Privacy Policy

Introduction

hypsiggllk B.V. ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and safeguard your information when you visit our website hypsiggllk.live or use our services.

As the Data Controller, hypsiggllk processes your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch privacy laws. This policy provides transparency about our data practices and your rights regarding your personal information.

Data Controller

The Data Controller responsible for your personal data is:

Data Collection

The data we collect includes personal information that you voluntarily provide to us and information automatically collected when you use our website and services. We collect the following categories of personal data:

Information You Provide

• Contact information (name, email address, phone number, postal address)
• Communication preferences and correspondence with us
• Service inquiry details and wellness goals
• Feedback, testimonials, and survey responses
• Payment information (processed by third-party payment processors)
• Health and wellness information relevant to our services

Automatically Collected Information

• Website usage data (pages visited, time spent, click patterns)
• Device and browser information (IP address, browser type, operating system)
• Cookies and similar tracking technologies
• Referral source and website navigation patterns
• Technical data for website security and performance

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract Performance: To provide our services and fulfill contractual obligations
• Legitimate Interests: For business operations, website analytics, and service improvement
• Legal Compliance: To comply with applicable laws and regulatory requirements
• Vital Interests: In exceptional circumstances to protect health or safety

How We Use Your Information

We explain how we use your information for various purposes related to providing our stress relief and relaxation services. The use of your data is limited to the purposes outlined below:

Service Delivery

• Providing stress relief and relaxation services
• Customizing wellness programs to your needs
• Scheduling and managing appointments
• Processing payments and managing billing
• Providing customer support and assistance

Communication

• Responding to inquiries and providing information
• Sending service-related notifications and updates
• Sharing wellness tips and educational content (with consent)
• Conducting customer satisfaction surveys

Business Operations

• Analyzing website usage and improving user experience
• Maintaining website security and preventing fraud
• Complying with legal and regulatory requirements
• Managing business relationships and operations

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: Trusted third parties who assist in delivering our services (hosting, payment processing, analytics)
• Legal Compliance: When required by law, court order, or regulatory authority
• Business Protection: To protect our rights, property, or safety, or that of our users
• Consent: When you have given explicit consent for specific sharing
• Business Transfers: In connection with mergers, acquisitions, or asset sales (with appropriate safeguards)

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations. Our retention periods are based on:

• The nature and sensitivity of the personal data
• The purposes for which we process the data
• Legal, regulatory, and contractual requirements
• The need to resolve disputes and enforce agreements

Generally, we retain client data for up to 7 years after the last service interaction, website analytics data for 26 months, and marketing consent records until withdrawn or 3 years of inactivity.

Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data:

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training
• Secure data backup and recovery procedures
• Monitoring for security incidents and breaches
• Compliance with industry security standards

International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your personal data outside the EEA, we ensure appropriate safeguards are in place, including:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules
• Certification schemes and codes of conduct

Cookies and Tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience. For detailed information about our use of cookies, please refer to our Cookie Policy.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. Continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or need to contact us regarding your personal data, please reach out using the contact information below:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your data protection rights have been violated.