Privacy Policy

How we protect and process your personal data.

1. Data controller

Reem Beauty, located at Voorstraat 47A, 3201 BA Spijkenisse, the Netherlands, is responsible for processing your personal data as described in this Privacy Policy. You can contact us via info@reembeauty.nl or +31 6 4112 2502.

2. What data do we collect?

We collect the following personal data:

Name, email address, phone number and (Academy only) address and date of birth.
Health information you fill in yourself in the online intake form (for example allergies, medication, pregnancy or skin conditions), only with your explicit consent.
Photos of the treated skin (before/after), only if you consent.
Treatment records: which treatment, settings and notes.
Payment and till data (amount, payment method, invoice or receipt number). We never see or store your bank details; iDEAL runs through Mollie.
Gift cards: name and email of buyer and recipient, personal message and delivery date.
Academy students: see 2a.
Your feedback after a visit (score and comment) and your message preferences.
IP address and browsing behaviour when using our website, where applicable.

2a. Reem Beauty Academy students

For the course and the required student administration (CRKBO) we record: your name, contact details, date of birth, address, emergency contact, the signed training agreement (with name, signature, date and IP address), payments and invoices, attendance per lesson day, progress notes, exam results, certificates and your course evaluation. We only record health information if you share it yourself and consent. We use evaluations to improve the course and only report them without names.

2b. Photos

We only take before and after photos with your consent, to follow the result of your treatment. They are kept in our secure management system, not on a phone or in a shared folder. We never use them on social media or the website without separate written consent. You can always ask us to delete them.

3. Purposes and legal bases

We process your data for the following purposes:

Appointment management: To schedule and confirm appointments (legal basis: performance of a contract).
Treatments: To carry out safe and personalised treatments, particularly regarding health data (legal basis: explicit consent).
Payment processing: To process payments (legal basis: performance of a contract).
Marketing: To inform you about offers, provided you have given consent for this (legal basis: consent).
Website improvement: To analyse and improve our website (legal basis: legitimate interest).
Service emails: Confirmation, reminder, intake form, aftercare and asking for your opinion (legal basis: performance of the agreement). Unsubscribe via the link in every email.
Offers and birthday message: Only with your consent; withdraw anytime via the link in the email (legal basis: consent).
Training and CRKBO administration: Performance of the training agreement and legal obligation.
Gift cards: Performance of the purchase; we send the card to the address the buyer provides.

4. Sharing data

We work with these processors, bound by security agreements:

Vercel: website hosting.
Neon: database, stored in Frankfurt (EU).
Mollie: payments.
Resend: sending emails.
Hostinger: our mailbox.
WhatsApp/Meta: when you contact us via WhatsApp.

Government authorities only where the law requires it. We never sell data.

5. Your rights

You have the following rights regarding your personal data:

Access to the data we hold about you.
Correction of inaccurate data.
Erasure of your data, unless legal obligations prevent this.
Restriction of processing in certain cases.
Objection to processing for marketing purposes.
Data portability to another party.

6. Data security

We take appropriate technical and organisational measures to protect your data, such as encryption of data transfer (HTTPS) and secure storage. In the event of a data breach, we report this to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and, where necessary, to you.

7. Retention periods

We do not keep your data longer than necessary:

Appointments, payments, receipts, invoices and gift card sales: 7 years (tax obligation).
Intake health information, treatment records and photos: until 2 years after your last treatment, then deleted. Earlier if you withdraw your consent.
Gift cards: valid for 2 years; buyer and recipient data are kept for 7 years as part of our accounts.
Student administration, agreement, attendance, exams and certificates: 7 years after the course ends. Student health information: deleted no later than 1 year after the course ends.
Feedback after a visit: 2 years.
Consent for offers: until you withdraw it.
Complaints: 2 years after they are resolved.

8. Cookies

We use necessary cookies for the site to function. Marketing cookies (such as TikTok Pixel and the Google Ads conversion tag) are only placed if you click "Accept" in the cookie banner. If you choose "Necessary only", no marketing cookies are placed.

9. Privacy complaints

Do you have a complaint about how we process your personal data? Please contact us first via info@reembeauty.nl. If we can't resolve it together, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl.

10. Changes to this Privacy Policy

We may update this Privacy Policy. Changes will be published on our website and, where applicable, communicated by email. The current version is always available on this page.

Back to homepage