Last updated: 16 October 2026

Welcome to our website. This privacy policy is designed to inform you about the types of personal data we collect, how we use and protect this information, and your rights in relation to this data.

1. Who We Are
Light Program is the data controller for personal data collected through this website and our services.

2. Information We Collect
Personal Information: When you use our website, book a session, register for an event, place an order or subscribe to our newsletter, we may collect personal information that you provide voluntarily, such as your name, email address, contact details and shipping address.
Usage Data: We may also collect data about how you use our website, including your IP address, approximate geographical location, browser type, referral source, length of visit, and pages viewed.

3. Use of Information
We may use the information we collect for the following purposes:

• To provide our educational sessions, workshops, events and products
• To provide and maintain our website
• To notify you about changes to our website
• To allow you to participate in interactive features of our website
• To provide customer support
• To send our newsletter, where you have opted in
• To gather analysis or valuable information so that we can improve our website
• To monitor the usage of our website
• To detect, prevent and address technical issues
• To keep our administration and meet tax obligations

We process your data on the following legal grounds: to fulfil our agreement with you (bookings, orders, registrations), your consent (newsletter), our legal obligations (administration and tax), and our legitimate interest (running, securing and improving our website). We do not sell your personal data.

4. Sharing Data with Third-Party Services
We use trusted third-party services to operate parts of our business, and your data may be shared with them for the following purposes:

• Printify and Theprintspace: to produce, package, and ship art print orders (name, shipping address, email, order details)
• Eventbrite: to process registrations for workshops, sessions, and events (name, email, and registration details)
• Kit: to manage our newsletter and send updates you’ve opted into (name and email address)
• Stripe: payment information is processed directly by our payment provider and is not stored by us
• Our website host and Cloudflare: to host and secure the website. Session bookings are handled by our own booking system on this website.

When you use a third-party platform directly (for example, registering through Eventbrite), that platform’s own privacy policy also applies. Some of these providers are based outside the European Economic Area. Where that is the case, transfers are protected by recognised safeguards such as the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

5. Data Retention
We retain personal data only as long as needed for legal, accounting, and service obligations:

• Invoices and financial records: 7 years, as required by Dutch tax law
• Booking, order and registration details: up to 2 years after our last contact
• Newsletter: until you unsubscribe
• Messages and enquiries: up to 2 years

6. Cookies
Our website uses only cookies that are needed for it to work and stay secure. We do not use analytics, advertising or tracking cookies.

Your browser settings, extensions and built-in browser features (such as tracking protection, autofill or saved passwords) are controlled by you and your browser provider. We are not responsible for the privacy practices of browsers or other third-party software you use to access this website.

7. Data Security
We are committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure, we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect online. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. If a data breach poses a risk to you, we will notify the Dutch Data Protection Authority and inform you where required by law.

8. Your Rights
You have the right to:

• Request access to the personal data we hold about you
• Request correction of the personal data that we hold about you
• Object to or restrict processing of your personal data
• Request erasure of your personal data
• Receive your data in a portable format
• Withdraw your consent at any time, for example by unsubscribing via the link in every newsletter

To make a request, email [email protected]. We will respond within one month. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

9. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. The date at the top shows the latest version. By using our website, you acknowledge this Privacy Policy.