Privacy Policy
Aligned Body B.V.—”Fascial Maneuvers”
Privacyverklaring · Articles 13–14 GDPR / AVG · derived from the ROPA
1. Who we are
Aligned Body B.V., trading as “Fascial Maneuvers” (“we”, “us”, “our”), is the controller of your personal data. We provide movement coaching and bodywork, online and in person. This policy explains what data we collect, why, who we share it with, how long we keep it, and the rights you have.
Contact: Keizersgracht 520H, 1017EK, Amsterdam, the Netherlands · KvK 42091921 · vanessa@alignedbody.nl · +31 (0)6 5358 2233 · www.alignedbody.nl.
2. The data we collect
Identity & contact: name, date of birth, email, phone, country of residence; postal address for business clients or where an invoice is issued.
Business-client data: company name and VAT / registration number.
Health & movement data (special category): health conditions, injuries, physical limitations, medication affecting exertion, areas of pain, pregnancy status and your goals (provided by you on the intake form and updated during sessions).
Service & contract data: your service choice (movement-only or Hands-On), Workout Plans, session and progress notes, your consents, and order and payment records.
Session recordings: if you have an online session and do not decline, a video/audio recording of that session, which we may share with you afterwards.
Communications: emails and WhatsApp messages about scheduling.
Marketing: (if you opt in) your name, email and consent status.
Testimonials: (if you consent) your name, image and words.
3. Why we use your data, and our legal basis
We use your data only for the purposes below, each with a legal basis under the GDPR/AVG:
| Purpose | Legal basis |
|---|---|
| Providing coaching & bodywork; adapting sessions to your health; keeping session records | Contract (Art. 6(1)(b)); health data on your explicit consent (Art. 9(2)(a)) |
| Scheduling and communicating with you | Contract (Art. 6(1)(b)) |
| Concluding the contract; handling the consumer right of withdrawal | Contract; legal obligation (Art. 6(1)(b)/(c)) |
| Invoicing, taking payment, keeping the accounts | Contract; legal obligation — tax law (Art. 6(1)(c)) |
| Managing unpaid invoices | Our legitimate interest (Art. 6(1)(f)) |
| Sending marketing emails (if you opt in) | Your consent (Art. 6(1)(a)) |
| Publishing testimonials (if you consent) | Your consent (Art. 6(1)(a)) |
| Handling your rights requests; keeping compliance records | Legal obligation; legitimate interest |
4. Health data and your explicit consent
We are a non-medical practice. We process your health data only with your explicit consent (Art. 9(2)(a) GDPR), and only to keep your sessions safe and tailored to you. We do not rely on any medical exemption. You can withdraw your consent at any time, with effect for the future; withdrawing does not affect processing that already took place.
5. Children
Our services may involve minors. For a child under 16, a parent or legal guardian must authorise the processing of the child’s data (Art. 8 GDPR; Art. 5 UAVG). A young person aged 16 or 17 can give their own consent, but a parent or guardian still enters into the contract on their behalf. Where Hands-On Sessions are chosen for a minor, a parent or guardian gives specific consent and the supervision rules in our Terms and Conditions apply.
6. Who we share your data with
We use trusted service providers who process data only on our instructions and under a data-processing agreement. We share data with them only as needed to run the practice:
The providers we use are: Squarespace (website, online checkout and payments) and Acuity Scheduling (bookings), both Squarespace, Inc. (US); Zoom for online sessions (US); Microsoft Outlook / 365 for email (US); Google Drive for storing intake forms and session notes (US); WhatsApp / Meta for scheduling messages (US); and UWBS, our accountant, in the Netherlands. Each acts under a data-processing agreement.
We do not run a newsletter and do not use a debt-collection agency at present. We also share data where the law requires it (for example, with the Belastingdienst for tax). We never sell your data.
7. Transfers outside the EEA
Some providers may process your data outside the European Economic Area. Where they do, we rely on an adequacy decision (such as the EU–US Data Privacy Framework) or on EU Standard Contractual Clauses to protect it.
Our US-based providers (Squarespace, Acuity, Zoom, Microsoft, Google and WhatsApp (Meta)) process data in the United States under the EU–US Data Privacy Framework and/or EU Standard Contractual Clauses. Our accountant, UWBS, is in the Netherlands, so no transfer outside the EEA is involved.
8. How long we keep your data
We keep your data only as long as necessary, following our retention schedule. Accounting records are kept for 7 years (Dutch tax law, Art. 52 AWR).
We keep your client file and session notes for as long as you are a client and for 2 years after your last session.
Session recordings, where made, are kept for approximately 30–90 days and then deleted.
Enquiries that do not lead to a booking are kept for up to 12 months. Scheduling messages are kept for around 12 months. Other records follow the periods in our retention schedule.
9. How we protect your data
We protect your data with password-protected devices, restricted access (only the Coach can see client data), secure cloud storage for notes and forms, and deletion of data at the end of the retention period. Any paper forms are kept securely.
10. Your rights
You have the right to access your data; to have it corrected or erased; to restrict or object to processing; to data portability; and to withdraw consent at any time. Where we rely on our legitimate interest, you can object to that processing.
11. How to exercise your rights, and complaints
To exercise any right, contact us at vanessa@alignedbody.nl. We respond within one month. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (www.autoriteitpersoonsgegevens.nl).
12. Cookies
Our website uses cookies. Please see our separate Cookie Policy at https://www.alignedbody.nl/cookie-policy.
13. Changes to this policy
We may update this policy from time to time. The current version is always available on our website. Last updated: September 2026.