Privacy statement

Last updated: 16 October 2026

This page explains which personal data I collect through oliviernijman.com, why, how long I keep it, and what your rights are. I keep it as short and plain as I can.

Who is responsible

Olivier Nijman Coaching, the business of Olivier Nijman, physiotherapist, Amsterdam, the Netherlands.
Chamber of Commerce (KvK) number: 42175038
Address: Joan Muyskenweg 17a14, 1096 CJ Amsterdam, the Netherlands
Email: info@oliviernijman.com

I am the controller for the data described here. For any question about your data, email me.

What I collect, and why

When you buy a program

Your email address and first name. To give you access, to log you in, and to send you emails about your purchase. Legal basis: the contract between us.
Your purchase. What you bought, the amount, the date, the payment reference and the discount code, if you used one. Legal basis: the contract, and my legal duty to keep financial records.

The payment itself is handled by Mollie. I never see or store your card or bank details.

When you use a program

Your answers to the questions. About your knee, your training, your sleep and stress, and how you deal with the pain. They decide which chapters you get and, later, what your training plan looks like.
The text you mark and the notes you write.
Which chapters you have read. So you can continue where you stopped.
Your training. Your program, your week, the exercises you do and the weights you use, the workouts you log, your pain and sleep scores, your next-morning checks and your check-ins. The app uses them to adjust your plan with fixed rules and to show your progress. No AI is used, and nobody reads them unless you send them to me.

Your answers, notes, pain scores and workouts say something about your health. The law treats health data as extra sensitive. I only save it with your explicit consent, which you give with a tick box before the first question. You can take that consent back at any time by deleting your data under Settings in the program. The program then no longer knows your chapters, and you can start again if you want.

I do not read your answers, marked text or notes, unless you send them to me yourself with the button "Send to Olivier". What you send stays on this website, on a page only I can open after logging in. The emails about it (one to me, one to you) only say that something was sent. They contain nothing about your health.

Reminders. If you tick the box, I email you when you have not trained for a few days, at most once a week and at most three times in a row. The email says nothing about your complaint. You can switch it off under Settings at any time.

Learning from everyone together. To make the program better I look at numbers that are added up over all users: which answers are most common, how pain scores move over the weeks, and where people stop. I only see these when at least five people are in a number, so nobody can be picked out. I can also see per account whether the program is used (bought, how many chapters read, how many sessions logged), so I can help when you email me. I do not see your answers or your scores there.

How your program is put together. The chapters you get and your training program are chosen by fixed rules from your answers and your training log. No artificial intelligence is used, and no person looks at your data to do this. The rules are the same for everyone, and they only decide which chapters and exercises you see. You can ask me how a choice was made.

When you log in

A login code and your IP address. The IP address is used to stop people from guessing codes. Legal basis: my legitimate interest in keeping accounts safe. Login codes and IP addresses are deleted after 30 days.

When you contact me or work with me 1-on-1

What you write in the contact form or by email, and your email address. To answer you. Legal basis: steps before a possible contract, or my legitimate interest in answering questions.
What we discuss in a call. Legal basis: the contract between us and your explicit consent, because this is health data.

Cookies

This site uses functional cookies only, and only at checkout and in the paid area: one that keeps you logged in (90 days), one that protects forms while you use them (until you close your browser), and, if you pick a light or dark screen under Settings, one that remembers your choice (1 year). The training part also remembers on your own device which exercises you ticked today, so they are still ticked when you come back to the page. That stays in your browser and is not sent anywhere. There are no tracking cookies, no advertising cookies and no analytics. That is why there is no cookie banner.

Who else handles your data

I use a few companies to run this site. They only handle your data on my instructions, under a data processing agreement, or as a regulated payment company.

TransIP (the Netherlands): hosting of the website and the database.
Mollie (the Netherlands): payments.
Brevo (France): sending emails, such as your login code and purchase confirmation.
Microsoft (Microsoft 365): my mailbox.

Your data is stored in the European Union. If one of these companies uses services outside the European Economic Area, that happens under the safeguards the law requires, such as the EU standard contractual clauses.

I never sell your data, and I do not share it with anyone else, unless the law obliges me to.

How long I keep it

Your account, answers, marked text, notes, program, workout log, check-ins and what you sent to me: until you delete them under Settings, and at most 24 months after you last logged in. One month before that, you get an email. If you log in, nothing is removed. Your purchase stays, so you can always start again.
Purchase and payment records: 7 years, because Dutch tax law requires that. After that they are removed.
Copies of the database: copies made for maintenance are removed within 30 days. The hosting company keeps its own backups for at most 30 days.
Login codes and IP addresses: 30 days.
Emails and contact form messages: up to 2 years after our last contact.

Your rights

You have the right to:

see which data I have about you, and get a copy
have wrong data corrected
have your data deleted
take back your consent
have the use of your data limited, or object to it
take your data with you to another service

Two of these you can do yourself, right away: under Settings in the program you can download your data and delete your data. For anything else, email info@oliviernijman.com. I answer within one month.

Not happy with how I handle your data? Please tell me first, so I can fix it. You also have the right to file a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Security

The site only works over an encrypted connection, and tells your browser to always use it. There are no passwords to leak: you log in with a one-time code sent to your email. Login codes are stored in a form that cannot be read back. The database is not reachable from the internet. Information about your health is never sent by email. The site loads nothing from other companies: no fonts, no scripts, no trackers.

If something does go wrong with your data, I report it to the Dutch data protection authority within 72 hours where the law requires that, and I tell you when it could affect you.

Age

The programs are made for adults. At checkout you confirm that you are 18 or older. I do not knowingly collect data from anyone under 18.

Changes

If I change how I handle your data, I update this page and the date at the top. For a big change I email you.