Privacy statement

1. Who is responsible for your personal data?
Body Care voor Mannen attaches great importance to protecting your personal data and your privacy. In this Privacy Policy, we explain which personal data we process, why we process it, how long we retain it, with whom we may share data, and what rights you have.
The data controller is:
Body Care voor Mannen
Kanaalstraat 180/1
1054 XR Amsterdam
The Netherlands
Dutch Chamber of Commerce (KvK) number: 78732670
Email: info@bodycarevoormannen.nl
Telephone / WhatsApp: +31 6 13400855
In this Privacy Policy, Body Care voor Mannen and, where appropriate, its owner are referred to as “Body Care voor Mannen”, “we”, “us” or “our”.
2. Who does this Privacy Policy apply to?
This Privacy Policy applies to the processing of personal data relating to, among others:
-
clients and former clients;
-
persons who make an appointment or request information;
-
visitors to our website and online shop;
-
persons who purchase a product or gift voucher;
-
persons who contact us by email, telephone, WhatsApp, a contact form or social media; and
-
other persons whose personal data we process in connection with our services.
3. What personal data do we process?
The data we process depends on how you use our services.
3.1 Identification and contact details
We may process, among other things, the following data:
-
first and last name;
-
address, postcode and place of residence, where necessary;
-
telephone number;
-
email address;
-
information required to make and manage an appointment; and
-
other contact details that you provide to us yourself.
3.2 Appointment and treatment data
In connection with appointments and treatments, we may process, among other things:
-
the date and time of appointments;
-
the selected treatment or service;
-
appointment history;
-
relevant intake information;
-
treatment information;
-
treatment records or progress notes, insofar as necessary; and
-
information concerning any pre-treatment and aftercare.
We limit this data to what is reasonably necessary for the proper and safe performance of the treatment or service.
3.3 Health data
For certain treatments, it may be necessary to process information about your health. This may, for example, include information about:
-
skin problems or skin conditions;
-
allergies;
-
relevant medication;
-
infections or contagious conditions;
-
open wounds;
-
recent surgery;
-
recent cosmetic or medical treatments;
-
contraindications; or
-
other health circumstances that may be relevant to the safe performance of a treatment.
Health data constitutes special category personal data and is therefore afforded additional protection. We do not request more medical or health information than is reasonably necessary to assess whether a treatment can be carried out safely and responsibly.
Where explicit consent is required for the processing of health data, we will request this consent in advance. You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
Where certain health information is necessary in order to perform a treatment safely and you do not wish to provide this information, or you withdraw the consent required for its processing, this may mean that we are unable to perform or continue to perform the treatment safely.
Body Care voor Mannen does not provide medical diagnoses and is not a substitute for a doctor or other qualified healthcare professional.
3.4 Photographs and other files provided by you
If you provide us with a photograph or other file yourself, for example via WhatsApp, email, a contact form or another communication channel, we may process it for the purpose for which you provided it.
Photographs relating to a physical or medical condition may contain information about your health and are therefore handled with additional care.
We do not use photographs provided by you for advertising, social media, testimonials or other promotional purposes without obtaining separate consent for this purpose.
3.5 Payment, order and invoicing data
When you purchase a treatment, service, product or gift voucher, we may process, among other things:
-
the amount due and the amount paid;
-
payment status;
-
invoicing information;
-
order information;
-
information about products or services purchased;
-
delivery address, where delivery is required;
-
refund information;
-
transaction information received from a payment service provider; and
-
information required for our financial administration.
Full payment card or bank details are generally processed by the relevant bank or payment service provider rather than by Body Care voor Mannen, insofar as such information does not need to be provided to us.
3.6 Communication data
When you contact us, we may process the content of the communication and relevant information relating to it.
This may include communication by email, telephone, WhatsApp, the contact form on our website or social media.
3.7 Website and technical data
When you use our website, depending on your settings and the technology used, technical data may be processed, including:
-
IP address;
-
date and time of your visit;
-
browser and device information;
-
pages visited;
-
technical log data;
-
cookie data; and
-
information necessary for the security and proper functioning of the website and online shop.
More information about this can be found in Article 11 of this Privacy Policy.
3.8 CCTV footage
CCTV surveillance may be in operation at the entrance to Body Care voor Mannen. More information about this can be found in Article 9.
4. Why do we process personal data?
We process personal data only where there is a legitimate purpose and a valid legal basis for doing so.
We may process personal data for purposes including:
-
responding to questions and requests;
-
making, confirming, changing and cancelling appointments;
-
providing treatments and other services;
-
assessing whether a treatment can be carried out safely and responsibly;
-
maintaining information necessary for a treatment;
-
providing relevant pre-treatment and aftercare information;
-
processing and delivering orders;
-
issuing and administering gift vouchers;
-
processing payments, invoicing and financial administration;
-
sending appointment confirmations, reminders and other service messages;
-
handling complaints;
-
establishing, exercising or defending legal claims;
-
protecting individuals, property, our website, systems and business premises;
-
preventing or investigating fraud, misuse and security incidents;
-
complying with legal obligations; and
-
sending commercial communications where permitted by law.
Depending on the processing activity, we rely on one or more of the following legal bases:
-
Performance of a contract
Where processing is necessary to perform an appointment, treatment, order or other agreement with you, or to take steps at your request before entering into an agreement.
-
Legal obligation
Where we are required to process or retain certain data in order to comply with a legal obligation, for example in connection with our financial administration.
-
Consent
Where you have given us consent for a particular processing activity. In relation to special category personal data, such as health data, we request explicit consent where required.
-
Legitimate interests
Where processing is necessary for a legitimate business or security interest and your privacy interests do not override that interest. This may, for example, apply to security, fraud prevention, business administration or the handling and prevention of legal disputes.
5. Appointments and service messages
When you make an appointment or purchase a service from us, we may contact you with information that is necessary or relevant to that appointment or service.
This may, for example, include:
-
an appointment confirmation;
-
an appointment reminder;
-
information about changing or cancelling an appointment;
-
information necessary for a treatment;
-
pre-treatment or aftercare information;
-
information about an order;
-
a payment notification; or
-
a response to a question you have asked.
Such communications are service messages and are not considered advertising where they relate solely to the agreed services or services requested by you.
For these purposes, we may use email, telephone or WhatsApp, depending on the contact details you have provided to us and the way in which you communicate with us.
6. News, promotions and other commercial communications
We may inform you by email, WhatsApp or another electronic communication channel about news, offers, promotions or services from Body Care voor Mannen where permitted by law.
6.1 Consent
Where prior consent is required, we will send electronic commercial communications only where you have voluntarily given your consent. You may withdraw this consent at any time.
6.2 Existing clients
If you have previously purchased a service or product from Body Care voor Mannen, we may, where permitted by law, inform you about our own similar products or services. You will always be provided with a simple and free means of indicating that you no longer wish to receive such communications.
6.3 WhatsApp
-
We do not automatically use your telephone number for commercial WhatsApp messages merely because you provided that number when making an appointment.
-
The same legal principles that apply to other forms of electronic advertising also apply to commercial WhatsApp messages.
-
If you no longer wish to receive commercial messages, you may inform us at any time, for example by replying via WhatsApp with “STOP”, “UNSUBSCRIBE” or another clear message.
-
After you unsubscribe, we will no longer use your telephone number for the relevant commercial communications. We may, however, retain a limited record of your opt-out in order to prevent you from inadvertently being contacted again for the same marketing purposes.
-
Opting out of commercial communications does not affect necessary service messages concerning, for example, an ongoing appointment, order or payment.
7. Online shop, payments and delivery
-
When you order a product or gift voucher through our online shop, we process the data necessary to process the order, handle payment and, where applicable, deliver the order.
-
For payments, we may use external payment service providers. These parties process the data necessary for the selected payment method.
-
Where a physical product needs to be shipped, the necessary name and address details may be provided to a delivery or transport service.
-
We do not share more personal data than is necessary for payment or delivery.
8. Social media and external communication platforms
-
When you communicate with Body Care voor Mannen through an external platform, such as WhatsApp or a social media platform, the provider of that platform may itself process personal data.
-
The privacy terms and conditions of the relevant provider also apply to such processing.
-
We recommend that you do not provide sensitive health information through public social media posts.
-
Where health information is necessary for a treatment, we endeavour to process it as minimally and carefully as possible.
9. CCTV surveillance
For the security of visitors, the business owner and property, CCTV surveillance is used at the entrance to Body Care voor Mannen. The CCTV surveillance is used exclusively for security purposes. The presence of CCTV surveillance is clearly indicated before entering the relevant area.
The camera is not intended to record treatments, and no CCTV surveillance takes place in treatment rooms or other areas where clients may reasonably have a heightened expectation of privacy.
The CCTV footage:
-
is not used for commercial purposes;
-
is not freely accessible;
-
is not continuously monitored in real time; and
-
is generally deleted automatically no later than 24 hours after recording.
Where footage must or may lawfully be preserved in connection with a specific security incident, and where this is technically possible, the relevant footage may be retained for longer solely for that purpose, for as long as this is necessary and legally permitted.
CCTV footage is disclosed to third parties only where there is a valid legal basis for doing so, for example where this is necessary in connection with an incident or where the police, judicial authorities or another competent authority lawfully requests such footage.
10. With whom do we share personal data?
We do not sell your personal data.
We disclose personal data to third parties only where this is necessary for our services, business operations, security or legal obligations.
Depending on the services used, these parties may include:
-
the provider of our website and online shop, including Wix;
-
payment service providers and banks;
-
our accounting or administrative software providers;
-
our accountant, bookkeeper or financial adviser;
-
providers of email, telephone and communication services;
-
WhatsApp and the service providers involved when you communicate with us via WhatsApp;
-
IT, hosting and security service providers;
-
providers involved in CCTV security;
-
delivery or transport services for orders;
-
professional advisers, where reasonably necessary; and
-
public authorities, supervisory authorities, the police or judicial authorities where we are legally required or authorised to provide data.
Where an external party processes personal data solely on our behalf, we enter into appropriate agreements concerning the processing and security of such data where required.
Each party receives personal data only to the extent necessary for the relevant task or service.
11. Cookies and website data
Our website and online shop may use cookies and similar technologies.
Cookies are small files or technologies that allow information to be stored or accessed during or after your visit to a website.
11.1 Functional cookies
Functional cookies are necessary for the proper operation of the website and online shop. They may, for example, be used for security, navigation, shopping-cart functionality or remembering necessary settings.
Prior consent is generally not required for cookies that are strictly necessary for the operation of a service requested by you.
11.2 Analytical cookies
We may use analytical cookies or similar technologies to gain insight into the use and performance of our website.
Where such cookies have only limited impact on your privacy and meet the applicable legal requirements, prior consent may not be required.
11.3 Tracking, advertising and other non-essential cookies
Cookies or other tracking technologies that are not necessary and that, for example, track individual browsing behaviour for profiling, marketing or targeted advertising purposes are placed only where valid consent has been obtained in accordance with the law.
Where consent is required, you may refuse it without this preventing you from using the normal parts of the website for which such cookies are not necessary.
You may change a previous cookie choice or withdraw your consent via the available cookie settings, insofar as this functionality is used on the website.
Current information about the cookies actually used, their purposes, providers and retention periods will, where applicable, be made available through the cookie settings or cookie information on the website.
12. Transfers of personal data outside the European Economic Area
Some external service providers may process personal data wholly or partly outside the Netherlands or outside the European Economic Area (EEA).
Where personal data is processed outside the EEA, we ensure, insofar as this applies to us, that there is a valid legal basis for such processing and that appropriate safeguards are in place.
This may, for example, take place on the basis of an adequacy decision by the European Commission or, where necessary, through approved Standard Contractual Clauses or other legally recognised safeguards.
13. How long do we retain personal data?
We do not retain personal data for longer than is necessary for the purpose for which it was collected, unless a longer retention period is necessary or legally required.
As a general rule, we apply the following principles.
13.1 Contact requests
Individual enquiries and correspondence that do not result in a client, order or treatment relationship are generally deleted once they are no longer necessary. We aim not to retain such correspondence for longer than one year after the matter has been concluded, unless there is a legitimate reason to retain it for longer.
13.2 Client, appointment and treatment data
Client, appointment and treatment data is retained for as long as necessary for the ongoing provision of services and thereafter only for as long as there is a legitimate purpose for retaining it.
Treatment and health data is periodically reviewed and deleted when it is no longer reasonably necessary for treatment, safety, aftercare, the handling of a complaint, or the establishment, exercise or defence of a legal claim.
We do not automatically apply a medical retention period that applies only to healthcare providers under specific healthcare legislation where such a statutory retention obligation does not apply to Body Care voor Mannen.
13.3 Financial administration
Data that forms part of our legally required financial or tax administration is generally retained for seven years, or longer where a statutory exception requires this.
13.4 Orders
Order data is retained for as long as necessary for delivery, returns, complaints, warranty or conformity rights and our administration.
Where order data forms part of the tax administration, the applicable statutory retention period applies.
13.5 Commercial communications
Data used solely for commercial communications is retained until you unsubscribe, withdraw your consent or the data may or need no longer be used for this purpose for another reason.
A limited record of an opt-out may be retained for longer in order to prevent you from unintentionally receiving commercial communications again.
Where necessary, we may retain evidence of marketing consent for as long as reasonably necessary to demonstrate that communications were sent lawfully.
13.6 CCTV footage
CCTV footage from the entrance is generally deleted automatically no later than 24 hours after recording, except in the event of a specific incident where it is necessary and legally permitted to retain relevant footage for longer.
After the applicable retention period has expired, personal data is deleted, anonymised or otherwise appropriately taken out of use.
14. Security of personal data
Body Care voor Mannen takes appropriate technical and organisational measures to protect personal data against loss, destruction, misuse, unauthorised access, unauthorised alteration or unwanted disclosure.
Depending on the data and systems involved, these measures may include:
-
secure accounts and strong passwords;
-
restricted access to personal data;
-
appropriate security for devices and systems;
-
secure connections where available;
-
software and system updates;
-
restricted access to treatment and health information;
-
careful management of physical documents;
-
agreements with external service providers regarding security and confidentiality; and
-
measures for detecting and handling security incidents.
No digital system can guarantee complete security. We therefore periodically assess which measures are appropriate in view of the nature and sensitivity of the data we process.
15. Personal data breaches
Where a security incident involving personal data occurs, we assess whether it constitutes a personal data breach within the meaning of the GDPR. Where required by law, we report the breach to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within the applicable time limit.
Where a personal data breach is likely to result in a high risk to your rights and freedoms, we will also inform you where required by law.
16. Your privacy rights
Subject to the applicable legal conditions, you have various rights in relation to your personal data. You may, among other things, ask us to:
-
provide access to the personal data we process about you;
-
correct inaccurate or incomplete data;
-
delete personal data;
-
restrict processing;
-
provide personal data to you or, where technically possible and legally applicable, transfer it to another organisation;
-
object to processing based on legitimate interests; and
-
withdraw consent previously given.
Where personal data is used for direct marketing, you may object to such use at any time. We will then no longer use the relevant personal data for those direct marketing purposes.
Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
Not every right applies without limitation in every situation. We may, for example, be required to retain certain data because of a statutory retention obligation or an overriding legitimate reason.
You may submit a request concerning your privacy rights to:
We generally respond within one month of receiving your request. Where a request is complex or where we receive multiple requests, the statutory response period may be extended. If this happens, we will inform you.
To prevent personal data from being disclosed to the wrong person, we may, where we have doubts about your identity, request additional information that is reasonably necessary to verify your identity. We will not request more information than necessary.
17. Automated decision-making
Body Care voor Mannen does not use solely automated decision-making that produces legal effects concerning you or similarly significantly affects you.
18. Privacy complaints
If you have questions or complaints about the way Body Care voor Mannen handles your personal data, we recommend that you first contact us. We will endeavour to handle your question or complaint carefully.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), the Dutch supervisory authority for privacy and personal data. This right is without prejudice to any other legal remedies available to you.
19. Changes to this Privacy Policy
Body Care voor Mannen may amend this Privacy Policy when our services, systems used or applicable laws and regulations change. The most recent version will be published on our website.
Where a change has a material impact on the way in which we process personal data already collected, we will, where necessary, provide appropriate additional information or request consent again.
20. Contact
If you have any questions about this Privacy Policy or the processing of your personal data, you can contact:
Body Care voor Mannen
Kanaalstraat 180/1
1054 XR Amsterdam
The Netherlands
Email: info@bodycarevoormannen.nl
Telephone / WhatsApp: +31 6 13400855
Dutch Chamber of Commerce (KvK) number: 78732670
Version: 11 September 2026