Privacy policy
Microdosing College is an educational platform. We process as little personal data as we can, and only for the purposes described below. This page explains, in plain language, what data we collect, who processes it on our behalf, how long we keep it, and which rights you have under the General Data Protection Regulation (GDPR).
What data we collect
Account details. When you create an account, we store your email address and, if you provide it, your name. We use these to sign you in and to manage your access to courses.
Payment details. Payments for membership and for retreats are handled entirely by our payment provider, Mollie. We never store your card or bank details — we keep only a reference (a customer and subscription ID) so we can link your membership status to your account.
Course progress. As you work through lessons, we record which ones you have completed so you can pick up where you left off.
Retreat booking details. When you request a place, we keep your name, email, chosen date, number of guests and — if you choose to share it — the optional intention text in which you tell us what calls you to the journey. We use this information for the intake, the screening and scheduling your journey.
Who processes your data
We rely on carefully chosen processors, and we have agreements with each of them about protecting your data.
Supabase provides our authentication, database and file storage. Your account details, course progress and retreat bookings are stored here, within the European Union (EU region).
Mollie processes all payments. Vimeo hosts the course video. Our email service (SMTP) sends transactional messages such as confirmations and reset links.
Cookies and local storage
We use no marketing or tracking cookies. We set only a necessary Supabase session cookie so you stay signed in, and we keep a small flag in your browser (localStorage) that remembers you have confirmed you are 18 or older, so the age check does not reappear on every visit.
How long we keep data
We keep your account data for as long as your account exists. If you delete your account, we erase your personal data, except for anything we are legally required to retain (for example for financial records). We do not keep retreat booking requests and related correspondence longer than needed for the journey and our administrative obligations.
Your rights
Under the GDPR you have the right to access your data, to have inaccurate data corrected, to have it erased (the "right to be forgotten"), to data portability, and to object to certain processing. You can exercise these rights by emailing hello@microdosing.college. We will respond within the statutory time limit.
Download your data or delete your account yourself
If you have an account, you can exercise two of these rights directly from your account page, without emailing us. "Download my data" gives you a copy of everything we store about you as a single file (data portability). "Delete my account" permanently erases your account and personal data — your profile, journal, progress, comments and sign-ups. One exception: Dutch law requires us to keep payment and booking records for seven years. We do not delete those records, but we anonymize them so they can no longer be linked to you.
Contact
Questions about this privacy policy or about how we handle your data? You are welcome to email us at hello@microdosing.college.
This is a plain-language summary for your convenience, not legal advice.