What we collect, and why
We teach data integrity, so it would be poor form to be careless with yours. This notice is written to be read, not to be survived.
Last updated: 23 September 2026
Who we are
The GMP Training Academy is operated by Truex Consultancy B.V., Plotterweg 6E, 3821 BB Amersfoort, The Netherlands, registered with the Dutch Chamber of Commerce under KvK number 96819111. Truex Consultancy B.V. is the data controller for everything described in this notice.
For any question about your data, or to exercise any right below, email info@truex-consultancy.com. We answer within one month, as the GDPR requires.
What we collect and why
| What | When | Why | Lawful basis |
|---|---|---|---|
| Email address, and role or team size where you give them | When you join a course founding list, subscribe to the findings newsletter, or ask for a checklist or template | To send you what you asked for, to tell you when a course opens, and to send the monthly inspection lesson | Consent, GDPR Art. 6(1)(a). Every email carries an unsubscribe link |
| Name, work email, company, topic and message | When you use the contact form or ask for a team quote | To answer your enquiry and prepare a quote if you asked for one | Our legitimate interest in answering an enquiry you sent us, Art. 6(1)(f) |
| Self-assessment answers, score and chapter breakdown | When you take the self-check or a chapter assessment | To show your result and recommend courses. It stays in your own browser unless you ask us to email it to you | Consent, Art. 6(1)(a), and only at the point you ask for the email |
| Server logs: IP address, page requested, browser type | Automatically, on every visit | To keep the site available and to investigate abuse | Our legitimate interest in the security of the site, Art. 6(1)(f) |
We do not buy contact lists, and we do not sell or rent yours. We ask for a work email because the material is professional training, not because we want a profile of you.
Who we share it with
- Cloudflare, Inc.: Hosts the site and relays form messages through Email Routing
- Google Fonts: Serves the typeface used across the site
- The course platform: Once you enrol on the Essentials Series at truex-consultancy.com, that platform processes your enrolment data under its own privacy notice
These providers act as our processors under written agreements. Where a provider is outside the EEA, the transfer relies on the European Commission’s standard contractual clauses or an adequacy decision. We do not share your data with your employer unless you ask us to, for example when your company buys seats and needs completion records for its training matrix.
How long we keep it
- Founding list registrations and newsletter subscriptions: Until you unsubscribe, or 24 months after the course launches, whichever comes sooner, then 30 days on a suppression list so we do not add you back by mistake
- Contact enquiries: 24 months after the last message in the thread
- Self-assessment progress and results: In your own browser until you clear it. We hold a copy only if you emailed the result to yourself
- Server logs: A short rolling window kept by the hosting provider
Cookies and similar storage
We set no advertising cookies, and we do not track you across other sites. The only measurement we use is a privacy-first analytics tool that counts visits without cookies and without identifying anyone. Even so, we ask before it runs: the first time you visit you are offered a choice, and if you decline, the analytics script is never loaded at all.
Your choice is remembered in your own browser, on that device. Clearing your site data will make the question appear again.
What else is stored in your browser stays in your browser: your progress in the self-check and any chapter assessment, whether the free preview lesson is unlocked, and which prompts you have dismissed. None of it is transmitted to us.
Your rights
- Ask for access to the data we hold about you
- Have anything inaccurate corrected
- Have your data deleted
- Receive a copy in a portable format
- Object to processing, or ask us to restrict it
- Withdraw consent at any time, which does not affect what was done before you withdrew it
Write to info@truex-consultancy.com and we will act within one month. If you are not satisfied with how we handled it, you can complain to the Autoriteit Persoonsgegevens (the Dutch data protection authority) at autoriteitpersoonsgegevens.nl, or to the supervisory authority in your own EU country.
Security
The site is served over HTTPS. Access to enquiries and subscriber lists is limited to the people who answer them or fulfil the request, and we keep no payment card details: enrolment and payment happen on the course platform, under its own notice.
Changes
If this notice changes in substance, we update the date at the top and, where the change affects how we use data you have already given us, we tell subscribers by email before it takes effect.