Privacy Policy

Introduction

scolythagz B.V. ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website scolythagz.top, use our services, or interact with us.

As a company registered in the Netherlands (Registration Number: 63202532), we comply with the General Data Protection Regulation (GDPR) and applicable Dutch privacy laws.

Data Controller

scolythagz B.V. is the Data Controller for the personal information processed under this Privacy Policy. Our contact details are:

Data Collection

The data we collect includes personal information that you voluntarily provide to us when you use our services, book appointments, or communicate with us. We collect information through various means including our website, in-person visits, telephone calls, and email communications.

We may collect the following types of information:

• Personal identification information (name, email address, phone number)
• Appointment and booking information
• Health and wellness information relevant to our services
• Payment and billing information
• Website usage data and cookies
• Communication records and preferences

How We Use Your Information

We explain how we use your information to provide and improve our spa and wellness services. The use of your data is essential for delivering personalised treatments and maintaining our service quality.

We use your personal information for the following purposes:

• Providing spa and wellness services
• Managing appointments and bookings
• Processing payments and billing
• Communicating about our services
• Improving our services and customer experience
• Complying with legal obligations
• Marketing communications (with your consent)

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract Performance: To provide our spa services and fulfil our contractual obligations
• Legitimate Interests: To improve our services and business operations
• Consent: For marketing communications and certain data processing activities
• Legal Obligation: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy. We may share your information with:

• Service providers who assist in our business operations
• Healthcare professionals (with your consent)
• Legal authorities when required by law
• Business partners for appointment management systems

Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Generally, we retain:

• Customer account information: For the duration of your relationship with us plus 7 years
• Health and treatment records: As required by professional standards and legal obligations
• Marketing communications: Until you withdraw consent
• Website analytics: Up to 26 months

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right of Rectification: Request correction of inaccurate data
• Right of Erasure: Request deletion of your data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise any of these rights, please contact us at privacy@scolythagz.top.

Cookies and Website Analytics

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse website usage. For detailed information about our cookie practices, please refer to our Cookie Policy.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure payment processing systems

International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or have privacy-related concerns, please contact us using the following information:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your privacy rights have been violated.