Legal
PRIVACY
Your privacy matters. Here’s what information Skin Sisters collects, why we use it and what choices you have.
Version 2026-10-01 · Effective 1 October 2026
01Who we are
The controller for your personal data is:
[LEGAL COMPANY NAME], trading as Skin Sisters
[REGISTERED ADDRESS]
KvK [KVK NUMBER]
[EMAIL ADDRESS]
02What information we collect
Depending on how you use Skin Sisters: name, address, email, phone number, booking information, order information, payment status (not your card or bank details), communication with us, technical website information, cookie preferences and marketing preferences.
03Treatment information
For some treatments you may tell us about medication, pregnancy, skin conditions or other things that affect whether a treatment can be done safely. This is health information, a special category of personal data, and we treat it that way:
- We only ask for what we genuinely need to treat you responsibly, and only with your explicit consent.
- It is stored separately from your booking, order and marketing data, and only authorised studio staff can access it.
- It is never used for marketing, never shared with advertising platforms such as Meta, and never used to build advertising audiences.
04Why we use it, and on what basis
| Purpose | Legal basis |
|---|---|
| Processing bookings and taking payments | Performance of the contract |
| Providing treatments responsibly (incl. treatment notes) | Your explicit consent, for health-related information |
| Processing and shipping orders | Performance of the contract |
| Customer service and complaints | Performance of the contract / legitimate interest |
| Tax and legal administration | Legal obligation |
| Fraud prevention and security | Legitimate interest |
| Website functionality | Legitimate interest |
| Analytics and advertising measurement | Consent (only where activated) |
| Newsletters and first-drop updates | Consent, unsubscribe any time |
05Payments
Online payments are processed by Mollie. Skin Sisters never sees or stores your full card number, security code or bank login details.
06Service providers
We use these providers, who only process data on our instructions:
- Payments: Mollie B.V.
- Website hosting & database: Lovable (Lovable Cloud)
This list is updated whenever a provider is added.
07Meta Pixel & Conversions API
Meta measurement tools are not active on this website. If we switch them on, they will only run with your consent and this section will be updated first. Treatment and health information will never be shared with Meta.
09How long we keep information
| Bookings and appointment history | [RETENTION PERIOD] |
| Treatment notes (health-related) | [RETENTION PERIOD] |
| Orders, invoices and payment records | 7 years (Dutch tax retention obligation) |
| Withdrawal requests | [RETENTION PERIOD] |
| First-drop / newsletter sign-ups | Until you unsubscribe |
| Customer service emails | [RETENTION PERIOD] |
10Your privacy rights
You can ask us to show you the data we hold about you, correct it, delete it, restrict its use, or send it to you in a usable format. You can object to use based on legitimate interest, and withdraw consent at any time (this doesn't affect earlier processing).
Email [PRIVACY EMAIL]. We respond within one month.
You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
11Security
We use appropriate technical and organisational measures to protect your information, such as restricted staff access, encrypted connections and keeping treatment information separate. No system is without risk, and we keep reviewing our measures.
Questions? Email [EMAIL ADDRESS]. See also Shipping, Returns & withdrawal, Privacy and Terms.