Privacy statement

How we handle your data

Last updated 8 October 2026

Strong Roots is the practice of Zoë Hofstetter in Amsterdam. This page explains which personal data we collect through this website and The Strong Foundation member area, and what you can ask of us. Strong Roots is responsible for this data under the General Data Protection Regulation (GDPR). Questions go to info@strongroots-pt.com.

Visiting the website

The server that runs this website keeps a short log of every request: your IP address, the page, the date and time and the type of browser. We need it to keep the site working and to block attacks. The log is deleted after 14 days. The server is hosted by Hetzner in Germany.

We do not use analytics, advertising cookies or tracking pixels. The fonts come from Google Fonts and the video behind the menu plays from YouTube in its privacy-enhanced mode. To load them, your browser contacts Google, which sees your IP address.

Free video, masterclass and waiting list

When you sign up for the free video, the masterclass or the waiting list, your first name and email address go to MailerLite, the service we use to send email. We use them to send you what you asked for and news about Zoë's programmes. Every email has an unsubscribe link. Once you unsubscribe, you no longer hear from us. We do this with your consent.

Contact and booking

When you email or call Zoë, or send a booking request on this site, we use what you tell us to answer you and plan your sessions. A booking request from this site is sent as an email from your own mail program. The free intro call is booked through Google Calendar, so Google processes the name and email address you enter there. We keep this correspondence while we are in touch and delete it when it is no longer needed.

Payments

Payments go through Mollie in Amsterdam. Mollie handles your payment details. We receive your name, your email address, the amount and whether the payment succeeded, plus a company name and VAT number if you add them for your invoice. Dutch tax law requires us to keep invoices and payment records for seven years.

The Strong Foundation member area

Before you join, we ask you to confirm that the programme suits your situation. We only store that you confirmed it and when.

For your account we store your name, your email address and your password in scrambled form (a hash), so nobody can read it. We also store what you do in the programme: the lessons you finished, your notes, quiz results, lesson feedback, weekly check-ins, messages with Zoë and, if you add one, a profile photo. Zoë sees your progress, feedback and check-ins so she can guide you, and she can keep notes about your progress for that purpose. What you post in the community is visible to the other members with access to it, together with your name and photo.

The body log, where you rate how your body feels, is health data. It only switches on after you give explicit consent. Only you can see it, and turning it off deletes it.

Lesson videos play from Vimeo. Emails from the member area, such as login links, reminders and messages, are sent through Resend from its servers in Ireland. We need this data to deliver the programme you joined. When your access ends we keep your account so you can come back or renew. Ask us and we delete it. Backup copies of the server are kept for up to six months and are then deleted.

Who else processes your data

Besides Hetzner, MailerLite, Mollie, Resend, Vimeo and Google, our email inbox is hosted by Hoasted in the Netherlands. These companies only process your data for us and on our instructions. Some of them are based in the United States. Their transfers are protected with the safeguards the GDPR requires, such as the EU standard contractual clauses. We never sell your data.

Your rights

You can ask to see the data we have about you, to correct or delete it, to limit its use, or to receive it in a file you can take elsewhere. You can object to how we use it and withdraw your consent at any time. Send your request to info@strongroots-pt.com and we answer within a month. If you are not happy with how we handle your data, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Changes

When we change how we handle data, we update this page and the date at the top.