Privacy Policy
Last updated: 31 March 2026
Coiffure StaffPlay respects your privacy and processes personal data solely in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch implementation law (UAVG). This policy explains what data we collect, why we collect it, how long we keep it, and your rights.
1. Data Controller
Coiffure StaffPlay
Dordtselaan 202A, 3073 GS Rotterdam
info@coiffure-staffplay.nl
010 786 13 73
2. What data do we collect?
- Appointment data: name, email, phone, service, date and time.
- Account data (OAuth): when logging in via Google, Facebook or X (Twitter) we receive only your public profile name and email. We never store your social media password.
- Communication preferences: opt-in choices for email, WhatsApp and SMS reminders.
- Technical data: IP address, browser type and page visits — solely for security and site functionality.
- Payment data: when online payments are enabled, Mollie B.V. processes the payment. We only receive a payment status; card details are never stored by us.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Scheduling and managing appointments | Performance of a contract (art. 6(1)(b)) |
| Sending confirmation and reminder emails | Performance of a contract (art. 6(1)(b)) |
| WhatsApp and SMS reminders (opt-in) | Consent (art. 6(1)(a)) |
| Processing payments | Performance of a contract (art. 6(1)(b)) |
| Security and fraud prevention | Legitimate interest (art. 6(1)(f)) |
| Legal obligations (tax records) | Legal obligation (art. 6(1)(c)) |
4. Retention periods
- Appointment and customer data: maximum 3 years after last appointment.
- Financial records: 7 years per statutory obligation.
- Technical logs: maximum 90 days.
5. Sharing with third parties
We never sell your data. We share data only with: Mollie B.V. (payments), Google/Meta/X Corp (OAuth only), our email provider, and WhatsApp/SMS providers when you have opted in. All processors are bound by confidentiality agreements.
6. Cookies
We use only functionally necessary cookies (session cookies for login and form security). No tracking or advertising cookies are placed without your consent. See our Cookie Policy.
7. Your rights
Under the GDPR you have the right to: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Send requests to info@coiffure-staffplay.nl. We respond within 30 days. You may also lodge a complaint with the Dutch Data Protection Authority.
8. Security
We secure your data with HTTPS (TLS), password hashing (bcrypt) and role-based access control. Payments go entirely through Mollie's secure environment.
9. Changes
We may update this policy. For material changes we will notify you by email or a site notice.
10. Contact
Coiffure StaffPlay — Dordtselaan 202A, 3073 GS Rotterdam
info@coiffure-staffplay.nl — 010 786 13 73