Legal
Last updated: 13 March 2026. These documents apply to all visitors of protypa.com and to clients of Protypa Council™.
Lilian E. M. Crawford trading as Protypa Council™ · Last updated: 13 March 2026
This privacy statement describes how I, Lilian E. M. Crawford, collect, use, and protect personal information when you visit my website, sign up for my newsletter, purchase my book or programmes, or engage with my services through the Protypa Council™.
Business name: Lilian E. M. Crawford trading as Protypa Council™
Location: Stadhuispromenade 31, 1315XP Almere, The Netherlands
KVK: 70642265
Contact: lilian@protypa.com
Website: https://protypa.com
As a business based in the Netherlands, I am subject to the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (Uitvoeringswet AVG). I act as the data controller for all personal information described in this statement.
I collect personal information only when it is necessary for a specific, defined purpose. The information I collect depends on how you interact with me.
When you sign up for my newsletter, join a waitlist, or download a governance reference document, I collect your name and email address. This information is used solely to send you the content you requested and relevant updates about my work, programmes, and publications.
When you purchase my book, a programme, or a service, I collect the information necessary to complete and fulfil your order. This includes your name, email address, and billing details. Payment is processed securely by Stripe. I do not store your full payment card details — these are handled entirely by Stripe under their own privacy and security standards. You can review Stripe's privacy policy at stripe.com/privacy.
When you apply for an advisory engagement or another service that requires an intake process, I collect the information you provide in the form. This may include your name, organisation, role, and context relevant to the engagement. This information is used solely to assess fit, prepare for the engagement, and maintain a record of the work.
I use Google Analytics to understand how visitors use my website. Google Analytics collects information such as pages visited, time spent on pages, device type, browser, and approximate geographic location derived from your IP address. This data is collected using cookies and is processed by Google. You can review Google's privacy policy at policies.google.com/privacy.
You can opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.
Under the GDPR, I process personal information on the following legal bases:
Contractual necessity — to fulfil a purchase, deliver a service, or carry out an engagement you have requested.
Consent — to send you newsletters, updates, or marketing communications. You may withdraw your consent at any time by unsubscribing via the link in any email.
Legitimate interest — to improve my services, understand how my website is used, and maintain records of completed engagements, where this does not override your rights.
Legal obligation — to comply with applicable Dutch and EU legal requirements, including financial record-keeping.
I use personal information only for the purpose for which it was collected. I do not sell your personal information to third parties. I do not use your information for automated decision-making or profiling.
Specifically, I use personal information to fulfil orders and deliver digital or physical products; provide advisory services, programmes, and engagements; send newsletters and updates where you have given consent; respond to enquiries and support requests; maintain financial and contractual records as required by law; and understand and improve my website and communications.
I share personal information only where necessary, and only with parties who are bound by appropriate data protection obligations. The third-party processors I currently use are:
Stripe — for payment processing. Stripe acts as an independent data controller for payment information. See stripe.com/privacy.
Google Analytics — for website analytics. Data is processed by Google in accordance with their privacy policy.
Systeme.io — for sending newsletters, automated email sequences, and managing opt-in forms and funnels.
Cloud storage and document tools — for storing engagement records and work products, where applicable.
I do not share your personal information with any other third parties without your explicit consent, unless required to do so by law.
Some of the third-party processors I use, including Stripe and Google, may process your data outside the European Economic Area (EEA). Where this occurs, I rely on these processors to have implemented appropriate safeguards — such as Standard Contractual Clauses approved by the European Commission — to ensure your data remains protected to the standard required by the GDPR.
Newsletter and download subscribers: until you unsubscribe or request deletion.
Purchase and contractual records: for seven years in accordance with Dutch financial record-keeping requirements.
Intake and engagement records: for the duration of the engagement and up to two years after its conclusion, unless a longer period is required.
Website analytics data: in accordance with Google Analytics retention settings, which I have set to 24 months.
When personal information is no longer needed and no legal obligation requires its retention, I delete it securely.
My website uses cookies. A cookie is a small file placed on your device when you visit a website. I use the following types of cookies:
Functional cookies — necessary for the website to operate correctly.
Analytical cookies — placed by Google Analytics to understand how visitors use the website.
When you first visit my website, you will be asked for your consent to analytical cookies. You may withdraw or adjust your cookie preferences at any time via the cookie settings on the website. Refusing analytical cookies will not affect your ability to use the website.
Under the GDPR, you have the following rights in relation to your personal information:
Right of access — you may request a copy of the personal information I hold about you.
Right to rectification — you may request that inaccurate or incomplete information is corrected.
Right to erasure — you may request that I delete your personal information, subject to legal retention obligations.
Right to restriction — you may request that I restrict the processing of your information in certain circumstances.
Right to data portability — you may request that I provide your information in a structured, machine-readable format.
Right to object — you may object to processing based on legitimate interest or for direct marketing purposes.
Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact me at lilian@protypa.com. I will respond within one month of receiving your request.
If you have a concern about how I handle your personal information that I have not resolved to your satisfaction, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
I take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. These include secure connections (HTTPS), access controls, and use of reputable third-party processors with their own security standards.
No method of transmission or storage is completely secure. If you have reason to believe your personal information has been compromised, please contact me immediately at lilian@protypa.com.
My website, services, and publications are intended for business professionals and are not directed at children under the age of 16. I do not knowingly collect personal information from children. If you believe a child has provided me with personal information, please contact me and I will delete it promptly.
I may update this privacy statement from time to time to reflect changes in my services, tools, or legal obligations. The 'last updated' date at the top of this page will reflect any revisions. Where changes are material, I will notify you by email or by a prominent notice on my website.
Lilian E. M. Crawford trading as Protypa Council™
lilian@protypa.com
https://protypa.com
Stadhuispromenade 31, 1315XP Almere, The Netherlands
Protypa Council™ · Human Judgment as Governance
Lilian E. M. Crawford trading as Protypa Council™ · Last updated: 16 March 2026
These terms and conditions apply to all products, services, programmes, and engagements offered by Lilian E. M. Crawford, trading as Protypa Council™, a sole proprietorship based in the Netherlands.
By purchasing a product, enrolling in a programme, signing up for a service, or using this website, you agree to these terms. Please read them carefully before proceeding.
Business name: Lilian E. M. Crawford trading as Protypa Council™
Location: The Netherlands
Contact: lilian@protypa.com
Chamber of Commerce (KVK): 70642265
VAT number: NL002301417B21
I offer the following products and services under the Protypa Council™:
The AI Hype Trap™ — available as a digital download and physical book.
Online programmes and courses — structured learning experiences on AI governance and deliberate leadership, delivered digitally.
Advisory services — individual or organisational advisory engagements delivered by Lilian E. M. Crawford.
The Protypa Council™ Deliberation — a board-level AI governance deliberation for organisations facing material AI decisions.
Membership or community access — access to a defined community, resources, or ongoing engagement, as described at the point of purchase.
The specific scope, format, duration, and deliverables of each offering are described on the relevant sales or landing page at the time of purchase. Those descriptions form part of the agreement between us.
All prices are listed in euros (EUR) and are inclusive of VAT where applicable. Payment is due at the time of purchase unless a payment plan or invoice arrangement has been agreed in writing.
Payments are processed securely by Stripe. By completing a purchase, you agree to Stripe's terms of service. I do not store your payment card details.
For high-value advisory engagements and deliberations, a separate written agreement or proposal will govern the commercial terms, including fees, invoicing schedule, and scope. In the event of a conflict between that agreement and these terms, the written agreement takes precedence.
Upon successful payment, digital products — including e-books and downloadable resources — are made available immediately or by email. It is your responsibility to download and save these materials.
Digital products are for your personal or organisational use only. You may not redistribute, resell, reproduce, or share them publicly without prior written permission.
Access to online programmes is provided for the period stated at the point of purchase. I reserve the right to update programme content to improve quality or reflect developments in the field. Core materials will remain accessible for the duration of your access period.
Programme materials are protected by copyright. They are licensed to you for personal use only and may not be shared, copied, or republished in any form.
I do not guarantee specific outcomes from participation in any programme. Results depend on your individual engagement, context, and application of the material.
Advisory engagements and Protypa Council™ Deliberations are delivered personally by Lilian E. M. Crawford. They are not transferable to another person or organisation without prior written agreement.
The Protypa Council™ Deliberation is a structured governance deliberation, not a legal, financial, or regulatory compliance service. It does not constitute legal advice, and I accept no liability for decisions made on the basis of the deliberation process or its outcomes.
Confidentiality is treated with the highest degree of care. Information shared during advisory engagements and deliberations is held in strict confidence and will not be disclosed to third parties without your consent, except where required by law.
Because digital products are made available immediately upon purchase, the right of withdrawal under EU consumer law does not apply once you have accessed or downloaded the product. By completing your purchase and accessing the content, you expressly agree to waive this right.
If you experience a technical failure that prevents access, please contact me at lilian@protypa.com and I will resolve it promptly.
If you have not yet accessed any programme content, you may request a full refund within 14 days of purchase. Once content has been accessed, no refund will be issued except at my sole discretion.
Cancellation terms for advisory engagements and deliberations are set out in the written agreement or proposal for each engagement. In the absence of a specific agreement: cancellations made more than 14 days before a scheduled session will receive a full refund. Cancellations made within 14 days will not receive a refund, though I will make reasonable efforts to reschedule.
Membership fees are non-refundable once a billing period has begun. You may cancel your membership at any time, and cancellation will take effect at the end of the current billing period.
All content, materials, frameworks, methodologies, and branding associated with Lilian E. M. Crawford and the Protypa Council™ — including but not limited to The AI Hype Trap™, the Protypa Council™ decision system, the Protypa Charter, the Calm AI Decision Map™, and all written, visual, and programme materials — are protected by copyright and remain my exclusive intellectual property.
The Protypa Charter may be referenced or adopted by organisations in accordance with its stated principles. Adoption does not imply transfer of copyright or ownership, and does not grant any right to reproduce, redistribute, or commercialise the Charter or any associated materials.
You may quote brief passages for the purposes of review, discussion, or organisational reference consistent with the purpose of the Protypa Charter, provided appropriate attribution is given.
Any other use of my intellectual property requires prior written permission. Requests may be submitted to lilian@protypa.com.
Where you share confidential information with me in the context of an advisory engagement or deliberation, I will treat that information with strict confidence. I will not disclose it to third parties without your consent, except where required by applicable law.
Equally, any proprietary materials, frameworks, or methodologies I share with you in the context of an engagement are confidential to our working relationship and may not be shared externally without prior written agreement.
To the fullest extent permitted by Dutch and EU law, my liability for any loss or damage arising from the use of my website, products, programmes, or services is limited to the amount you paid for the relevant product or service.
I accept no liability for indirect, consequential, or economic loss; loss of profit or revenue; decisions made on the basis of my content, programmes, or advisory work; or technical failures of third-party platforms.
Nothing in these terms limits liability for fraud, death, or personal injury caused by negligence, as required by mandatory Dutch law.
My website is provided for informational purposes and to enable access to my products and services. I make reasonable efforts to ensure content is accurate and up to date, but I do not guarantee the completeness or accuracy of any information on the site.
I accept no responsibility for the content of any third-party websites linked from my site. Links are provided for convenience and do not imply endorsement.
You may not use my website for any unlawful purpose, to transmit harmful or disruptive content, or in any manner that could damage the reputation of the Protypa Council™ or infringe the rights of others.
These terms are governed by the laws of the Netherlands. Any disputes arising from or relating to these terms, or to the products and services described herein, will be subject to the exclusive jurisdiction of the competent Dutch courts, unless mandatory EU consumer law provides otherwise.
I am committed to resolving disputes amicably. If you have a concern, please contact me first at lilian@protypa.com and I will do my best to reach a fair resolution.
I may update these terms from time to time. The 'last updated' date at the top of this document reflects any revisions. Where changes materially affect existing customers, I will provide reasonable notice by email or via a notice on my website. Continued use of my website or services after changes take effect constitutes acceptance of the revised terms.
Lilian E. M. Crawford trading as Protypa Council™
lilian@protypa.com
https://protypa.com
The Netherlands
Protypa Council™ · Human Judgment as Governance