Your data

Privacy policy

In this privacy policy you can read which personal data First Wax in Beesd records, why we do so, who we share it with and how long we keep it. We handle your data with care and never ask for more than necessary. If the versions differ, the Dutch version is legally binding.

Last updated: 19 October 2026

In short

  • We only use your data for appointments, treatments, orders and our records.
  • We keep your treatment record on paper in a locked cabinet.
  • We never sell your data and do not send advertising without your consent.
  • The chat with Aleksandra on our website does not store conversations.
  • We only place analytical cookies with your consent.
  • You can always view your data, have it corrected or have it deleted.
  • You can order as a guest. An account is optional and you can delete it yourself.
  • Payments are handled by Mollie. We do not see or store your card details.

Who is responsible

First Wax is a sole proprietorship of Aleksandra Kravchenko and is responsible for processing your personal data as described in this privacy policy. You can always contact us with questions about your data.

Business
First Wax, KVK 81412649
VAT number
NL003552788B61
Address
Prins Constantijnstraat 48, 4153 CN Beesd
Phone and WhatsApp
+31 6 1529 1025

Which data and why

We only process data that you give us yourself or that is needed to make our website work properly. Below you can see, per purpose, which data it concerns and on which legal basis we use it.

Making appointments

Name, phone number, email address, the chosen treatment and the time. This allows us to schedule and confirm your appointment and send you a reminder.

Legal basis: performance of the agreement

Treatment

For laser hair removal and intimate bleaching: your treatment record with your name, date of birth, contact details, relevant health information and the progress of your treatments. This allows us to treat you safely and follow the result.

Legal basis: your explicit consent (see article 3)

Payment and records

Name, treatment, amount, payment method and date, also for packages, instalment payments and gift vouchers.

Legal basis: legal obligation (tax retention requirement)

Contact

The data you send us via the contact form, email, WhatsApp or phone, such as your name, phone number, email address and your question. This allows us to answer you.

Legal basis: legitimate interest, or the agreement if it concerns an appointment

Waiting list and reopening

Your name, email address and phone number if you sign up for the waiting list or for a message as soon as you can book again.

Legal basis: your consent, which you can withdraw at any time

Improving the website

Statistics on the use of our website via Google Analytics, such as pages visited, device and approximate region. We cannot see who you are from this.

Legal basis: your consent via the cookie notice

Newsletter

Only your email address, the language and the date you subscribed. We use these to send you our newsletter with offers and news a few times a year. We keep your address until you unsubscribe. You can unsubscribe at any time via the link in the newsletter or by sending us a message.

Legal basis: your consent

Web shop and orders

Your name, address, email address, phone number, the products ordered (for sets also the chosen scent), the delivery method and the payment status. We use these to process your order, ship it or have it ready for collection and keep you informed. You can order as a guest; an account is not required.

Legal basis: performance of the contract; for invoices the statutory retention requirement

Account (optional)

If you create an account yourself: your login details, name, contact details, addresses and favourites. In your account you can see your orders and appointments. You can delete your account yourself at any time via My account › Details › Delete account.

Legal basis: performance of the contract

Back-in-stock notification

Your email address and the product you want to be notified about. You receive one email as soon as the product is back in stock; after that we remove your address from this list. This is not a newsletter.

Legal basis: your consent

We do not use your data for automated decision-making or profiling, and we never sell your data to others.

Health data

  1. For a safe treatment we ask about your health, for example about use of medication, pregnancy, allergies and skin conditions. These are special categories of personal data, which the law protects extra.
  2. For laser hair removal and intimate bleaching we record this data on a treatment record, only with your explicit consent. You give this consent by filling in and signing the intake form.
  3. You can always withdraw your consent. However, without this data we cannot safely carry out some treatments, such as laser hair removal and intimate bleaching.
  4. We keep your treatment record on paper in a locked cabinet in the studio. Only Aleksandra has access to it.

Retention periods

We do not keep your data longer than necessary. After that we destroy or delete it.

Treatment record and intake form7 years after your last treatment
Invoices and payment details7 years (statutory retention requirement)
Web shop orders7 years (statutory retention requirement), also if you delete your account
AccountUntil you delete it
Back-in-stock notificationUntil the email has been sent, or earlier if you ask us
Appointment details in the online calendarUp to 2 years after your last appointment
Messages via the contact form and emailUp to 12 months after handling
Waiting list and reopening messageUp to 3 months after reopening, or earlier if you unsubscribe
NewsletterUntil you unsubscribe; we then delete your address within 30 days
Website statistics (Google Analytics)Up to 14 months

Who we share data with

We only share your data with parties that help us deliver our services, or if the law requires us to. With parties that process data on our behalf, we make agreements about security and confidentiality.

  • Aimy, our online calendar for making and managing appointments.
  • Our hosting provider, where the website, the contact form messages, the newsletter subscriptions, the web shop orders and the accounts are stored, on servers within the European Union.
  • SendGrid (Twilio), which sends the emails from our website, such as confirmations of the contact form, your order and your appointment.
  • Mollie, a Dutch payment service that processes the payments in our web shop, such as iDEAL, card and Apple Pay.
  • PostNL, DHL or DPD, if you choose delivery: only your name, address and, where needed, your phone number or email address, for the delivery.
  • Sender (Sender.net), a European email service that we use to send the newsletter.
  • Microsoft Outlook, our email program for messages to firstwax@outlook.com.
  • WhatsApp (Meta), if you send us a message via WhatsApp.
  • Google, for Google Analytics and Google Tag Manager, the map on our contact page and the fonts of our website.
  • Our accountant or the Dutch Tax Administration (Belastingdienst), insofar as this is necessary for our records and the law.

Some of these parties, such as Google, Microsoft, Twilio and Meta, may also process data outside the European Union, for example in the United States. They do so on the basis of the safeguards approved for this by the European Commission, such as the EU-US Data Privacy Framework or standard contractual clauses.

Website and cookies

A cookie is a small text file that your browser stores when you visit a website. Our website uses the following cookies and services.

Functional cookies

Needed to make the website work properly, for example to remember your language choice, your cart and your login. We do not ask for consent for these.

Analytical cookies

Google Analytics, via Google Tag Manager, measures how visitors use our website. We only place these cookies if you give your consent via the cookie notice.

Third-party services

On the contact page we show a Google Maps map, and on the appointments page the Aimy online calendar. These services may place their own cookies and receive your IP address. Their own privacy policies apply to this.

  1. You can change or withdraw your consent for analytical cookies at any time via the cookie notice on our website.
  2. You can also delete or block cookies via your browser settings. Some parts of the website may then work less well.
  3. If you click a link to Instagram, Facebook or WhatsApp, you leave our website. Their own privacy policies apply to those services.

The chat on our website

In the “Ask the specialist” chat, the website searches our frequently asked questions directly for a suitable answer. This happens entirely in your own browser. What you type is not sent to us or to anyone else and is not stored. When you close the page, the conversation is gone.

Security

  1. We take appropriate measures to protect your data against loss, misuse and unauthorised access.
  2. Our website uses a secure connection (https). Our accounts are protected with strong passwords.
  3. Paper treatment records are kept in a locked cabinet and are destroyed after the retention period.
  4. Do you notice anything that suggests misuse of your data? Then contact us immediately.

Your rights

You have the following rights regarding your personal data:

  • View your data
  • Have incorrect data corrected
  • Have your data deleted
  • Have the processing restricted
  • Object to the processing
  • Receive your data in a file or have it transferred
  • Withdraw your consent
  1. Send your request to firstwax@outlook.com or make it in the studio. To be sure that the request comes from you, we may ask you to identify yourself.
  2. We respond to your request within four weeks.
  3. Do you have an account? You can delete it yourself via My account › Details › Delete account. We then keep orders for another 7 years, as required by law; they are no longer linked to an account.
  4. You can unsubscribe from the newsletter at any time, without giving a reason: via the unsubscribe link in every newsletter or by sending us a message. You will then no longer receive the newsletter.
  5. Data that we are legally required to keep, such as invoices, can only be deleted after the statutory period has ended.

Complaints

Do you have a complaint about how we handle your data? Then please contact us first, and we will look for a solution together. If we cannot resolve it together, you can lodge a complaint with the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority), the Dutch supervisory authority for privacy.

Changes

We update this privacy policy when our working methods or the law change. The latest version is always on this page, with the date of the last change at the top.