Privacy Policy

Sherpa’s Stories B.V.
Fort Hinderdamstraat 71, 1384 AM Weesp, The Netherlands
Chamber of Commerce: 77452402  |  VAT: NL861011545B01
info@sherpasstories.com  |  www.sherpasstories.com

Version: May 2026

Sherpa’s Stories B.V. values your privacy. In this privacy policy, you can read how we handle your personal data as data controller under the General Data Protection Regulation (GDPR). This policy covers what data we collect, why we collect it, who we share it with, how long we retain it, and what rights you have.

Do you have questions or would you like to exercise your rights? Please contact us at info@sherpasstories.com.

 1. Who we are
Sherpa’s Stories B.V. is the data controller for the personal data processed via www.sherpasstories.com and the Sherpa’s Stories webshop. Sherpa’s Stories publishes strategic tourism trend reports and is founded by Isabel Mosk, tourism strategist and keynote speaker.

Contact details:
Address: Fort Hinderdamstraat 71, 1384 AM Weesp, The Netherlands
Email: info@sherpasstories.com
Website: www.sherpasstories.com
Chamber of Commerce: 77452402

2. Personal data we process
We process personal data only when permitted under the GDPR, and only for the purposes described below. Depending on how you interact with us, we may process the following personal data:

•       First and last name

•       Company name and position (for business clients)

•       Email address

•       Billing address

•       Payment details (processed via our payment provider)

•       IP address and browser data (via cookies)

•       Purchase history and download activity

•       Newsletter preferences and engagement data

We obtain this data directly from you, for example when you place an order, subscribe to The Outlook by Sherpa’s Stories, or contact us.

3. Purposes and legal bases
Webshop orders
When you purchase a digital product, we process your name, email address and payment details to fulfil the order, send you the product and issue an invoice. Legal basis: performance of a contract. Retention period: 7 years (statutory tax obligation).

Customer service and contact
When you contact us by email or via our contact form, we process your name and email address to respond to your message. Legal basis: legitimate interest. Retention period: up to 2 years.

The Outlook by Sherpa’s Stories newsletter
If you subscribe to our monthly newsletter, we process your name and email address to send you travel trend insights, strategic updates and tourism news. Legal basis: consent. You can withdraw your consent at any time by clicking the unsubscribe link in any edition of The Outlook. Retention period: until you unsubscribe, after which data is deleted within 3 months.

Invoicing and administration
We process your name, address and payment data for invoicing purposes and to meet our statutory bookkeeping obligations. Legal basis: legal obligation. Retention period: 7 years.

Website analytics
We use Google Analytics to understand how visitors use our website, so we can improve it. Data is anonymised and IP addresses are truncated. Legal basis: legitimate interest. Retention period: 26 months.

4. Sharing personal data with third parties
We do not sell your personal data. We only share your data with third parties when necessary for the performance of our services or when required by law. We have data processing agreements with all processors. The third parties we work with include:

•       Shopify — webshop platform and order management

•       Shopify Payments / PayPal — payment processing

•       Klaviyo — newsletter and email marketing

•       Google Analytics — website analytics

•       Google Workspace — email and document management

•       Our accountant — bookkeeping and invoicing

Some of these providers are based outside the European Economic Area (EEA), including in the United States. In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

5. Your rights
Under the GDPR, you have the following rights regarding your personal data:

•       Right of access — you can request an overview of the personal data we hold about you.

•       Right to rectification — you can request that we correct inaccurate or incomplete data.

•       Right to erasure — you can request that we delete your personal data, subject to legal retention obligations.

•       Right to restriction of processing — you can request that we limit how we use your data in certain circumstances.

•       Right to data portability — you can request your data in a structured, machine-readable format.

•       Right to object — you can object to processing based on legitimate interest, including for direct marketing purposes.

•       Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, please send an email to info@sherpasstories.com. We will respond within one month.

You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at www.autoriteitpersoonsgegevens.nl.

6. Security
Sherpa’s Stories takes the protection of your personal data seriously. We have implemented appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure or alteration. If you believe your data is not adequately protected or there are signs of misuse, please contact us at info@sherpasstories.com.

7. Automated decision-making
Sherpa’s Stories does not make automated decisions about individuals without human review.

8. Changes to this policy
We may update this privacy policy from time to time. We will always publish the most recent version on our website. If changes directly affect you, we will notify you in advance.

Sherpa’s Stories B.V.  |  Fort Hinderdamstraat 71, 1384 AM Weesp  |  KvK 77452402  |  info@sherpasstories.com