Privacy policy

About this privacy policy

Beauty By Boyin processes personal data in two ways: through this website and shop, and through the treatments in the studio. Below you will first find what happens around your appointment and treatment — that is what matters most to most visitors. After that comes the explanation for the website and shop.

Who is responsible

Beauty By Boyin
De Booijstraat 35, 2628ZN Delft, Netherlands
Chamber of Commerce (KvK) 91926319
Email: info@browsbyboyin.nl
WhatsApp: +31 6 48116435

Beauty By Boyin is the data controller for the data described below.

Appointments and treatments

The online booking system

Appointments are booked through an external booking system (boekingapp.nl). When you make an appointment, your name, email address, phone number and the chosen treatment are processed in that system. The booking system provider processes this data on behalf of Beauty By Boyin.

The booking system appears on the website inside a frame (iframe). As soon as you enter details there, they are processed by the booking system provider and not by this shop.

Health data

Some treatments require information about your health. This includes pregnancy or breastfeeding, skin conditions, allergies, medication (such as blood thinners or Roaccutane), diabetes, cold sores, or recent treatments such as Botox, filler, a peel or laser.

This information is needed to assess whether a treatment is safe for you. It constitutes special category personal data under Article 9 GDPR. This data is processed only:

  • with your explicit consent, which you can withdraw at any time;
  • solely to assess the safety and suitability of a treatment;
  • by Boyin alone — it is not shared with third parties unless required by law.

Would you rather not provide this information? That is your choice, but a treatment may be declined if its safety cannot be assessed.

Treatment photos

Photos of treatment results are only taken and used — for example on this website or on Instagram — if you give permission in advance. You can withdraw that permission at any time; let us know and the photo will be removed.

The website and shop

Contact form

If you use the contact form, we process your name, email address and your message in order to answer your question.

Newsletter

If you sign up for the newsletter, we process your email address to send you aftercare tips and information about treatments. You can unsubscribe at any time using the link at the bottom of every email.

Gift cards

When you buy a gift card we process your name, email address and payment details. Payment runs through Shopify and the payment provider; full payment details never reach Beauty By Boyin.

Map and external services

The contact page contains a Google Maps map. Google may process data in doing so, such as your IP address. See Google's privacy policy for more information.

Cookies

This website uses cookies. On your first visit you can choose which cookies you accept. Necessary cookies are required for the website to work; analytics and marketing cookies are only placed with your consent.

How long we keep data

  • Appointment and health data: [RETENTION PERIOD TO BE COMPLETED — discuss with your industry association or insurer; a longer period is often applied for PMU]
  • Invoices and administration: 7 years (statutory tax retention obligation)
  • Newsletter: until you unsubscribe
  • Contact form: until your question has been dealt with, and no longer than [PERIOD TO BE COMPLETED] afterwards

Processors and third parties

To deliver our services we engage a number of parties that process data on our behalf:

  • Shopify — the platform this website and shop run on. See Shopify's privacy policy for customers.
  • The booking system provider (boekingapp.nl) — processes your appointment data.
  • Payment providers — process payments for gift cards.
  • Google — for the map on the contact page.
  • Email and review services, where in use, for the newsletter and for collecting reviews.

Where required, we enter into a data processing agreement with parties that process personal data on our behalf. We do not sell your data to third parties.

Transfers outside the EEA

Some of these parties may process data outside the European Economic Area. Where that happens, it is based on a recognised transfer mechanism, such as the European Commission's standard contractual clauses.

Your rights

You have the right to access your data, to have it corrected, or to have it deleted. You can also object to processing, request transfer of your data, and withdraw consent you have given. To do so, send a message to info@browsbyboyin.nl.

If you disagree with how we handle your data, you can lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Security

We take appropriate measures to protect your data against loss and unauthorised access. Data is not kept longer than necessary and is not shared with third parties for commercial purposes.

Changes

We may update this privacy policy. The most current version is always on this page.

Questions

Questions about this privacy policy or about your data? Email info@browsbyboyin.nl or send a WhatsApp to +31 6 48116435.