Privacy Policy

Privacy Policy

Effective Date: July 2025
Company Name: Nili Academy
Address: Rijswijkseweg 397, 2516 HK Den Haag, Netherlands
KvK Number: 98339109
Email: info@niliacademy.com
Phone: +31 6 35605164

1. Introduction

Nili Academy (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, book a service or course, or communicate with us.

By using our services or providing your personal data, you agree to the terms of this Privacy Policy.

2. What Information We Collect

We may collect the following categories of personal data:

a. Identification Information

Full name, address, date of birth, and contact details (email, phone number).

b. Booking & Payment Information

Appointment or course details, payment method (cash or card), invoices, and transaction records.

c. Health Information

For beauty and permanent makeup services, we may collect relevant medical or skin-related information necessary to ensure safety and quality of treatment.

d. Course Participation Information

Attendance records, course performance, certification data, and feedback.

e. Website Data (if applicable)

Technical data such as IP address, browser type, and cookies when you visit our website.

3. Purpose of Data Collection

We collect and process personal data for the following purposes:

To process and confirm bookings or course enrollments.
To communicate regarding appointments, updates, or aftercare.
To comply with health and safety requirements before treatment.
To manage payments, invoicing, and accounting obligations.
To improve our services and client experience.
To send you marketing updates and promotions (only with your consent).

4. Legal Basis for Processing

We process your personal data under one or more of the following legal grounds in accordance with the General Data Protection Regulation (GDPR):

Contractual necessity: to provide the service or course you requested.
Legal obligation: to comply with tax, accounting, and business laws.
Legitimate interest: to improve our services or protect our rights.
Consent: when you voluntarily agree to receive marketing or share sensitive information.

5. How We Store and Protect Your Data

5.1 All personal data is stored securely in password-protected systems and, where applicable, locked physical files.
5.2 We implement technical and organizational security measures to prevent unauthorized access, alteration, disclosure, or destruction of your personal data.
5.3 Only authorized staff members have access to your personal information for legitimate business purposes.

6. Data Retention

We will retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting obligations.

Client records and consent forms: typically up to 5 years.
Course participation records: typically up to 7 years.
Marketing data: until you withdraw consent.

7. Sharing of Personal Data

We do not sell or rent your personal data.
We may share limited information only with:

Payment processors (for card transactions).
Professional partners (e.g., course trainers or suppliers) when needed.
Regulatory or legal authorities when required by law.

All third-party service providers are contractually obligated to keep your information confidential and secure.

8. International Transfers

Your data is processed and stored within the European Economic Area (EEA).
If data is ever transferred outside the EEA, we ensure adequate protection measures as required by GDPR.

9. Your Rights under GDPR

You have the following rights regarding your personal data:

Right of access – Request a copy of your personal data.
Right to rectification – Correct inaccurate or incomplete information.
Right to erasure (“right to be forgotten”) – Request deletion of your data when no longer necessary.
Right to restrict processing – Limit how we use your data.
Right to data portability – Request your data in a machine-readable format.
Right to object – Object to data processing for legitimate interests or marketing.
Right to withdraw consent – Withdraw consent at any time for marketing or optional processing.

You can exercise any of these rights by contacting us at ghasre.nilii@gmail.com.

10. Cookies and Website Analytics

Our website may use cookies to improve performance and analyze user experience.
You can manage or disable cookies through your browser settings at any time.

11. Marketing Communications

We may send you promotional messages or newsletters about new courses, offers, or services only if you have opted in.
You can unsubscribe at any time by clicking “unsubscribe” in an email or by contacting us directly.

12. Minors

Our services and courses are not intended for individuals under 18 years old without parental or guardian consent.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal obligations.
The updated version will always be available on our website with a revised effective date.

14. Contact Information

For questions, concerns, or data requests, please contact:

Nili Academy
📍 Rijswijkseweg 397, 2516 HK Den Haag, Netherlands
📧 info@niliacademy.com
📞 +31 6 35605164

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your rights have been violated.