Privacy Policy

Who we are

Website: https://thejadetortoise.com
Studio: The Jade Tortoise
Location: Amsterdam, The Netherlands
KVK nr: 75258110
Contact: +31 6 11158637
Email: info@thejadetortoise.com

The Jade Tortoise is a boutique Medical Qigong studio offering in-person classes, workshops, and private sessions.
Our website runs on WordPress and uses a locally installed booking system (LatePoint) and secure third-party services to enable payments, analytics, and communication.

What personal data we collect and why we collect it

We collect only the information required to communicate, process bookings, accept payments, and maintain essential administration.

LatePoint (Local Booking System)
When you book a class, workshop, or private session, we collect your name, email address, and phone number. This information is stored securely on our own server in the Netherlands and is used to confirm reservations, send reminders, and manage attendance.

Payments (Mollie B.V.)
When you make a payment for a class, workshop, or session, the transaction is processed securely by Mollie B.V.
Mollie collects and processes your name, email address, payment method, and transaction details (amount, date, and status). This data is used solely to complete your payment and maintain financial records in accordance with tax regulations.

WhatsApp Integration (Meta Platforms Inc.)
When you contact us via WhatsApp, your name, phone number, and message content are processed through WhatsApp’s platform. This is used only for communication and scheduling.

Facebook / Instagram Integration (Meta Platforms Inc.)
When you contact or follow us through Facebook or Instagram, Meta may process your profile information, message history, and engagement data under their own privacy terms.

Google Analytics (Google LLC)
We use Google Analytics to understand visitor activity and website performance. The data collected includes anonymised IP addresses, device type, browser, and pages visited. We have configured Google Analytics with privacy-enhanced settings and IP anonymisation where possible.

Legal Basis for Processing:

  • Performance of a contract (bookings, communication, and payments).

  • Legitimate interest (analytics and website optimisation).

  • Consent (non-essential cookies and analytics).

We do not collect or store any sensitive health-related information through our website.

Comments

Comments are disabled on our site. No comment-related data is collected or stored.

Media

Visitors cannot upload or share images or files through this website.

Contact forms

We do not use separate contact forms. All communication occurs through WhatsApp, email, or the booking system (LatePoint).
Any personal data shared through these channels is used solely to respond to inquiries or manage bookings and is not used for marketing purposes.

Cookies

Our website uses functional and analytical cookies:

  • WordPress cookies – essential for site functionality.

  • Google Analytics cookies – used to measure anonymised visitor data (only with consent).

  • LatePoint cookies – used to maintain booking sessions.

  • Meta (Facebook / WhatsApp) – may set cookies if you interact with embedded content or links.

You can accept or decline non-essential cookies when you first visit our website or manage your preferences through your browser settings.

Analytics

We use Google Analytics (Google LLC) for anonymous usage statistics.
Analytics data may be processed outside the EU under Google’s Standard Contractual Clauses.
You can opt out at any time by installing the Google Analytics Opt-out Add-on: https://tools.google.com/dlpage/gaoptout

Who we share your data with

We share data only where necessary for essential website and operational functions:

  • LatePoint (local installation) – used to manage bookings; all data remains on our own secure server within the EU.

  • Mollie B.V. – for secure online payments. Mollie acts as a GDPR-compliant data processor.

  • Meta Platforms Inc. – for WhatsApp, Facebook, and Instagram integrations.

  • Google LLC – for website analytics.

  • Web hosting provider – to maintain the site’s technical infrastructure.

Privacy Policies of third-party services:

We do not sell, rent, or share data for marketing purposes.

How long we retain your data

  • Booking data (LatePoint): retained as long as required for administration and accounting.

  • Payment data (Mollie): retained according to tax and legal obligations.

  • WhatsApp messages: kept only as long as needed for communication or basic record-keeping.

  • Analytics data: retained for 14 months.

  • Emails: deleted once no longer relevant to customer service or bookkeeping.

What rights you have over your data

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access your personal data.

  • Request correction or deletion.

  • Restrict or object to processing.

  • Withdraw consent for analytics cookies.

To exercise these rights, please contact us using the details below.

Where your data is sent

  • Booking data is stored locally on EU-based servers.

  • Payment data is processed by Mollie B.V. (Netherlands) and may be transferred outside the EU where required, under GDPR-compliant safeguards.

  • Meta and WhatsApp data may be processed outside the EU. Meta applies Standard Contractual Clauses to safeguard such data.

  • Google Analytics data may also be transferred outside the EU under the same clauses.

Contact information

For privacy-specific questions or requests:
The Jade Tortoise
Amsterdam, The Netherlands
Email: info@thejadetortoise.com
Phone / WhatsApp: +31 6 11158637

Additional information

How we protect your data
We use HTTPS encryption, strong passwords, limited account access, and regularly updated software. Data within our booking and payment systems is stored securely and accessible only to authorised personnel.

What data breach procedures we have in place
If a data breach is suspected or confirmed, we follow GDPR procedures: internal reporting, identifying affected data, and notifying the relevant authorities and users where required.

What third parties we receive data from
We may receive basic contact information (name, phone, profile) through Meta platforms such as WhatsApp, Facebook, or Instagram when you interact with us there.

What automated decision making and/or profiling we do with user data
We do not perform any automated decision making or profiling.

Industry regulatory disclosure requirements
The Jade Tortoise operates under general wellness and education services and is not part of a regulated medical or financial industry.