Privacy Policy

Introduction

blunttwcn B.V. ("we", "our", or "us") is committed to protecting your privacy and personal information. This privacy policy explains how we collect, use, and protect your personal data when you visit our website, use our services, or interact with our facial and skin therapy studio located in Rotterdam, Netherlands.

Data Controller

blunttwcn B.V. is the data controller for the personal information we collect and process. Our registered office is located at Berkenlaan 114, 3079 NJ Rotterdam, South Holland, Netherlands. Registration number: B32025614, VAT number: NL81452015B03.

Data Collection

The data we collect includes personal information such as your name, email address, phone number, and any information you provide when booking appointments or contacting us. We also collect information about your skin type, treatment history, and preferences to provide personalised skincare services. Additionally, we may collect technical information such as your IP address, browser type, and website usage data through cookies and similar technologies.

How We Use Your Information

We explain how we use your information in this section to ensure transparency about our data processing activities. We use your personal data to provide facial and skin therapy services, process bookings and appointments, communicate with you about our services, send appointment reminders and follow-up care instructions, improve our services and website functionality, comply with legal obligations, and maintain accurate business records. All processing is based on legitimate legal grounds under GDPR.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds: performance of a contract (when providing services you've booked), legitimate interests (for business operations and service improvement), consent (for marketing communications and non-essential cookies), and legal obligations (for tax and business record requirements).

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your data with trusted service providers who assist us in operating our business (such as appointment booking systems), professional advisors (accountants, lawyers), and regulatory authorities when required by law. All third parties are required to maintain the confidentiality and security of your information.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected. Treatment records are kept for 7 years after your last appointment for professional and legal requirements. Contact information is retained for 3 years after your last interaction with us, unless you request earlier deletion. Marketing consent records are kept until you withdraw consent. Website analytics data is typically retained for 26 months.

Your Rights

Under GDPR, you have the following rights regarding your personal data: the right to access your personal data and receive a copy, the right to rectify inaccurate or incomplete data, the right to erasure (deletion) in certain circumstances, the right to restrict processing, the right to data portability, the right to object to processing based on legitimate interests, and the right to withdraw consent where applicable. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes secure storage systems, encrypted communications, access controls, regular security assessments, and staff training on data protection. However, no method of transmission over the internet is 100% secure.

Cookies and Website Analytics

Our website uses cookies and similar technologies to improve your browsing experience and analyse website usage. We use both essential cookies (necessary for website functionality) and non-essential cookies (for analytics and preferences). You can manage your cookie preferences through our cookie consent banner and your browser settings. For detailed information, please see our Cookie Policy.

International Data Transfers

As we operate within the European Union, your personal data is primarily processed within the EU/EEA. If we need to transfer data outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Marketing Communications

We may send you marketing communications about our services, special offers, and skincare tips if you have given consent or where we have a legitimate interest to do so. You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this privacy policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us using the following contact information: