Privacy Policy

Effective date: 1 March 2026

Controller: Tabular B.V.
Address: Stationsstraat 11, 7607 GX Almelo, The Netherlands

This Privacy Policy explains how personal data is collected, used, and protected when you visit tabular.com, use forms on the site, schedule calls, purchase training tickets, communicate with Tabular B.V., exercise GDPR rights, or participate in optional community channels.

1) Contact

Data Protection Officer (DPO): Chris Woolderink.

2) Personal data collected

2.1 Forms hosted by YouForm (contact, signup, Data Rights Requests)

We use YouForm for:

  • Contact forms
  • Signup forms
  • Data Rights Request Form (DRRF)
  • Other forms with free-text fields

Depending on the form, we may collect:

  • Name
  • Email address
  • Phone number (optional)
  • Organisation (optional)
  • Free-text messages or information you provide voluntarily
  • Data required to process GDPR rights requests

YouForm stores submissions and forwards them to our email inbox.
Submissions are not automatically deleted.

2.2 Scheduling calls (Cal.com)

When scheduling meetings via Cal.com, we collect:

  • Name
  • Email address
  • Additional notes (optional)

Cal.com shares this information with us so the meeting can be held and prepared.

2.3 Ticket sales and payments (Tito + Stripe)

When purchasing training tickets via Tito:

  • Name
  • Email address
  • Company / organisation
  • VAT number
  • Billing address (street, city, region, postal code, country)
  • Ticket and invoice details

Payments are processed securely by Stripe.
We never receive or store your full card details.

Refunds and chargebacks occur within Tito/Stripe without additional personal data collection.

2.4 Course‑related communications

Training participants receive required service communications (e.g., logistics, updates).
These are essential and cannot be unsubscribed from.

2.5 Slack community (optional)

For optional membership in the “TABULAR developers” Slack workspace, we use:

  • Name
  • Email address

Participation is optional and can be ended at any time.

2.6 Analytics (Umami Cloud)

We use Umami Cloud with:

  • Cookieless mode
  • IP anonymization

No cookies or full IP addresses are stored.

3) Sources of personal data

  • Directly from you
  • Through our service providers:
    • YouForm
    • Cal.com
    • Tito
    • Stripe
    • Slack
    • Umami Cloud

4) Legal bases for processing

Contract

  • Ticket purchases
  • Invoicing
  • Training delivery
  • Meeting scheduling
  • Required service communications

Legitimate interests

  • Responding to enquiries
  • Handling Data Rights Requests
  • Protecting and operating services
  • Administering optional Slack participation

Consent

Used for truly optional or voluntary information (e.g., free-text notes).

5) Cookies

  • Tabular B.V. does not set cookies.
  • Umami Cloud uses cookieless analytics.
  • Third‑party services may use cookies based on their own policies.

6) Sharing of data

We only share personal data with essential service providers:

  • YouForm – hosting and delivery of form submissions
  • Cal.com – scheduling information
  • Tito – ticketing and invoicing
  • Stripe – payment processing
  • Email provider – communications delivery
  • Slack – optional community workspace

All providers follow their own privacy and security standards.

7) Hosting and logs

The site uses Hugo and is hosted via GitHub Pages.
GitHub may process limited technical logs for security and performance.

8) International transfers

Some providers may process data outside the EU/EEA.
When this occurs, they apply legally recognised safeguards such as Standard Contractual Clauses (SCCs).

9) Security

We apply reasonable organisational and technical measures, including encrypted transmission (TLS) and limited-access controls.

10) Your rights

You may exercise GDPR rights:

  • Access
  • Rectification
  • Erasure
  • Restriction
  • Portability
  • Objection
  • Withdrawal of consent (when processing is based on consent)

Submit requests using:
https://forms.tabular.com/drrf

You may also contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

11) Children

Our services are not intended for children under 16, and we do not knowingly collect their data.

12) Changes

We may update this Privacy Policy.

The latest version will always be published here.