Privacy & Cookie Policy

This policy explains how NextGen Permanent Makeup (“we”, “us”, “our”), a permanent makeup studio and academy in the Netherlands, collects and uses your personal data when you visit our website, book a treatment or course, or buy a digital product — and how we use cookies. We are the data controller for this processing under the EU General Data Protection Regulation (GDPR).

If you have any questions or want to exercise your rights, contact us at nextgen.pm.bydi@gmail.com.

1. What data we collect

• Booking & contact details you provide — such as your name, email, phone number and preferred dates — when you book a treatment or course, join the waiting list, or send us a request through a form on this site.
• Payment information for deposits and purchases. Payments are handled by Stripe; we do not store your full card details on our servers.
• Usage data collected by analytics cookies only if you accept them — for example pages visited, approximate location (derived from your IP address), device and browser type.

2. How we use your data and our legal basis

• To take and manage your booking or purchase and send you confirmations — legal basis: performance of a contract.
• To respond to your enquiries and manage the waiting list — legal basis: your consent and/or our legitimate interest in replying to you.
• To understand and improve how the website is used, via Google Analytics — legal basis: your consent, which you give through the cookie banner and can withdraw at any time.

3. Cookies

Cookies are small files stored on your device. We use two kinds:

• Strictly necessary cookies — required for the website to work and for secure booking and checkout, and to remember your cookie choice. These are always active and do not require consent.
• Analytics cookies (Google Analytics) — set only after you accept them. They use cookies such as _ga and _ga_<id> to measure site usage. Nothing is loaded before you consent, and if you decline or later withdraw consent these cookies are cleared and analytics is switched off.

You can change your choice at any time using the Cookie settings link, also available in the footer of every page.

4. Who we share data with

We do not sell your data. We share it only with service providers (“processors”) who help us run the studio, and only as needed:

• Stripe — secure payment processing for deposits and purchases.
• Altegio — the online booking system used to schedule treatment appointments.
• Google — Google Analytics (site usage) and Google Sheets (storing booking, course and waiting-list form entries).
• Resend — sending you booking and course confirmation emails.

Some of these providers may process data outside the European Economic Area. Where that happens, appropriate safeguards (such as the EU Standard Contractual Clauses) apply.

5. How long we keep your data

We keep booking, course and purchase records for as long as needed to provide the service and to meet our legal and tax obligations. Analytics data is retained according to Google Analytics' retention settings. Enquiry and waiting-list details are kept only as long as needed to help you, after which they are deleted.

6. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and request a copy;
• have inaccurate data corrected or incomplete data completed;
• have your data erased, and to restrict or object to processing;
• data portability;
• withdraw your consent at any time (this does not affect earlier processing).

To exercise any of these rights, email us at nextgen.pm.bydi@gmail.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

7. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised. Please check back occasionally for any changes.