Legal
Privacy Policy
Last updated: April 2026
What Data We Collect
We collect the following personal data when you use our services: • Name and email address — provided when booking an appointment or creating an account. • Phone number — optionally provided for appointment reminders. • Appointment history — records of treatments booked, dates, and any notes. • Technical data — IP address and browser type, collected automatically by our hosting provider for security purposes.
Purpose of Data Processing
We process your personal data for the following purposes: • To manage your appointments and send confirmation or reminder emails. • To maintain your account and provide access to your booking history. • To improve our services based on usage patterns. • To comply with legal obligations. We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.
Cookie Usage
We use cookies to operate this website: • Session cookies — necessary for logging in and navigating the booking portal. These are deleted when you close your browser. • Preference cookies — store your language preference and cookie consent choice for 365 days. We do not use advertising or analytics cookies. You may decline non-essential cookies via the consent banner. Declining cookies does not affect your ability to book appointments.
Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. • Account data is kept for the duration of your account plus 2 years after your last appointment. • Appointment records are retained for 5 years for administrative and legal purposes. • Technical logs are retained for up to 90 days. You may request deletion of your data at any time (see Your Rights below).
Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the following rights: • Right of access — you may request a copy of the personal data we hold about you. • Right to rectification — you may request correction of inaccurate or incomplete data. • Right to erasure — you may request deletion of your personal data ('right to be forgotten'). • Right to restriction — you may request that we limit processing of your data in certain circumstances. • Right to data portability — you may request your data in a structured, machine-readable format. • Right to object — you may object to processing based on legitimate interests. To exercise any of these rights, please contact us using the details below. We will respond within 30 days. You also have the right to lodge a complaint with the Belgian Data Protection Authority (www.dataprotectionauthority.be).
Questions about this policy? Contact us:
Studio Mimosa