Excellent. Below is your GDPR-compliant Privacy Policy tailored for a Netherlands-based beauty business with online bookings and automatic payments.

Privacy Policy

B.I. Sygnature
Last Updated: 24-02-2026

B.I. Sygnature respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Dutch data protection laws.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, book appointments, purchase products, or interact with us.

1. Business Information (Data Controller)

Business Name: B.I. Sygnature
Registered Address: [Insert Address], The Netherlands
Email: [Insert Email Address]
Phone: [Insert Phone Number]

B.I. Sygnature is the data controller responsible for your personal data.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

2.1 Identity Information

• Full name

• Date of birth (if required for services)

2.2 Contact Information

• Email address

• Phone number

• Billing and service address

2.3 Booking & Transaction Information

• Appointment history

• Services received

• Payment details (processed securely via payment providers)

• Order history

2.4 Health Information (Where Necessary)

• Allergies

• Skin conditions

• Medical disclosures relevant to treatments

Health data is considered special category data under GDPR and is only collected with your explicit consent.

2.5 Website Usage Data

• IP address

• Browser type

• Device information

• Cookies and analytics data

3. How We Use Your Data

We process personal data for the following purposes:

• To manage bookings and appointments

• To process payments

• To provide beauty and salon services

• To respond to customer inquiries

• To comply with legal and tax obligations

• To improve our website and services

• To send marketing communications (only with your consent)

4. Legal Basis for Processing

Under GDPR, we rely on the following legal bases:

• Contractual necessity – to provide booked services and products

• Legal obligation – for tax and accounting compliance

• Legitimate interest – to improve services and manage operations

• Consent – for marketing communications and health-related information

You may withdraw consent at any time.

5. Online Payments

Online bookings with automatic payments are processed securely via third-party payment providers. We do not store full card details.

Payment providers process your data in accordance with their own privacy policies and GDPR requirements.

6. Data Sharing

We do not sell your personal data.

We may share your data with:

• Payment processors

• Booking system providers

• IT and website service providers

• Accountants or legal advisors (where legally required)

• Government authorities when required by law

All third parties are required to comply with GDPR.

7. Data Retention

We retain personal data only as long as necessary:

• Booking and transaction records: up to 7 years (tax compliance)

• Marketing data: until consent is withdrawn

• Health-related disclosures: retained only as long as necessary for treatment records

After this period, data is securely deleted.

8. Your GDPR Rights

Under GDPR, you have the right to:

• Access your personal data

• Correct inaccurate data

• Request deletion ("Right to be Forgotten")

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent at any time

• Lodge a complaint with the Dutch Data Protection Authority

Dutch Supervisory Authority:
Autoriteit Persoonsgegevens

If you believe your rights have been violated, you may contact them directly.

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Secure payment processing

• Encrypted website connections (SSL)

• Restricted internal access to personal data

10. Cookies

Our website may use cookies for:

• Website functionality

• Analytics

• Marketing (where consent is given)

You can manage cookie preferences via your browser settings or our cookie banner.

11. Marketing Communications

We will only send marketing emails or promotions if:

• You have given explicit consent; or

• You are an existing customer and have not opted out.

You may unsubscribe at any time via the link in our emails.

12. Children’s Data

Our services are not intended for children under 16 without parental consent. We do not knowingly collect personal data from minors without appropriate authorization.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

14. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact:

B.I. Sygnature
290 WEENA 3012NJ Rotterdam, Netherlands.
Email: cs@bisygnature.com
Phone: XXX-XXX-XXXX