Privacy Policy

Last updated: December 2024

This Privacy Policy describes how militiizxa B.V. ("we," "us," or "our") collects, uses, and protects your personal information when you use our services or visit our website.

1. Data Controller

The data controller for your personal information is:

militiizxa B.V.

Hoofdstraat 275

1325 YQ Almere, Flevoland

Netherlands

Registration Number: 82594176

VAT Number: NL587619324B108

Email: privacy@militiizxa.top

Phone: +31 701835888

2. Information We Collect

2.1 Personal Information

We collect the following types of personal information:

  • Name and contact information (email address, phone number, postal address)
  • Appointment and booking information
  • Service preferences and treatment history
  • Health information relevant to treatments (allergies, skin conditions)
  • Payment and billing information
  • Communication records (emails, phone calls, messages)

2.2 Technical Information

  • IP address and browser information
  • Website usage data and analytics
  • Cookies and tracking technologies (see our Cookie Policy)
  • Device information and operating system

3. How We Use Your Information

3.1 Service Provision

  • Scheduling and managing appointments
  • Providing beauty and spa treatments
  • Processing payments and billing
  • Maintaining treatment records for continuity of care
  • Communicating about your appointments and services

3.2 Business Operations

  • Improving our services and customer experience
  • Website functionality and security
  • Analytics and business intelligence
  • Compliance with legal obligations

3.3 Marketing (with consent)

  • Sending promotional offers and updates
  • Newsletter and service announcements
  • Personalised marketing communications

4. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary for providing our services
  • Consent: For marketing communications and non-essential cookies
  • Legitimate Interests: For business operations, security, and service improvement
  • Legal Obligation: For compliance with applicable laws and regulations
  • Vital Interests: In emergency situations affecting health and safety

5. Data Sharing and Disclosure

We may share your personal information with:

5.1 Service Providers

  • Payment processors and financial institutions
  • IT service providers and hosting companies
  • Appointment booking systems
  • Email and communication platforms

5.2 Legal Requirements

  • Law enforcement and regulatory authorities
  • Courts and legal proceedings
  • Tax authorities and auditors
  • Healthcare authorities when required

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Retention

We retain your personal information for the following periods:

  • Customer Records: 7 years after last service for tax and legal compliance
  • Health Information: As required by healthcare regulations
  • Marketing Data: Until you withdraw consent or 3 years of inactivity
  • Website Analytics: 26 months maximum
  • CCTV Footage: 30 days unless required for security incidents

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of Access

Request a copy of your personal data we hold

Right to Rectification

Correct inaccurate or incomplete data

Right to Erasure

Request deletion of your personal data

Right to Restrict Processing

Limit how we use your data

Right to Data Portability

Receive your data in a portable format

Right to Object

Object to certain types of processing

To exercise these rights, contact us at privacy@militiizxa.top. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data:

  • SSL encryption for data transmission
  • Secure servers and databases
  • Access controls and staff training
  • Regular security assessments
  • Incident response procedures
  • Physical security measures at our premises

9. International Data Transfers

We primarily process data within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

  • European Commission adequacy decisions
  • Standard Contractual Clauses (SCCs)
  • Certification schemes and codes of conduct

10. Cookies and Tracking

Our website uses cookies and similar technologies. For detailed information about our cookie practices, please see our Cookie Policy.

11. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of material changes by:

  • Posting the updated policy on our website
  • Sending email notifications to registered users
  • Displaying prominent notices on our website

13. Complaints and Supervisory Authority

If you have concerns about our data processing practices, you can:

  • Contact us directly at privacy@militiizxa.top
  • File a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
  • Contact your local data protection authority in the EU

14. Contact Information

For any privacy-related questions or requests, please contact us:

Privacy Officer

militiizxa B.V.

Email: privacy@militiizxa.top

Phone: +31 701835888

Address: Hoofdstraat 275, 1325 YQ Almere, Netherlands