receive the information needed to administer your order and access.

We do not ask you to provide a payment-card number through our general website contact forms. Payment handling and fraud controls are managed through the relevant checkout and payment services.

Lawyers may wish to discuss situations involving clients, colleagues, negotiations, or legal matters. Please do not submit confidential client documents, privileged materials, special-category personal data, or identifying matter details through public website forms or free-resource fields.

Where coaching or training would benefit from professional examples, we can discuss whether anonymized or adapted scenarios are suitable and what secure exchange arrangements may be needed. Information shared for an engagement should be limited to what is necessary for the agreed purpose.

When you request The Difficult Question Playbook, we use the email address you enter to record the request and provide access to the guide and its printable meeting card. This request may be recorded through Klaviyo.

Resource delivery is separate from newsletter consent. You may receive the requested resource without subscribing to promotional emails. We send ongoing marketing emails only where we have an appropriate legal basis, including consent where required. You may withdraw marketing consent at any time using the unsubscribe option in an email or by contacting us.

Service-related messages, such as booking confirmations, payment receipts, requested resource delivery, and course-access information, are different from optional promotional messages.

Our website may use cookies and similar technologies to maintain essential functions, protect against misuse, and, where enabled, measure how visitors use the site. A cookie is a small item of information stored on your device. Similar technologies can include browser storage and tracking pixels.

Where nonessential cookies or trackers are used, we request consent before activating them. You can change or withdraw your choices using the site's cookie-preferences controls. You may also manage stored cookies through your browser settings, although that does not replace a website consent choice.

We share personal information only where reasonably needed for the services described here, for legal compliance, or where you have otherwise authorized a disclosure. Depending on the service, relevant recipients or technology providers may include:

• Website infrastructure: WordPress, Elementor, website hosting and technical maintenance providers.
• Purchases: WooCommerce and the payment, invoicing, or accounting services used for transactions.
• Bookings: Calendly when you schedule a conversation or coaching session.
• Digital learning: Thinkific when you enroll in or access Command the Room.
• Email and resources: Klaviyo for requested-resource records and optional email subscriptions, plus our email delivery provider.
• Authorized business support: people helping us administer inquiries, client relationships, marketing, website support, and operations, with access limited according to their role.
• Analytics or advertising providers: only to the extent their tools are actually enabled and any required consent has been obtained.

Providers may act as data processors on our instructions, or as independent controllers for certain activities under their own terms. We do not sell mailing lists or customer contact information to advertisers.

Some service providers or their support teams may process personal information outside the European Economic Area. Where GDPR international-transfer rules apply, we use or rely on an applicable transfer mechanism, such as a European Commission adequacy decision for an eligible recipient, or appropriate contractual safeguards.

You may contact us at mleung@thewinningbrief.eu to ask about the safeguards relevant to your information. The exact arrangements depend on the provider and the service used.

We keep personal information only for as long as reasonably needed for the relevant purpose, unless a legal obligation requires us to retain it longer. The main criteria are:

• Inquiries: for the period needed to respond, manage reasonable follow-up, and maintain appropriate business records.
• Coaching and training: for delivery of the engagement and necessary subsequent administration, subject to applicable legal retention requirements.
• Orders and invoices: for applicable accounting, tax, and other statutory retention periods.
• Email subscriptions: while your subscription remains active, or until your data is otherwise deleted in accordance with the applicable rules. We may retain limited consent or suppression records as necessary to respect unsubscribe requests and demonstrate compliance.
• Website logs and cookies: in line with operational need, the relevant technology's configuration, and the cookie information provided through site settings.

When information is no longer required, we delete it or otherwise deal with it in accordance with the applicable retention rules. You can ask us about retention relevant to a particular request or service.

We use reasonable organizational and technical measures appropriate to the information and the services involved, including limiting access to authorized people, using secure connections where appropriate, and relying on service providers' security controls. No website or electronic transmission can be guaranteed to be completely secure.

If a proposed coaching or training activity involves sensitive professional material, please contact us before sending it so we can discuss suitable arrangements.

Depending on your circumstances and the legal basis for processing, you may have the right to:

• Request access to personal data we hold about you.
• Ask for inaccurate or incomplete information to be corrected.
• Request erasure of information where the legal conditions are met.
• Request restriction of processing in applicable cases.
• Receive or transfer certain information in a structured, commonly used format.
• Object to processing based on legitimate interests, and object to direct marketing at any time.
• Withdraw consent at any time, without affecting processing already lawfully carried out before withdrawal.

These rights are subject to applicable legal conditions and exemptions. We generally respond to a valid request within one month, although GDPR permits extensions in certain circumstances.

To ask a question, change an email preference, or exercise a data-protection right, write to mleung@thewinningbrief.eu. We may request reasonable identity verification before disclosing information.

You may also lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), or another competent supervisory authority, if you believe your data protection rights have been infringed.

Our website links to third-party sites such as Spotify, YouTube, social networks, Calendly and Thinkific. When you follow those links, the destination may collect data under its own privacy policy. Please review the destination's privacy information where relevant.

The ordinary website interactions described in this policy are not intended to involve decisions based solely on automated processing that produce legal or similarly significant effects for you.

We may revise this policy when our services, technology or legal obligations change. The date at the top of the page shows when the published policy was last updated. Material changes will be communicated where required by law.

For information about purchases, bookings and contractual rights, see our Terms & Conditions.