Privacy Policy

Introduction

LegitiqFTF B.V. ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us. This policy applies to all services provided by LegitiqFTF and complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

Data Controller

LegitiqFTF B.V. is the data controller responsible for your personal data. Our contact details are:

Data Collection

The data we collect includes personal information that you provide directly to us, information collected automatically when you use our website, and information from third-party sources. We collect this information to provide and improve our spa services, communicate with you, and comply with legal obligations.

Information You Provide

• Contact information (name, email address, phone number, postal address)
• Account information when you create an account with us
• Health and wellness information relevant to our services
• Payment and billing information
• Communication preferences and marketing consents
• Feedback, reviews, and correspondence with us

Information Collected Automatically

• Website usage data (pages visited, time spent, click patterns)
• Device information (IP address, browser type, operating system)
• Cookies and similar tracking technologies
• Location data (with your consent)

How We Use Your Information

We explain how we use your information to provide our spa services, improve your experience, and maintain our business operations. The use of your data is based on various legal grounds under GDPR, including consent, legitimate interests, and contractual necessity.

Service Provision

• Providing spa treatments and wellness services
• Managing appointments and bookings
• Processing payments and managing billing
• Customising treatments based on your preferences and needs

Communication and Marketing

• Sending appointment confirmations and reminders
• Providing customer support and responding to inquiries
• Sending promotional materials (with your consent)
• Conducting customer satisfaction surveys

Legal Basis for Processing

Our legal basis for processing your personal data includes: (a) your consent for marketing communications and certain data uses, (b) performance of our contract with you for service provision, (c) our legitimate interests in improving services and business operations, and (d) compliance with legal obligations.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With service providers who assist in our business operations (payment processors, appointment systems)
• When required by law or to protect our legal rights
• In case of business transfer or merger (with appropriate safeguards)
• With your explicit consent for specific purposes

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this privacy policy, comply with legal obligations, resolve disputes, and enforce our agreements. Customer information is typically retained for 7 years after the last service for tax and legal compliance purposes. Marketing communications data is retained until you withdraw consent. Website analytics data is retained for 26 months. You may request deletion of your data subject to legal and legitimate business requirements.

Your Rights

Under GDPR, you have several rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent for consent-based processing

To exercise these rights, please contact us at privacy@legitiqftf.top. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

International Data Transfers

LegitiqFTF primarily processes data within the European Union. If we transfer your data outside the EU, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other approved mechanisms to protect your data in accordance with GDPR requirements.

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, analyse website traffic, and provide personalised content. For detailed information about our cookie practices, please refer to our Cookie Policy. You can manage your cookie preferences through your browser settings or our cookie consent banner.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding data protection matters, please reach out using the contact information below:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data in accordance with applicable law.