Privacy Policy

Introduction

naperyqbkz B.V. ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your information when you visit our website naperyqbkz.live or use our spa and wellness services.

As a company operating in the Netherlands and serving clients in the European Union, we comply with the General Data Protection Regulation (GDPR) and Dutch data protection laws.

Data Controller

naperyqbkz B.V. is the data controller responsible for your personal data. Our contact details are:

Data Collection

The data we collect includes personal information that you provide to us directly and information that we collect automatically when you use our services or visit our website.

Information You Provide

• Contact information (name, email address, phone number)
• Appointment booking details and preferences
• Health information relevant to spa treatments (allergies, medical conditions)
• Payment information (processed securely through third-party payment processors)
• Communication preferences and marketing consent
• Feedback, reviews, and correspondence with us

Information We Collect Automatically

• Website usage data (pages visited, time spent, browser type)
• IP address and location data
• Device information (device type, operating system)
• Cookies and similar tracking technologies (see our Cookie Policy)

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract performance: To provide our spa services and fulfil our contractual obligations
• Legitimate interests: To improve our services, website functionality, and customer experience
• Consent: For marketing communications and non-essential cookies
• Legal compliance: To comply with applicable laws and regulations
• Vital interests: To protect health and safety in emergency situations

How We Use Your Information

We explain how we use your information for the following purposes:

• Providing and managing your spa appointments and treatments
• Processing payments and maintaining financial records
• Communicating with you about your appointments and our services
• Ensuring the safety and suitability of treatments based on health information
• Improving our website, services, and customer experience
• Sending marketing communications (with your consent)
• Complying with legal obligations and protecting our business interests
• Analysing website usage and optimising our online presence

Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service providers: Payment processors, booking systems, and IT support services
• Professional advisors: Lawyers, accountants, and business consultants
• Regulatory authorities: When required by law or to protect rights and safety
• Business transfers: In the event of a merger, acquisition, or sale of assets

All third parties are required to maintain appropriate security measures and use your data only for specified purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:

• Customer records: 7 years from last service (for legal and tax compliance)
• Marketing data: Until you withdraw consent or we no longer have a legitimate interest
• Website data: As specified in our Cookie Policy
• Financial records: 7 years as required by Dutch law
• Health information: 15 years as required by healthcare regulations

After the retention period expires, we securely delete or anonymise your personal data.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or for marketing
• Right to withdraw consent: Withdraw consent for processing where applicable

To exercise these rights, please contact us at privacy@naperyqbkz.live.

Data Security

We implement appropriate technical and organisational measures to protect your personal data:

• Encryption of data in transit and at rest
• Secure access controls and authentication
• Regular security assessments and updates
• Staff training on data protection and privacy
• Secure disposal of data and equipment
• Incident response and breach notification procedures

International Data Transfers

We primarily process your data within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure adequate protection through appropriate safeguards such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Cookies and Tracking

Our website uses cookies and similar technologies. For detailed information about our use of cookies, please see our Cookie Policy.

Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children under 16 without parental consent. If you believe we have collected data from a child under 16, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Continued use of our services after changes indicates acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data appropriately.