What we collect, and why
We teach data integrity, so it would be poor form to be careless with yours. This notice is written to be read, not to be survived.
Last updated: 14 October 2026
Who we are
The GMP Training Academy is operated by Truex Consultancy B.V., Plotterweg 6E, 3821 BB Amersfoort, The Netherlands, registered with the Dutch Chamber of Commerce under KvK number 96819111. Truex Consultancy B.V. is the data controller for everything described in this notice.
For any question about your data, or to exercise any right below, email info@truex-consultancy.com. We answer within one month, as the GDPR requires.
What we collect and why
| What | When | Why | Lawful basis |
|---|---|---|---|
| Email address, and role or team size where you give them | When you join a course founding list, subscribe to the findings newsletter, or ask for a checklist or template | To send you what you asked for, to tell you when a course opens, and to send the monthly inspection lesson | Consent, GDPR Art. 6(1)(a). Every email carries an unsubscribe link |
| Name, work email, company, topic and message | When you use the contact form or ask for a team quote | To answer your enquiry and prepare a quote if you asked for one | Our legitimate interest in answering an enquiry you sent us, Art. 6(1)(f) |
| Self-assessment answers, score and chapter breakdown | When you take the self-check or a chapter assessment | To show your result and recommend courses. It stays in your own browser unless you ask us to email it to you. The chat assistant reads it there only to word its offer of help; it reaches us only if you accept that offer and send the chat form with the consent box ticked, and then we keep your overall score and two weakest chapters with your enquiry | Consent, Art. 6(1)(a), and only at the point you ask for the email or send the chat form |
| Website chat: what you click and type, and if you leave them, your name and company (optional), email or phone and what you asked about | When you open the chat assistant. It is an automated assistant, not a person | To answer you, send what you asked for with at most one reminder, and improve the assistant. Typed questions are answered by Cloudflare Workers AI. If you ask for it at the end of a chat, we email you one summary of your questions and the answers, with no reminder | Consent, Art. 6(1)(a) |
| Email address for follow-up emails | Only if you tick the separate box in the chat and then confirm by clicking the link in an email | To send up to 3 emails over about five weeks about the course you asked about. Every email has a stop link | Consent, Art. 6(1)(a) |
| Server logs: IP address, page requested, browser type | Automatically, on every visit | To keep the site available and to investigate abuse | Our legitimate interest in the security of the site, Art. 6(1)(f) |
We do not buy contact lists, and we do not sell or rent yours. We ask for a work email because the material is professional training, not because we want a profile of you.
Who we share it with
- Cloudflare, Inc.: Hosts the site and relays form messages through Email Routing. Also runs the chat assistant and its database in Western Europe, and Cloudflare Workers AI answers typed chat questions
- Resend: Sends the emails you ask for in the chat
- Telegram: Sends us an internal alert when a chat enquiry comes in. The alert says only what kind of request it is, with a link to our password-protected dashboard: no names, email addresses, phone numbers or question text
- Google Fonts: Serves the typeface used across the site
- The course platform: Once you enrol on the Essentials Series at truex-consultancy.com, that platform processes your enrolment data under its own privacy notice
These providers act as our processors under written agreements. Where a provider is outside the EEA, the transfer relies on the European Commission’s standard contractual clauses or an adequacy decision. We do not share your data with your employer unless you ask us to, for example when your company buys seats and needs completion records for its training matrix.
Chat enquiries are recorded in our own customer system, which we run ourselves on our own computer. It is not a third-party service.
How long we keep it
- Founding list registrations and newsletter subscriptions: Until you unsubscribe, or 24 months after the course launches, whichever comes sooner, then 30 days on a suppression list so we do not add you back by mistake
- Contact enquiries: 24 months after the last message in the thread
- Self-assessment progress and results: In your own browser until you clear it. We hold a copy only if you emailed the result to yourself
- Chats without contact details: 12 months
- Chat enquiries with contact details, and their chat: 24 months. If you unsubscribe, we keep only a one-way coded version of your address so we never email you again
- Server logs: A short rolling window kept by the hosting provider
Cookies and similar storage
We set no advertising cookies, and we do not track you across other sites. If you allow it in the cookie banner, we use Microsoft Clarity, which records anonymised clicks, scrolling and page views (and sets its own cookies) to show us which pages confuse visitors. Text typed into forms is masked. Microsoft processes this data on our behalf (privacy.microsoft.com). If you decline, Clarity is never loaded at all.
Separately, we use Umami Cloud (EU) for basic, aggregate page-view statistics. It sets no cookies, stores no personal identifiers and does not follow you across sites, so it runs regardless of the cookie banner.
Your choice is remembered in your own browser, on that device. Clearing your site data will make the question appear again.
What else is stored in your browser stays in your browser: your progress in the self-check and any chapter assessment, whether the free preview lesson is unlocked, and which prompts you have dismissed. None of it is transmitted to us.
The chat assistant stores nothing on your device until you open it. Once opened, it keeps a random chat number for that browser session. If you allowed analytics in the cookie banner, it also keeps a random visitor number, used to show the chat to only part of our visitors so we can measure whether it helps.
The chat also remembers whether you turned its sound off, and that it has already offered help with your self-assessment result, so it does not ask twice. With analytics consent it notes the time of your last visit, to welcome you back. The chat only appears after you have answered the cookie banner.
Your rights
- Ask for access to the data we hold about you
- Have anything inaccurate corrected
- Have your data deleted
- Receive a copy in a portable format
- Object to processing, or ask us to restrict it
- Withdraw consent at any time, which does not affect what was done before you withdrew it
Write to info@truex-consultancy.com and we will act within one month. If you are not satisfied with how we handled it, you can complain to the Autoriteit Persoonsgegevens (the Dutch data protection authority) at autoriteitpersoonsgegevens.nl, or to the supervisory authority in your own EU country.
Security
The site is served over HTTPS. Access to enquiries and subscriber lists is limited to the people who answer them or fulfil the request, and we keep no payment card details: enrolment and payment happen on the course platform, under its own notice.
Changes
If this notice changes in substance, we update the date at the top and, where the change affects how we use data you have already given us, we tell subscribers by email before it takes effect.