Privacy notice
Last updated: 4 August 2026
1. Who is responsible for your data
Monique Blokzyl, trading as HeartPowered Business
Dorfstraße 26
30916 Isernhagen
Germany
Email: hello@heartpoweredbusiness.com
Phone: +49 (0)5139 952 91 67
VAT ID: DE286589821
Monique Blokzyl is the controller for the data described here — meaning she decides what is collected and why, and she is accountable for it.
2. What this notice covers
This notice covers the Pro Speaking Activator web application only — the tool you log into as part of the coaching programme.
It does not cover the heartpoweredbusiness.com website, which has its own privacy policy. The two are separate systems and collect different data.
3. What we collect
Everything below, you type in yourself. We do not buy data about you, we do not collect it from other sources, and we do not search the web for information about you.
Your account
Your email address, your name, and the dates your account was created and last updated.
Your motivation and goals
Why you want to speak, your personal “why” statement, why you joined this programme, your own 1–10 self-ratings, what you want to change in 3 and 12 months, your target number of engagements, target speaking income and target fee, and the impact you want speaking to have on your business and your life.
Your speaking inventory
How many talks you have given and how many were paid, your largest audience, your largest fee, clients won through speaking, your confidence scores, your topic and audience, the problems you solve, the status of your signature talk, marketing assets, offers, visibility and booking system, the obstacles you face, and your success scorecard.
Your speaking focus
Whether you speak online or live, paid or free, and the regions and reach you are targeting.
Your speaker profile
Your professional title, tagline, headline, short and long biography, keynote topics, your audience, your credibility answers — which can include your education, mentors, memberships, media features, awards, books and articles — the speakers whose stage you have shared, your programmes and workshops, and the brand colours you choose.
Your contact details and links
The contact email and optional phone number you want organisers to use, plus your booking link, website, LinkedIn, other social profiles, podcast or video links, and press links.
Your photographs
Your headshot and any on-stage photographs you upload.
Data about other people that you enter
Testimonials — the name, role and company of the person who gave it — and past events, including the event name, the organiser’s name and business contact details, and the date.
Technical data
Login session data, and standard server logs generated by our hosting provider.
What we do not collect
We do not ask for special categories of data — health, religious or political beliefs, ethnicity, sexual orientation, or trade union membership. Some fields are free text, so please do not enter this kind of information in them. We do not want it and we do not need it.
There is no analytics, no tracking, no advertising, no profiling, and no cookie banner — because there is nothing to consent to. See section 9.
4. Why we use it, and our legal basis
| What we do | Why | Legal basis |
|---|---|---|
| Give you an account and let you log in | You cannot use the programme tool without one | Contract — Art. 6(1)(b) GDPR |
| Store your worksheet answers | They are the work you do in the programme, and you need them to persist between sessions | Contract — Art. 6(1)(b) |
| Generate your speaker profile with AI assistance | It is the service the programme provides | Contract — Art. 6(1)(b) |
| Let you export your profile as a PDF | So you can send it to event organisers | Contract — Art. 6(1)(b) |
| Keep your account available after the programme ends | So the profile you built stays a tool you can come back to and update | Legitimate interests — Art. 6(1)(f) |
| Store testimonials and organiser contacts you enter | The programme is about finding and winning speaking opportunities, which requires a record of who you have worked with | Legitimate interests — Art. 6(1)(f) |
| Keep the service secure and working | Protecting your data and diagnosing faults | Legitimate interests — Art. 6(1)(f) |
Where we rely on legitimate interests, we have weighed our interest against your privacy. You can object at any time — see section 11.
5. How AI is used
Your profile text is drafted with Claude, an AI model from Anthropic. We want to be precise about this, because “we use AI” on its own tells you nothing.
What is sent to Anthropic: your name, professional title, tagline, your own draft short bio, your credibility answers, the speakers whose stage you have shared, your keynote topics, your topic and audience from the inventory, and whether you speak online or live, paid or free, and where.
What is never sent to Anthropic:
- your email address
- your photographs
- your phone number, links, and contact details
- your testimonials
- your past events and organiser contacts
- your entire motivation and goals section — including your self-ratings, your target income and your target fee
Anthropic does not use this data to train its models. Under its commercial API terms, inputs and outputs are deleted after 7 days.
No decision about you is made by a machine. The AI drafts text. You read it, edit it, and decide what to keep. There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.
6. Who can see your data
Two people. Monique Blokzyl, and one technical contractor who builds and maintains the application and needs administrative access to do so. He is bound by a written data processing agreement and by confidentiality, and may only act on Monique’s instructions.
Other participants cannot see your data. Every table in the database enforces access rules that tie each row to its owner, so the application cannot return another participant’s data even if asked. Your photographs are held in private storage, not on a public URL.
7. Companies that process data on our behalf
| Company | What it does | Where the data is |
|---|---|---|
| Supabase | Database, login, photograph storage | European Union — Frankfurt, Germany |
| Vercel | Hosts the application and runs it | European Union — Frankfurt, Germany |
| Anthropic | Generates profile text (section 5) | United States |
| ActiveCampaign | Sends your invitation email | United States |
Each is bound by a written data processing agreement and may only use your data to provide its service to us. None of them may use it for their own purposes.
The application itself sends no email. Your invitation link was generated manually and sent to you by Monique.
8. Data sent outside the EU
Your data is stored and processed in the European Union. Two exceptions:
- Anthropic (United States) receives the profile fields listed in section 5 while your profile is being generated.
- ActiveCampaign (United States) processes your name and email address to send your invitation.
Both transfers are protected by the European Commission’s Standard Contractual Clauses, the safeguard provided for in Art. 46(2)(c) GDPR. You can ask us for a copy — see section 11.
9. Cookies
The application uses only the cookies required to keep you logged in. Without them you could not stay signed in between pages.
There is no analytics, no advertising, no tracking, and no third-party cookie of any kind. That is why you have not been asked for cookie consent — under the ePrivacy rules, strictly necessary cookies do not require it.
10. How long we keep your data
While your account is active, we keep it. Your speaker profile is meant to be a tool you keep and update, not something that expires when the programme ends.
If you do not log in for 36 months, we delete your account and everything in it. We will email you one warning first.
You can ask us to delete everything at any time, and we will — see section 11. Deletion removes your data from the live system. Copies may remain in our providers’ routine backups for a short period afterwards, until they are overwritten in the normal course.
11. Your rights
Under the GDPR you have the right to:
- Access your data and get a copy of it (Art. 15)
- Correct anything inaccurate (Art. 16)
- Delete your data (Art. 17)
- Restrict how we use it (Art. 18)
- Receive it in a portable format to take elsewhere (Art. 20)
- Object to processing based on our legitimate interests (Art. 21)
To exercise any of these, email hello@heartpoweredbusiness.com. We will respond within one month. There is no charge.
You do not need to give a reason to ask for deletion, and asking will not affect your participation in anything else.
12. Complaints
If you think we have handled your data wrongly, please tell us first — we would rather fix it. You also have the right to complain to a data protection authority at any time, without contacting us first.
The authority responsible for us is:
Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover, Germany
Email: poststelle@lfd.niedersachsen.de
Phone: +49 511 120-4500
You may also complain to the authority where you live or work.
13. When you enter data about other people
The application lets you enter testimonials and the business contact details of event organisers. Those are other people’s personal data, and they have the same rights over it that you have over yours.
Please only enter:
- testimonials the person has already agreed you may use — as you would for any marketing material
- business contact details — a work email or company phone, not someone’s private mobile or home address
If one of those people contacts us about their data, we will deal with it and may need to ask you about it.
14. Security
Your data is held in the European Union. Every database table enforces owner-only access rules. Photographs are in private storage and are not publicly reachable. Access is limited to the two people named in section 6, over encrypted connections and encrypted devices. Application secrets are never sent to your browser.
No system is perfectly secure. If a breach occurs that presents a risk to you, we will tell you and the supervisory authority as the law requires.
15. Changes to this notice
If we change what we collect or why, we will update this page and change the date at the top. For anything significant we will tell you directly rather than expecting you to notice.