Privacy Policy

Effective date: 2 August 2026

Amplify Impact B.V. ("Amplify Impact," "we," "us," or "our") respects your privacy and is committed to handling your personal data responsibly. This policy explains what personal data we collect through www.amplifyimpact.agency, why we collect it, how long we keep it, who we share it with, and what rights you have under the EU General Data Protection Regulation (GDPR).

We try to keep this policy readable rather than legalistic. If anything is unclear, email us at team@amplifyimpact.agency and we'll explain it in plain terms.

Who is responsible for your data

The data controller for the personal data described in this policy is:

Amplify Impact B.V.
Wethouder van Damlaan 98, 3648XP Wilnis
The Netherlands
KVK (Dutch Chamber of Commerce) number: 99690985
VAT number: NL869093381B01
Email: team@amplifyimpact.agency

Amplify Impact B.V. is a small consultancy. We do not have a statutory obligation to appoint a formal Data Protection Officer, but the contact above handles all privacy matters and functions as your point of contact for anything in this policy.

What personal data we collect

White paper download form

When you download our white paper, we ask you for:

- Your name
- Your email address
- Your organisation type (e.g. nonprofit, foundation, corporate, government, academic)

We collect only what we need to send you the paper and to understand, in general terms, who is interested in our work. We do not ask for anything beyond these three fields on this form.

Readiness Scan

The Readiness Scan runs in your browser and computes your result there — nothing is sent anywhere just by taking it. If you choose to enter your email address at the end to receive a copy of your result, we collect: your email address, the organisation-stage, funding-model and role options you selected, and the diagnostic result (your archetype and five layer scores) those answers produced. This is stored in a Google Sheet linked to a Google Form, used only to send you your result and, if you've indicated interest in speaking with us, to follow up — it is not shared with any third party or used for any other purpose.

Web analytics and cookies

As of the effective date above, this website does not use cookies, analytics tools, tracking pixels, or any similar technology. We checked the site's code directly to confirm this — there is nothing setting cookies or writing to your browser's local storage today. If we add standard web analytics in the future (for example, to see how many people visit the site), we will update this policy first and, where required, add a cookie consent banner before any non-essential cookie is set.

Why we process your data (our lawful basis)

Under the GDPR, we need a valid legal reason — a "lawful basis" — for every use of your personal data. We rely on two:

Legitimate interest — for basic follow-up

When you download the white paper, we use your name and email on the basis of our legitimate interest in following up about the resource you requested (for example, sending you the paper itself, or a short one-off note asking if it was useful). This is limited to reasonable, expected contact directly related to the thing you asked for. It does not include ongoing marketing. We've considered this against your interests: the data isn't sensitive, the contact is something you'd reasonably expect after requesting a paper, and you can opt out of further contact at any time by emailing us.

Consent — for marketing emails

If we ever want to add you to an ongoing newsletter or marketing list beyond that one-off follow-up, we will ask for your separate, explicit consent to do so — it will not be bundled into the download form as a pre-ticked box. You can withdraw that consent at any time by clicking "unsubscribe" in any marketing email or by emailing team@amplifyimpact.agency. Withdrawing consent is free and just as easy as giving it.

How long we keep your data

We keep personal data collected through the download form for as long as you remain a relevant contact for our work, and in any case no longer than 24 months from your last interaction with us, after which we delete it unless we have a separate reason and lawful basis to keep it longer (for example, if you've become a client, in which case standard contract and bookkeeping retention rules apply instead). You can ask us to delete your data sooner at any time — see "Your rights" below.

Who we share your data with

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

Email/CRM tool — to be confirmed. We have not yet selected the email delivery or CRM tool we'll use to manage paper downloads and follow-up. Once we choose one, it will act as a data processor on our behalf, we will put a Data Processing Agreement in place with it, and we will name the tool here and describe where it stores your data (including whether that involves a transfer outside the EU/EEA, and what safeguard — such as Standard Contractual Clauses — applies). Until this section is updated with a named tool, treat any references to "our email provider" elsewhere on this site as not yet finalised.

Aside from that future processor, the only people with access to your data are the founder and any team members of Amplify Impact B.V. directly involved in following up with you.

We will only disclose personal data to a public authority if we are legally required to do so (for example, in response to a valid legal order).

International data transfers

We are based in the Netherlands (EU/EEA). We do not currently transfer your personal data outside the EU/EEA. If the email/CRM tool we eventually select stores data outside the EU/EEA, we will only proceed on the basis of a valid transfer mechanism — such as an EU adequacy decision or Standard Contractual Clauses — and we will describe that arrangement in the section above once it is finalised.

Your rights under the GDPR

You have the following rights over your personal data. To exercise any of them, email team@amplifyimpact.agency. We will respond within one month.

- Access — ask us for a copy of the personal data we hold about you.
- Rectification — ask us to correct data that is inaccurate or incomplete.
- Erasure — ask us to delete your personal data ("right to be forgotten").
- Restriction — ask us to limit how we use your data while a request or dispute is resolved.
- Portability — ask us for your data in a structured, commonly used, machine-readable format.
- Objection — object to our use of your data under legitimate interest, including for any direct marketing.
- Withdraw consent — where we rely on your consent (marketing emails), withdraw it at any time.

If you're not satisfied with how we've handled your request or your data, you have the right to lodge a complaint with the Dutch data protection authority:

Autoriteit Persoonsgegevens (Dutch DPA)
Website: www.autoriteitpersoonsgegevens.nl

How we protect your data

We keep the amount of data we collect to the minimum needed for the purpose, restrict access to the founder and directly involved team members, and use HTTPS encryption for data submitted through this site's forms. We will apply the same standard, or better, to any future processor we bring on.

Children's privacy

This website and its forms are directed at professionals working in or with nonprofit, foundation, corporate, or government organisations. We do not knowingly collect personal data from children, and this site is not intended for use by children.

Changes to this policy

We may update this policy as our data practices change — for example, once we select an email/CRM tool, or launch the Readiness Scan. We will update the effective date above when we do. If a change is significant, we will make reasonable efforts to flag it prominently on this page.

Contact us

Questions, requests, or concerns about your personal data can be sent to team@amplifyimpact.agency.