Privacy Policy

Last updated: December 2024

This Privacy Policy describes how inelegshbh B.V. ("we," "our," or "us") collects, uses, and protects your personal information when you use our luxury home spa services and visit our website at inelegshbh.life.

Data Controller

inelegshbh B.V. is the data controller responsible for your personal data. Our contact details are:

Data Collection

The data we collect includes personal information such as your name, email address, phone number, home address, and health information relevant to spa treatments. We collect this information when you book our services, contact us through our website, or interact with our customer service team. Additionally, we may collect technical data about your website usage through cookies and similar technologies.

How We Use Your Information

We explain how we use your information in this section to ensure transparency about our data processing activities. We use your personal data to provide our luxury spa services, process bookings, communicate with you about appointments, improve our services, and comply with legal obligations. Your health information is used solely to ensure safe and appropriate treatment delivery. We may also use your contact details to send you service updates and promotional materials if you have consented to receive them.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract performance: To provide our spa services and fulfill our contractual obligations
• Legitimate interests: To improve our services, manage customer relationships, and operate our business
• Consent: For marketing communications and certain data processing activities where we have obtained your explicit consent
• Legal obligation: To comply with applicable laws and regulations

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your data with:

• Our certified therapists who need access to relevant information to provide your treatments
• Service providers who assist us in operating our business (such as payment processors, booking systems)
• Legal authorities when required by law or to protect our rights

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this privacy policy. Specifically:

• Customer data: Retained for 7 years after your last service for business records and legal compliance
• Health information: Retained for 5 years after your last treatment for safety and medical records
• Marketing data: Retained until you withdraw consent or we no longer have a legitimate business need
• Website analytics: Typically retained for 26 months

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data under certain circumstances
• Right to restrict processing: Request limitation of how we process your data
• Right to data portability: Request transfer of your data to another organisation
• Right to object: Object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Withdraw consent for processing where consent is the legal basis

Cookies and Website Analytics

Our website uses cookies and similar technologies to improve your browsing experience and analyze website traffic. For detailed information about our cookie usage, please see our Cookie Policy. You can control cookie settings through your browser preferences.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption of sensitive data, secure data storage, regular security assessments, and staff training on data protection.

International Data Transfers

Your personal data is primarily processed within the European Union. If we transfer data outside the EU, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Children's Privacy

Our services are intended for adults. We do not knowingly collect personal data from children under 16 years of age. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any significant changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this privacy policy, want to exercise your rights, or have concerns about how we handle your personal data, please contact us at:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data in accordance with applicable law.

Supervisory Authority

If you have concerns about our data processing practices, you can contact the Dutch supervisory authority: