Last updated 30 August 2026.
This is Steven Stephania’s website. Below you will find which data I process about you, why, for how long, and what you can change about it. In plain language, without legal fog.
1. Who is responsible
- Invicti BV, trading as Steven Stephania
- Musicallaan 321, 3543 EC Utrecht, the Netherlands
- Email: coaching@stevenstephania.com
- Dutch Chamber of Commerce (KvK) number: 69201773
- VAT number: NL857780578B01
For questions about your data, simply send an email. There is no separate data protection officer; a business of this size is not required to appoint one.
2. If you are only looking around
You can read this website without leaving anything behind. When you open a page, a window asks whether you consent to statistics and advertising cookies. If you say no, or close it with “continue without consent”, those are not loaded.
What happens in any case: the web server at STRATO records technical data needed to serve and secure the site — including your IP address, the time, and the page requested. Those logs are kept briefly and are not used to track you.
Your choice is remembered in a cookie set by Real Cookie Banner, along with a random number that lets me demonstrate consent was given. You can change that choice at any time through the “privacy settings” link at the bottom of the consent window.
3. Statistics — only with consent
If you consent to statistics, Google Analytics (Google Ireland Limited) and Jetpack Stats (Automattic Inc.) measure which pages are viewed, for how long, and how visitors arrive. I use that to see what people are looking for and what is not working. I do not look at individuals.
4. Advertising — only with consent
If you consent to marketing, the Meta Pixel (Meta Platforms Ireland Limited) loads. It measures whether someone who clicked an advertisement on Facebook or Instagram actually arrives here, and makes it possible to show advertisements to people who have visited this site before. Without consent the pixel does not load.
5. If you request the free workbook or subscribe to the newsletter
Then I ask for your name and email address. Those go to Kit (formerly ConvertKit, based in the United States), where my mailing list lives. I use them to send you the workbook and to write occasionally about coaching, the book, and what I come across.
Every email has an unsubscribe link at the bottom. If you unsubscribe, sending stops immediately; your address stays in the list marked as unsubscribed so you are not accidentally added again. If you ask for full deletion, I will remove you.
6. If you schedule an introductory conversation
The scheduler on the contact page comes from Diad (mijndiad.nl), a Dutch practice management system. What you enter there — name, email address, chosen time and any question — ends up in my calendar in that system. Please note: the scheduler loads on the contact page even if you have not given consent, because it is part of what that page is for.
7. If you order something from the shop
For an order I need your name, email address and delivery address, plus what you ordered. That data is held in WooCommerce on this website.
Payment is handled by Mollie (Mollie B.V., Amsterdam). Your payment details go straight to Mollie; I never see them, only whether payment was made. What else applies to orders is set out in the terms and conditions.
Order and invoice data must be kept for seven years under Dutch tax law.
8. If you email me
I keep your message for as long as needed to deal with your question, and afterwards for as long as it is useful to be able to pick up the thread. You can always ask for deletion.
9. Security and backups
The site is hosted at STRATO (Germany) and runs over a secure connection. Jetpack and VaultPress (Automattic) make backups and scan for vulnerabilities; Akismet filters spam. Those backups also contain the data from the shop.
10. Processing outside the European Union
Kit, Automattic and the parent companies of Meta and Google are based in the United States. That transfer relies on the standard safeguards under the GDPR — the EU-US Data Privacy Framework and standard contractual clauses. If you want to avoid it entirely, do not consent to statistics and marketing, and do not subscribe to the newsletter.
11. What you can ask for
You have the right to see your data, to have it corrected, or to have it deleted. You can object to processing, ask for it to be restricted, and ask to receive your data in a portable file. Consent you have given may be withdrawn at any time; that takes effect from that moment and not retroactively.
Email coaching@stevenstephania.com for any of this. I respond within four weeks. If we cannot resolve it together, you can lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.
12. Changes
If anything changes in how this site handles data, I will update this page. The date at the top shows when that last happened.