Privacy Policy

Effective Date: 14 August 2026

Website: https://www.lumahealthandwellness.nl

At Luma Health & Wellness, DBA of Danika Consulting & Design, ("we", "our", or "us"), we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website or use our services, in compliance with the General Data Protection Regulation (GDPR) and Dutch privacy laws (Algemene Verordening Gegevensbescherming - AVG).

1. Data Controller Information

The entity responsible for the processing of your personal data (the Data Controller) is:

2. What Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of data:

  • Identity and Contact Data: Full name, email address, phone number, and physical address.

  • Booking and Transaction Data: Details about appointments, services purchased, and payment details (processed securely via third-party payment providers like Stripe or iDEAL).

  • Health and Wellness Data (Special Category Data): If you fill out intake forms, book consultations, or share wellness history, we may collect information regarding your health, fitness goals, or dietary preferences. Note: We process this sensitive data only with your explicit consent.

  • Technical and Usage Data: IP address, browser type, device information, and browsing behavior on our website collected via cookies and analytics tools.

3. Legal Bases and Purposes for Processing

Under the GDPR, we must have a valid legal basis to process your data. We process your data for the following purposes:

  • Performance of a Contract: To manage your bookings, provide coaching or health services, and handle customer service.

  • Explicit Consent: For processing health-related data or sending marketing newsletters (which you can opt out of at any time).

  • Legitimate Interests: To improve our website functionality, ensure network security, and analyze website traffic.

  • Legal Obligations: To comply with Dutch tax and financial record-keeping laws.

4. Cookies and Tracking

Our website uses cookies to distinguish you from other users, enhance your browsing experience, and analyze site traffic.

  • Functional Cookies: Necessary for the website to function properly.

  • Analytical/Tracking Cookies: Used (with your consent via our cookie banner) to understand how visitors interact with our site using tools like Google Analytics.

You can manage or disable cookies through your browser settings or our cookie preference center.

5. Who We Share Your Data With

We do not sell your personal data. We only share it with trusted third-party service providers (processors) necessary to run our business, including:

  • Website hosting and maintenance providers.

  • Booking and scheduling software platforms.

  • Payment processors (e.g., Stripe, Mollie, iDEAL).

  • Email marketing platforms (if you subscribed to our newsletter).

All processors are bound by strict Data Processing Agreements (DPAs) ensuring GDPR compliance.

6. International Data Transfers

We primarily store and process your data within the European Economic Area (EEA). If any of our service providers transfer data outside the EEA, we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses (SCCs).

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. For example:

  • Financial and invoice records are kept for 7 years to comply with Dutch tax law.

  • Client health and intake records are kept for 3 years after your last session, unless you request earlier deletion (where legally permissible).

8. Your Rights Under the GDPR

As a data subject in the EU, you have the following rights regarding your personal data:

  1. Right of Access: Request a copy of the personal data we hold about you.

  2. Right to Rectification: Request correction of inaccurate or incomplete data.

  3. Right to Erasure ("Right to be Forgotten"): Request the deletion of your data under certain conditions.

  4. Right to Restriction: Request that we pause processing your data.

  5. Right to Data Portability: Receive your data in a structured, machine-readable format.

  6. Right to Object: Object to processing based on legitimate interests or direct marketing.

  7. Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at welkom@lumahealthandwellness.nl.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.

9. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be posted on this page with the updated effective date.