Version [1.0], valid from October 19, 2026.

With the Rob Peetoom App, you can make appointments, manage your account, view your loyalty points, and purchase gift cards. We use personal data for these purposes. In this statement, we explain what data the app processes, why, who has access to it, how long we retain it, and what choices you have. This statement is an addition to our general privacy policy at robpeetoom.nl/privacy, which applies to everything we do with your data in the salon and on the website.

1. Who is responsible

Rob Peetoom Management B.V., [address], Chamber of Commerce [number], is responsible for the processing of your data in the app, together with the salon where you are a customer. For questions or requests, please email [privacy@robpeetoom.nl]. The app was developed by Rob Peetoom itself and is linked to our salon system, Zenoti, in which your appointments, account, and loyalty points are tracked. Zenoti processes this data exclusively on our behalf.

2. Which data the app processes and why

Below, you can read per section of the app which data we use, for what purpose, on what legal basis, and how long we retain it.

Create an account and log in
For your account, we use your name, email address, phone number and [optional: your date of birth]. You log in using your email address and a one-time code that we email to you. The app does not store a password. We use this data to secure your account and recognize you as a customer. The legal basis is the performance of the agreement with you. We store this data until you delete your account, or up to 3 years after your last use. Login codes expire after [10 minutes] and are not stored thereafter.

Scheduling, rescheduling, and cancelling appointments
For this, we use the selected salon, treatment, stylist, date and time, your appointment history, and your preferences. This is necessary to schedule and carry out your appointment. The legal basis is the performance of the contract. We retain this data for up to 3 years after your last visit.

View reward points
We process your point balance and the transactions with which you have earned or redeemed points, so that we can keep track of your points. The legal basis is the agreement, as set out in the terms and conditions of the loyalty program. We keep your point data for up to 2 years after the end of your participation. We retain the underlying transactions for 7 years, as required by law.

Buying gift cards
For a gift card, we use your name and email address, the amount, the gift card number, and your personal message. If you have the card sent to someone else, we also use the recipient's name and email address. We need this information to create, send, and redeem the gift card. For your own data, the legal basis is the performance of the contract. For the recipient's data, it is our legitimate interest: you provide that information to us so that we can deliver the card. We retain this information for up to 7 years after the card has been used or expired, because the law requires us to do so.

Payment
Payment in the app is only possible for gift cards and is processed via our payment service provider Mollie B.V. in Amsterdam. You choose your own payment method there, such as iDEAL, credit card, or Apple Pay. We only receive a payment reference, the amount, the status of the payment, and the payment method used from Mollie. We do not see or store your account or card details, and the app does not store payment cards. The legal basis is the performance of the agreement. Mollie processes your payment details as an independent controller; for this, we refer you to Mollie's privacy statement. We retain transaction data for 7 years, as required by law.

Messages about your appointment and account
We send you messages such as appointment confirmations, reminders, login codes, and your gift card. For this, we use your contact details, your appointment information, and, for push notifications, a device token. This is service communication and falls under the performance of the agreement. You only receive push notifications if you have enabled them on your phone, and you can turn service notifications on and off separately in the app. We retain this data for as long as your account exists.

News and offers
You will only receive news and offers via push notifications [and email] if you have enabled marketing notifications in the app. For this, we use your contact details, your device token, your preferences [and whether you open our messages]. The legal basis is your consent, which you can withdraw at any time by turning off the notifications under Settings. [For emails to existing customers about similar services, we rely on our legitimate interest, always with an option to unsubscribe.] We use this data until you turn off the notifications. We keep proof of your choice for 5 years.

Tailored offers
To provide you with offers that suit you, we look at how often you visit, which treatments you choose, and what you spend. The legal basis for this is our legitimate interest, and you may object to this at any time. We never use information about sensitivities, your scalp, or your hair condition for this purpose. We retain this data for as long as you are a customer with us.

Leaving reviews
When you leave a review, we process your name, your rating, and your text to improve our services. The legal basis for this is our legitimate interest. We only publish your review with your consent. We store reviews for 3 years.

Ensuring the app works technically and securing it
To ensure the app works, to troubleshoot errors, and to prevent abuse, such as excessive login attempts, we process technical data: the type of device, operating system, app version, device token for notifications, your IP address, error messages, and the time of use. The legal basis is our legitimate interest. We store technical logs for a maximum of 12 months.

The app does not track which screens you view or how you use the app, and does not contain any third-party analytics software.

3. Access to your phone
The app asks your phone for one permission: to send notifications. We use these for messages about your appointment and account and, only if you enable it in the app, for news and offers. You can turn both types of notifications on and off separately under Settings, and you can always revoke the permission in your phone’s settings. The app does not request access to your location, camera, photos, contacts, or calendar, and does not read any other apps.

4. With whom we share your data

Our salons and stylists, including independent stylists who work with us, can see your appointment and treatment details so that they can provide you with proper care.

The app servers are hosted by our hosting provider [name], in [region, for example, the European Union]. The app is linked to Zenoti (Soham Inc., United States), the provider of our salon system. Both parties process your data only on our behalf, under a data processing agreement, and do not use them for their own purposes. [Your data is stored in a data center in the European Union. For remote support by Zenoti employees outside the EU, the European standard contractual clauses apply.]

Payments for gift cards are processed by Mollie B.V. in Amsterdam. In this capacity, Mollie is itself responsible for your payment details.

To send email and push notifications, we work with [name of email service provider], Apple Push Notification service, and Google Firebase Cloud Messaging. The app is offered via Apple's App Store and Google Play. Apple and Google may process data regarding the downloading and use of apps themselves; their own privacy policies apply to this.

We never sell your data and do not share it with product brands or advertisers.

5. Security

The connection between the app and our systems is encrypted. You log in using a one-time code sent via email, meaning there is no password that could be leaked. The code is valid for a short time and becomes useless after use. Employees only have access to the data they need for their work, and that access is logged. Payment details are not stored by us. If you lose your phone, you can have your account blocked via [privacy@robpeetoom.nl] or in the salon. Without access to your email, no one else can log in to your account.

6. Your choices and rights

In the app, you can view and adjust your data, enable and disable service and marketing notifications separately, and delete your account via Settings > Delete account.

In addition, you have the right to access, correct, or delete your data, to request a restriction on its use, to receive your data in a readable file, to object to processing, and to withdraw any given consent. Send your request to [privacy@robpeetoom.nl]; we will respond within one month. To ensure we are helping the correct person, we ask that you confirm the request from the email address associated with your account.

If you delete your account in the app, we will immediately remove your app account and the link to your phone. Your customer data at the salon, such as appointments and loyalty points, will remain as long as you are a customer, because you can continue to visit us without the app. If you would like that data deleted as well, please let us know via [privacy@robpeetoom.nl]. We are legally required to retain payment and invoice data for 7 years; we will keep this data secured.

Are you not satisfied with how we handle your data? Please let us know. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.

7. Children

The app is intended for customers aged 16 and over. Younger customers should book through a parent or guardian, or in the salon.

8. Changes

We may amend this statement, for example if the app receives new features. The current version is always available at [robpeetoom.nl/privacy-app] and in the app. In the event of significant changes, we will inform you via the app.