1. Who is responsible?
Wisna Rafimanesh, trading under the brand WE Beauty, is a sole proprietorship and is responsible for the personal data described in this notice.
- Zadelmakerstraat 49, 1315 AN Almere, the Netherlands
- Chamber of Commerce 42117236
- VAT identification number NL005507602B13
- info@wébeauty.com · +31 6 1172 3776
2. Which data does WE Beauty process?
- Contact details such as your name, email address and telephone number.
- Messages and questions sent by email, telephone or WhatsApp.
- Booking information including treatment, appointment date and time and appointment status.
- The amount and status of the fixed €25 deposit. Mollie processes the online payment; WE Beauty does not receive full payment-card details.
- Before-and-after photographs used to review progress with you and, only after separate consent, potentially for marketing.
- Private feedback that you intentionally email to WE Beauty.
- Your email address and consent status if you subscribe to a newsletter.
- Limited technical and statistical data through Google Analytics 4, only after you have accepted statistics.
Medical details are discussed verbally during the intake only and, under the confirmed process, are not received by email or recorded in the client file.
3. Purposes and legal bases
- To answer your question and prepare a consultation or treatment.
- To book, confirm, change, remind you of and carry out an appointment.
- To process the deposit and administer the outstanding amount.
- To keep business records and comply with legal obligations.
- To secure the website and booking environment, prevent misuse and improve services on the basis of a legitimate interest.
- With your consent: to activate statistics, publish photographs or send a newsletter.
If the process changes and medical details are recorded in the future, the appropriate GDPR basis, security and retention period will be determined first. Any healthcare record-keeping duty will be tied to the final Wkkgz assessment.
4. Bookings and payments
HadidyLabs processes your name, email address, telephone number, treatment, appointment date and time and payment status through the calendar. An online appointment is confirmed immediately after successful booking and payment of the deposit.
Mollie processes the fixed €25 online deposit. The deposit is deducted from the treatment price.
5. Service providers and recipients
- STRATO for hosting, domain services and business email.
- HadidyLabs for the calendar, appointment management, technical administration and its own system for sending newsletters through WE Beauty’s business STRATO mailbox on WE Beauty’s instructions.
- Mollie for online payments, including Klarna when this payment method is available in the payment environment.
- Apple/iCloud for storage of before-and-after photographs and, where used, customer data.
- WhatsApp/Meta when you choose to contact WE Beauty through WhatsApp.
- The bookkeeper to the extent necessary for the accounts.
- Google Analytics 4, only after consent; Search Console for technical search performance.
The bookkeeper and any accounting software will be added once known. Roles, processor arrangements, subprocessors and possible access or transfers outside the EEA also require provider-by-provider verification. Operating only in the Netherlands does not automatically mean that all digital processing takes place solely within the EEA.
6. Health data and photographs
Information about a procedure, recovery stage, medication or medical circumstances may reveal health information. These details are discussed verbally and confidentially during the intake only and, under the confirmed process, are not received by email or stored in writing. Do not send medical records or medical details through ordinary email, the booking calendar or WhatsApp.
WE Beauty takes before-and-after photographs to review progress at each appointment. These photographs are stored in iCloud and, under the current process, are accessible only to Wisna.
Marketing consent is always separate from treatment. Refusing marketing consent does not affect your ability to receive a treatment.
Consent for future publication may be withdrawn. Withdrawal does not retrospectively affect processing carried out lawfully before withdrawal, but WE Beauty will stop new publication and remove or anonymise material under its control where reasonably possible and legally required.
Client-record photographs are kept for up to two years under the current choice. A separate form will request consent per marketing channel and explain how consent may be withdrawn.
7. Retention
- General enquiries without a booking: up to twelve months after the last contact.
- Customer and appointment data: up to 24 months after the last treatment, unless a legal obligation or pending dispute requires longer retention.
- Engagement and appointment confirmations in the business mailbox: up to twelve months, except where data forms part of statutory accounting records or remains necessary for an ongoing dispute.
- Before-and-after photographs in the customer record: up to two years, unless earlier deletion is possible and appropriate.
- Invoices, payments and other core accounting records: seven years.
- Closed complaints: two years after closure, longer while a dispute is pending or the law requires it.
- Private feedback: up to twelve months.
- Newsletter consent: until you unsubscribe, plus only the minimal record needed to honour the opt-out and demonstrate consent.
- Google Analytics 4 user and event data: fourteen months.
8. Security and access
Under the current process, only Wisna has access to intake data and before-and-after photographs. Service providers receive only the data needed for their own task, such as booking, payment or technical administration.
WE Beauty uses two-factor authentication, device locking, iCloud security and a protected photo album. Potential personal-data breaches are recorded and assessed through the internal breach procedure.
Before public launch, every relevant account will still be checked for unique access, two-factor authentication and appropriate recovery and backup settings.
9. Your privacy rights
You may contact info@wébeauty.com to request access, correction, erasure, restriction or portability. You may object to certain processing and withdraw consent. WE Beauty may ask for reasonable information to verify your identity securely.
If you are dissatisfied, you may complain to the Dutch Data Protection Authority.
10. Changes
This notice will be updated when the intake process, providers, retention periods, Analytics or other processing changes. The current date is always shown at the top.