Privacy Policy — Recovery to Travel

Last updated: July 15, 2026

Recovery to Travel is run by Jen Huss, a sole proprietor (ZZP) registered in the Netherlands. KvK number: 42070508. Contact: jen@recoverytotravel.nl. I'm the "data controller" for the personal information described below — which is a legal way of saying: I decide what's collected and why, and I'm responsible for protecting it.

What I collect and why

When you visit the site: My website is hosted by Squarespace, which collects technical information from visitors — things like browser type, device information, IP address, and the pages you view — because that's needed to run and secure the website. See Squarespace's privacy policy at squarespace.com/privacy. With your consent, I also use analytics and marketing cookies (see the Cookie Policy) to understand how people find the site and to show relevant ads. Legal basis: legitimate interest (running the site) and consent (analytics/marketing cookies).

When you contact me or join my email list: I collect your name and email address, and anything you include in your message, so I can reply and — if you've signed up — send you emails about job strategy, relocation, and my services. Every marketing email has an unsubscribe link. Order confirmations and other transactional emails are sent automatically and can't be unsubscribed from, since they're part of delivering what you bought. Legal basis: consent (marketing), contract (transactional).

When you request a free resource through social media: If you comment on or message my social media accounts to get a free resource (like the Euro Job Audit), I collect your first name and email address through an automated conversation, and I use them to send you the resource you asked for. I'll only send you ongoing marketing emails (job tips, offers, updates) if you separately and explicitly subscribe — and every one of those has an unsubscribe link. Emails collected this way are kept until you unsubscribe or ask me to delete them. Legal basis: contract (delivering what you requested) and consent (marketing).

When you buy something: I collect your name, email, billing details, and purchase history to deliver the service and meet my legal obligations. Payments are processed by Squarespace Payments (with Stripe for processing and Sift for fraud monitoring) and PayPal — I never see or store your full card details. During checkout, address fields may be auto-completed via the Google Places API, which means what you type is shared with Google to suggest addresses. Legal basis: contract and legal obligation (tax records).

When we work together: If you become a client, I process the information needed to do the actual work — your CV/resume, work history, LinkedIn profile, phone number, career goals, and details about your situation that you share with me. This is the most personal data I hold, and I treat it that way: it's used only for your engagement, never shared for marketing, and never sold. Legal basis: contract.

Who I share data with

I use trusted service providers ("processors") to run the business: Squarespace (website, commerce, email campaigns), my payment processors named above, Google (analytics, fonts, address autocomplete), Meta (advertising, with your cookie consent), ManyChat (messaging automation for social media lead magnets — US-based, covered by the EU–US Data Privacy Framework and Standard Contractual Clauses), Brevo (email delivery and contact management — EU-based), Make (workflow automation — EU-based), and Acuity Scheduling via Squarespace (appointment booking). I don't sell your personal information to anyone.

International transfers

Some providers (Google, Meta, Squarespace, ManyChat) are US companies. Data transferred to them is covered by the EU–US Data Privacy Framework, which the EU recognizes as providing adequate protection. Where a provider isn't DPF-certified, transfers rely on the EU's Standard Contractual Clauses.

How long I keep things

Invoices and purchase records: 7 years (required by Dutch tax law).

Client files (CVs, strategy documents, correspondence): for the duration of our engagement plus 2 years, in case you come back or questions arise — then deleted. You can request earlier deletion at any time.

Email list (including emails collected through social media lead magnets): until you unsubscribe or ask me to delete them.

Contact form messages that don't lead to an engagement: up to 1 year.

Your rights

You can ask me to access, correct, delete, or hand over (in a portable format) your personal data, restrict or object to how I use it, and withdraw consent at any time (this doesn't affect processing that already happened). Just email jen@recoverytotravel.nl — I'll respond within one month. If you're not satisfied, you have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl.

Fonts and embedded content

This site uses font services (Google Fonts / Adobe Fonts via Squarespace), which may receive your IP address and browser information to display the fonts.

I don't use automated decision-making or profiling that produces legal effects. If this policy changes, I'll update this page and the date at the top.