Skip to Content
Privacy & Data Protection

Privacy Policy

Transparency, trust, and how your personal data is processed at The MYTH Movement.

Last updated: November 2026

At The MYTH Movement ("MYTH"), accessible via our website, we are committed to respecting your privacy and protecting your personal data. This Privacy Policy explains what personal information we collect, why we collect it, how it is handled in accordance with the European General Data Protection Regulation (EU Regulation 2016/679 – GDPR) and Belgian data protection legislation, and how you can exercise your legal rights.

1. Who Is Responsible for Processing Your Data (Data Controller)

The data controller responsible for the processing of your personal data under this Privacy Policy is:

  • Organization: The MYTH Movement ("MYTH")
  • Responsible Person: Andrew Leigh
  • Legal Form: [Insert Legal Form, e.g. Sole Proprietorship / CommV / BV]
  • Registered Address: [Insert Registered Street Address, Postal Code, City, Belgium]
  • Enterprise / VAT Number: BE1030174147
  • Email Address: aleigh1986@gmail.com
  • Phone Number: +32 485 43 69 72

2. What Personal Information We Collect

Depending on how you interact with MYTH, we collect the following categories of personal data:

Customer Reviews
  • First name and last name
  • Email address
  • Location (city and country; optional)
  • Service or event reviewed
  • Rating (heart scale)
  • Written review and feedback
  • Public name display preference
  • Publication and newsletter consent choices
Inquiries & Consultations
  • Full name
  • Email address
  • Phone number (optional)
  • Location (city and country; optional)
  • Inquiry subject and service interest
  • Message content and goals
Newsletter Subscriptions
  • Name
  • Email address
  • Date and proof of opt-in consent
Technical & Website Data
  • IP address and browser type
  • Date and time of visit
  • Strictly necessary functional website cookies

3. Purposes and Legal Bases for Processing (GDPR Art. 6)

We process your personal information only when we have a valid legal ground under GDPR Article 6:

Processing Purpose Categories of Data Applicable Legal Basis (GDPR)
Managing & Verifying Reviews First name, last name, email address, service, feedback Legitimate Interest (Art. 6(1)(f)): Verifying authentic feedback from genuine participants and communicating regarding submitted reviews.
Publishing Reviews Publicly Review content, rating, location, and chosen name display Consent (Art. 6(1)(a)): You must explicitly check the optional publication permission checkbox.
Sending Newsletters & Updates Name, email address Consent (Art. 6(1)(a)): You must explicitly opt in via the newsletter checkbox.
Responding to Contact Inquiries Name, contact details, message Pre-contractual Measures / Legitimate Interest (Art. 6(1)(b) & (f)): Answering questions and preparing consultations.
Legal, Tax & Accounting Compliance Client details, transaction records Legal Obligation (Art. 6(1)(c)): Belgian commercial and tax law requirements.

4. How Reviews and Publication Permissions Are Handled

  • Private Email Address: Your email address is strictly collected for administration and potential follow-up. It is never displayed publicly on our website or promotional materials.
  • Explicit Publication Consent Required: A review will never be published on our website or promotional materials unless you explicitly checked the optional permission checkbox: "I give MYTH permission to publish the review I have submitted..."

  • Display Preferences Respected: If you grant permission to publish, your name is displayed strictly in accordance with your choice:

    • Display my first and last name
    • Display my first name only
    • Publish anonymously (no identifying name shown)
  • Withdrawing Publication Permission: You can withdraw your permission to publish your review at any time by emailing us at aleigh1986@gmail.com. Upon withdrawal, your review will be permanently removed from public display.

5. How Newsletter Subscriptions Are Handled

  • Strictly Opt-In: Newsletter checkboxes are never preselected. Submitting a review or contacting us does not subscribe you to any marketing or newsletter communications.
  • Independent from Reviews: Your ability to submit a review is completely independent of whether you choose to subscribe to our newsletter.
  • Unsubscribing Anytime: If you subscribe, you can withdraw your consent and unsubscribe at any time by clicking the "Unsubscribe" link in any newsletter email, or by emailing us directly.

6. Service Providers Processing Data on Our Behalf (Data Processors)

We do not sell, rent, or trade your personal data. We share personal information only with trusted third-party service providers (processors) who assist in delivering our services under data processing agreements:

  • Odoo S.A. (European Union): Provides our website hosting platform, form submission handling, and database infrastructure. Data is securely hosted within data centers in the European Union.
  • Google Ireland Limited / Gmail (European Union / USA): Provides business email hosting for receiving inquiries and review notifications. Transatlantic transfers comply with EU Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework.
  • Cal.com / Scheduling Providers [Where applicable]: Used for client call scheduling and calendar bookings.
  • [Insert Any Additional Hosting, Accounting, or Backup Service Providers, if applicable]

7. How Long Information Is Retained

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected:

  • Published Reviews: Retained for as long as the review remains published on our website, or until you withdraw your publication consent or request deletion.
  • Unpublished Reviews & Feedback: Retained for administration for up to [e.g. 2 years] after submission, after which they are deleted or fully anonymized.
  • General Inquiries: Retained for up to [e.g. 2 years] after your last communication, unless ongoing coaching or workshops require continued contact.
  • Newsletter Subscriptions: Retained until you unsubscribe or withdraw your consent.
  • Invoices & Accounting Records: Retained for 7 to 10 years in compliance with statutory Belgian accounting and tax obligations.

8. Your Rights Under the GDPR

Under Chapter III of the GDPR, you have the following rights regarding your personal data:

Right of Access (Art. 15): You have the right to request a copy of the personal data we hold about you.
Right to Rectification (Art. 16): You can ask us to correct inaccurate or incomplete data.
Right to Erasure (Art. 17): You can request that we delete your personal data ("right to be forgotten").
Right to Restriction (Art. 18): You can ask us to pause the processing of your data in specific circumstances.
Right to Data Portability (Art. 20): You can request to receive your data in a structured, commonly used format.
Right to Withdraw Consent (Art. 7(3)): Where processing is based on consent, you may withdraw it at any time without penalty.

9. How to Contact Us and Exercise Your Rights

To exercise any of your data protection rights, or if you have questions or concerns about this policy:

Contact Person: Andrew Leigh / The MYTH Movement

Email: aleigh1986@gmail.com

Phone: +32 485 43 69 72

We respond to all verified requests without undue delay and at the latest within one calendar month, as required by the GDPR.

10. Right to Lodge a Complaint with the Supervisory Authority

If you believe that our processing of your personal information infringes data protection laws, you have the right to lodge a formal complaint with the Belgian Data Protection Authority:

Gegevensbeschermingsautoriteit (GBA) / Autorité de protection des données (APD)

Drukpersstraat 35 / Rue de la Presse 35, 1000 Brussels, Belgium

Phone: +32 (0)2 274 48 00

Email: contact@apd-gba.be

Website: www.gegevensbeschermingsautoriteit.be