Privacy Policy
Last updated: TODO: publish date.
nailsmini.nl is Anna’s site (nail-technician education, Tilburg, Netherlands). This page explains what data we collect, why, and how we protect it, in line with the General Data Protection Regulation (GDPR).
1. Who is responsible for your data
Data controller: Anna, nailsmini.nl, Tilburg, Netherlands. For any data questions, write to hello@nailsmini.nl.
2. What data we collect
- Leads and checklist downloads: name, email, sometimes phone number — when you download the free checklist or submit an enquiry through the site.
- Digital course orders: name, email, payment data (the payment itself is handled by our payment provider; we never see or store your card number).
- Offline course bookings: name, email, phone number, preferred dates — to organise group and individual courses.
- Technical data: basic site-visit analytics (no third-party tracking cookies beyond the services listed below).
All lead, order, and booking data is stored in a Cloudflare D1 database tied to this site.
3. Who processes the data (processors)
We use the following external service providers, who may process your personal data on our behalf:
| Service | Purpose | What it sees |
|---|---|---|
| Mollie | Payment processing (iDEAL, Bancontact, card) | Payment and order data |
| Resend | Sending transactional emails (checklist, purchase confirmation) | Your email address and the email content |
| Google Calendar | Scheduling offline course bookings | Name, email, booking time |
| Cloudflare | Site hosting and database (D1) | All data listed above |
| Telegram | Delivering the digital course and messaging students | Your Telegram account, if you initiate the conversation |
Each of these services processes data under its own privacy policy and any data-processing agreement (DPA) we have in place with them.
4. Retention period
- Checklist lead data is kept for up to 24 months, or until consent is withdrawn — whichever comes first.
- Order and booking data is kept for as long as needed to fulfil the contract, plus the retention period required by Dutch tax law (typically 7 years for financial records).
- You may request earlier deletion of any data not subject to a mandatory retention period at any time (see below).
5. Your rights
Under GDPR you have the right to:
- request access to your data;
- request correction of inaccurate data;
- request deletion of your data (“right to be forgotten”), except data we are legally required to keep;
- restrict or object to processing;
- receive your data in a portable format;
- withdraw consent at any time.
To exercise any of these rights, write to hello@nailsmini.nl. We will respond within 30 days.
6. Security
Data is stored with providers that meet modern security standards (Cloudflare, Mollie, Resend, Google), encrypted in transit. Access to the site’s admin panel is restricted.
7. Changes to this policy
We may update this page from time to time. The last-updated date is shown at the top of this document.
8. Contact
For any data-related questions: hello@nailsmini.nl.
TODO for Anna: confirm the exact retention periods and, once registered, add the legal business name/KVK number.