Privacy Policy

1.Who we are and how to reach us

Optimize Your Vibe is the trading name of Henriquez E-Commerce and Leadership Training, the coaching, consulting and education business of Nevin Henriquez, based in Aruba. In this policy "we", "us" and "our" mean Optimize Your Vibe. "You" means anyone who visits this website, submits a form, buys a course, applies to work with us or attends one of our events.

We are the data controller for the personal data described here, which means we decide why and how it is used.

1.1Legal entity

Henriquez E-Commerce and Leadership Training, trading as Optimize Your Vibe.

1.2Chamber of Commerce number (Aruba)

[Chamber of Commerce number to be added]. Not yet published on this page. Email us and we will confirm it directly.

1.3Email

connect@optimizeyourvibe.com. This is also the address for every privacy request described in this policy.

1.4Post

Savaneta 177e, Aruba.

1.5WhatsApp

+31 6 14460094.

We have not appointed a Data Protection Officer. Privacy requests go to Nevin Henriquez at the address above and are handled personally.

2.What we collect

We collect two kinds of information: what you hand us deliberately, and a small amount that the website records as you use it.

What you give us:

• Application and enquiry forms. Your name, email address, WhatsApp or phone number, the name of your business, your website and social handles, your role, your location, what you need most, what is currently stalling you, and a self-reported monthly revenue band. Some forms also carry a free-text answer in your own words.
• Assessment and quiz answers. If you complete the Vibe-O-Meter or the Vibe Type quiz, your answers and the resulting scores are recorded alongside your name and email so we can send you the breakdown.
• Event registrations. Your name, email, phone and company, plus your ticket reference and whether you attended.
• Purchases. Your email address, what you bought, and the payment confirmation Stripe returns to us. See the note below for what we deliberately never receive.
• Anything else you choose to write to us, by email, through a form, or over WhatsApp.

What the site records as you use it:

• An anonymous visitor identifier stored in your browser, used to join up page views from the same browser without knowing who you are.
• The pages you viewed, the page that referred you, and the time of the visit.
• Your IP address and browser user agent. These reach our server with every request, and where you have accepted marketing cookies we also pass a hashed form of your details to Meta so that an advert click can be matched to a form submission.
• Device, browser and approximate location data collected by the analytics and advertising tools described in the cookies section, and only once you have accepted them.

We do not ask for and do not want special category data such as health, religion or political opinion. Please do not put it in a form.

3.Why we use it, and our legal basis

Under the UK and EU General Data Protection Regulation we have to have a lawful reason for every use of your data. Ours are these.

Where we rely on legitimate interests, we have weighed those interests against your rights, and you can object at any time using the contact details above.

4.Cookies and similar technologies

A cookie is a small file a website stores in your browser. This site also uses browser local storage, which works the same way for these purposes. We group them into three categories, and the banner you saw on your first visit is where you choose between them.

4.1Strictly necessary. Always on.

Serving the page, remembering a form you have already submitted, and storing your cookie choice itself so we do not ask again. These do not identify you to anyone else and we do not ask for consent for them, because the site cannot work without them.

4.2Analytics. Off until you say yes.

PostHog is active in this category: aggregate behaviour, which pages get read, where people stop, clicks and, where enabled, session replays with all typed input masked. Google Analytics 4 is built into the site and gated by this same consent choice, but is not currently collecting anything in production because no measurement ID is configured. If that changes, this page will say so.

4.3Marketing. Off until you say yes.

The Meta Pixel. Measures which advert brought you here and lets us build advertising audiences. This is the category that carries data to Meta.

You can change your mind whenever you like. Select "Cookie settings" at the bottom of any page to reopen the chooser, turn categories on or off, and save. Withdrawing consent takes effect immediately: we clear what we can reach and reload the page so the script stops running. Your browser settings can also block or delete cookies independently of this site.

If we materially change this section, we will ask you to choose again rather than assume your old answer still applies.

Separately, our host Vercel collects aggregate page performance and traffic counts. It does not set a cookie for this, does not build a profile of you and cannot identify you, so it runs as part of the necessary category.

5.Who else touches your data

We are a small business and we use specialist providers rather than building everything ourselves. Each of these processes your data only to provide its service to us, under its own contract and privacy terms. This is the complete list.

Beyond these, we may share data with our professional advisers where they need it, and with a public authority or court where the law genuinely requires it.

We do not sell your personal data, and we do not trade or rent our contact list to anyone.

6.Where your data goes

We are based in Aruba and the providers above are largely based in the United States, so your data will be stored and processed outside the European Economic Area and outside the United Kingdom.

Where a transfer of that kind takes place, we rely on the safeguards each provider publishes in its own data processing agreement, which for these providers means the European Commission Standard Contractual Clauses and the equivalent United Kingdom addendum. You can ask us which safeguard applies to a specific provider and we will tell you.

7.How long we keep it

We keep personal data for as long as we need it for the purpose it was collected for, and no automatic deletion runs on our systems today. In practice that means:

• Enquiries and applications stay in our records while there is a live conversation and for a reasonable period afterwards, in case you come back to us.
• Customer accounts and course access are kept while you have access to what you bought.
• Invoices, receipts and payment records are kept for as long as tax and accounting law requires them.
• Marketing contacts are kept until you unsubscribe or ask us to delete you.
• Analytics records are kept in an aggregated or pseudonymous form and are not linked back to you by name.

If you ask us to delete your data, we do so promptly except for the records we are legally required to retain. You never have to wait for a retention period to expire before asking.

8.Your rights over your data

If you are in the European Economic Area or the United Kingdom, the GDPR gives you the rights below. We extend the same rights to everyone who contacts us, wherever you live, because it is simpler and fairer than running two standards.

8.1Access

Ask for a copy of the personal data we hold about you, and an explanation of what we do with it.

8.2Correction

Have anything inaccurate or incomplete put right. Tell us what is wrong and we will fix it.

8.3Deletion

Ask us to erase your personal data. We will, unless we are legally required to keep a specific record such as an invoice.

8.4Portability

Receive the data you gave us in a structured, machine readable file, or ask us to send it directly to another provider where that is technically possible.

8.5Restriction

Ask us to pause processing while a dispute about accuracy or legitimate interests is resolved.

8.6Objection

Object to any processing we base on legitimate interests, including profiling, and object to direct marketing at any time. An objection to direct marketing is always honoured, with no balancing test.

8.7Withdraw consent

Withdraw consent for anything we do on that basis, including analytics cookies, marketing cookies and marketing email. Withdrawing is as easy as giving it: use "Cookie settings" in the footer for cookies, or the unsubscribe link in any marketing email. Withdrawal does not undo processing that was lawful before you withdrew.

To exercise any of these, email connect@optimizeyourvibe.com and say what you want. There is no form to fill in and no charge. We may ask a question or two to confirm you are who you say you are, because handing your data to the wrong person would be the worse outcome. We aim to respond within 30 days and will tell you if a request will take longer.

If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to the data protection authority in your country, or in Aruba to the Personal Data Protection Commission.

9.If you are in California

The California Consumer Privacy Act, as amended by the CPRA, gives California residents specific rights. You have the right to know what personal information we collect and how it is used, to request a copy of it, to have it corrected, to have it deleted, to opt out of its sale or sharing, and to not be treated worse for exercising any of these rights.

We do not sell personal information for money, and we never have. However, when you accept marketing cookies, the Meta Pixel transmits data to Meta for cross-context behavioural advertising, and California law treats that as "sharing". Rejecting the marketing category is how you opt out, and you can do it before anything is shared or change your answer later through "Cookie settings" in the footer.

To exercise a California right, email connect@optimizeyourvibe.com. You may use an authorised agent, and we will ask for proof of that authority. We do not currently detect the Global Privacy Control browser signal, so please use the cookie settings control or write to us.

10.AI and automated processing

We build AI systems for clients, so it is fair to ask what AI touches your data. On this website, the answer is narrow and specific.

10.1Our internal analytics

We have built a feature that would send an aggregate summary of our own marketing and sales metrics, funnel views, click rates, lead counts and revenue totals, to the Anthropic Claude API and get a written briefing back. That summary would be business performance data, not a list of people. It is not currently active in production, no API key is configured, so nothing is sent to Anthropic today. When it is switched on, it will run only inside our private administrative dashboard, reachable only by an authenticated administrator, with no customer-facing equivalent anywhere on this site.

10.2Systems we build for clients

Where we build an AI system as part of a consulting engagement, it runs in that client's own environment and under that client's own agreement with us. It is not this website, and personal data you submit here is not fed into it.

10.3No automated decisions about you

We do not make decisions that produce legal effects for you, or similarly significant effects, by automated means alone. A person reads every application and every enquiry.

We do not use your personal data to train AI models, and we do not sell or supply it to anyone who does.

If that ever changes, we will say so on this page before it happens, not after.

11.How we protect it

Specifics rather than reassurance, so you can judge for yourself:

• Every page and every form on this site is served over an encrypted HTTPS connection.
• Card details go directly into a payment form hosted by Stripe. They never reach our servers or our database, which means there is no card data here to lose.
• Our administrative dashboard sits behind an authenticated, cryptographically signed session limited to a named allowlist. It fails closed: if authentication is not correctly configured in production, the dashboard is unreachable rather than open.
• Our database has row-level security enabled with no public policies, so the public key that ships inside the website cannot read any table. Records are reachable only through authenticated server routes.
• Rich text is sanitised before it is ever rendered, and public forms carry spam and abuse detection.
• Administrative areas and internal endpoints are excluded from search engine indexing.

Our data is held on established managed platforms, and we rely on the resilience and backup arrangements those platforms provide rather than operating separate infrastructure of our own. We would rather tell you that than imply something grander.

No system is perfectly secure, and we will not pretend otherwise. If a breach ever affects your personal data in a way that presents a real risk to you, we will tell you and the relevant authority as the law requires, promptly, with what we know and what we are doing about it.

12.Children

This site and everything we sell is intended for adults running or building a business. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us their data, write to connect@optimizeyourvibe.com and we will delete it.

13.Changes to this policy

We update this policy when what we do changes. The date at the top always reflects the current version. If a change materially affects how we use your data or which cookies we set, we will make that clear rather than quietly editing the page, and where the change touches cookies we will ask you to make your choice again.

14.Questions

Anything at all about this policy, or about the data we hold on you, goes to connect@optimizeyourvibe.com. A real person reads it.

14.1Henriquez E-Commerce and Leadership Training

Trading as Optimize Your Vibe. Nevin Henriquez, Savaneta 177e, Aruba.

14.2Email

connect@optimizeyourvibe.com

14.3WhatsApp

+31 6 14460094