Legal · Privacy

Privacy Policy

Your privacy matters. This policy explains what personal data Anam Aloha collects, why, and how it is protected under Dutch and European law.

Last updated: May 2026

1

Data controller

Anam Aloha, operated by Aoife, is the data controller (verwerkingsverantwoordelijke) responsible for the processing of your personal data as described in this privacy policy. Anam Aloha is based in Zoetermeer, the Netherlands. For questions about this policy or your data, please contact Anam Aloha directly via the contact details on this website.

2

Legal framework

This privacy policy complies with the Algemene Verordening Gegevensbescherming (AVG), the Dutch implementation of the EU General Data Protection Regulation (GDPR), and the Uitvoeringswet AVG (UAVG). The supervisory authority is the Autoriteit Persoonsgegevens (AP).

3

What data we collect

Anam Aloha may collect the following personal data:

  • Contact details: name, email address, telephone number — to communicate with you about bookings and sessions.
  • Booking information: appointment dates, times, treatment type, and payment details — to manage your appointments and process payments.
  • Health information: relevant health conditions, injuries, allergies, or medications you disclose before a session — to ensure your treatment is safe and appropriate. This is considered special category data (bijzondere persoonsgegevens) under the AVG and is processed with your explicit consent.
  • Session notes: brief practitioner notes about your session — to provide continuity of care across visits.
  • Communication records: emails or messages you send — to respond to your enquiries.
4

Legal basis for processing

Anam Aloha processes your personal data on the following legal grounds (Article 6 AVG):

  • Performance of a contract: processing necessary to fulfil your booking and deliver your session.
  • Legitimate interest: managing appointments, responding to enquiries, and maintaining business records.
  • Explicit consent: processing health-related data that you share before or during a session. You may withdraw this consent at any time.
  • Legal obligation: retaining financial records as required by Dutch tax law (Belastingdienst).
5

How we use your data

Your personal data is used only for the purposes stated above: managing bookings, ensuring safe treatments, processing payments, communicating with you, and complying with legal obligations. Anam Aloha does not use your data for marketing purposes without your explicit consent.

6

Data sharing

Anam Aloha does not sell, trade, or rent your personal data to third parties. Your data may be shared with:

  • Treatwell: if you book via Treatwell, your booking data is processed by Treatwell in accordance with their own privacy policy.
  • Payment processors: to process payments securely.
  • Accountant / Belastingdienst: financial records as required by Dutch tax law.
  • Authorities: only if required by Dutch law.

All data processing partners are established within the EU/EEA. No personal data is transferred outside the European Economic Area.

7

Data retention

Anam Aloha retains your personal data only for as long as necessary:

  • Contact and session data: retained for up to 2 years after your last session, or until you request deletion.
  • Health information: retained for up to 2 years after your last session to ensure continuity of care, then securely deleted.
  • Financial records: retained for 7 years as required by Dutch fiscal law (fiscale bewaarplicht).
8

Your rights under the AVG

Under the AVG/GDPR, you have the following rights:

  • Right of access (inzagerecht): request a copy of the personal data held about you.
  • Right to rectification (recht op rectificatie): request correction of inaccurate data.
  • Right to erasure (recht op vergetelheid): request deletion of your data, subject to legal retention obligations.
  • Right to restrict processing (recht op beperking): request that processing of your data be limited.
  • Right to data portability (recht op overdraagbaarheid): receive your data in a structured, commonly used format.
  • Right to object (recht van bezwaar): object to the processing of your data.
  • Right to withdraw consent: withdraw consent for the processing of health data at any time without affecting prior processing.

To exercise any of these rights, please contact Anam Aloha directly. Requests will be handled within 30 days, as required by the AVG.

9

Cookies & website analytics

This website uses only functional cookies that are strictly necessary for the website to operate. No tracking cookies, advertising cookies, or third-party analytics are used. No personal data is collected through this website beyond what you voluntarily provide through contact forms or booking.

In accordance with the Dutch Telecommunicatiewet, no cookie consent is required for strictly functional cookies.

10

Data security

Anam Aloha takes appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or alteration. Health information and session notes are stored securely and accessible only to the practitioner.

11

Data breach notification

In the event of a personal data breach (datalek), Anam Aloha will notify the Autoriteit Persoonsgegevens within 72 hours where required. If the breach is likely to result in a high risk to your rights and freedoms, you will be informed directly and without undue delay.

12

Complaints

If you believe your data is being processed unlawfully, you have the right to file a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
Postbus 93374
2509 AJ Den Haag
autoriteitpersoonsgegevens.nl

13

Changes to this policy

Anam Aloha may update this privacy policy from time to time. The most current version will always be available on this page with the date of the last update. Significant changes will be communicated to existing clients.

← Back to Legal