Privacy

Privacy Policy

Last updated: 13 September 2026

L’Ocean Skin Institute handles personal data with care. This privacy policy explains which data we process, why we do so and which rights you have.

1. Who is responsible?

L’Ocean Skin Institute is responsible for the processing of personal data described in this policy.

2. Which personal data do we process?

When you contact us or make an appointment, we may process your name, telephone number, email address, appointment details and the content of your message. Where necessary for a safe and suitable treatment, we may also record relevant information about your skin, health, treatment preferences, treatments performed and consent given.

The website has no contact form and does not create visitor profiles. For website security and operation, the hosting provider may process technical data in server logs, such as an IP address, browser type, requested URL and time of access.

3. Why do we process data and on which legal basis?

We use personal data to answer questions, arrange appointments, provide treatments safely and carefully, give advice, maintain our administration and comply with legal obligations. Depending on the situation, processing is necessary to enter into or perform a contract, based on a legitimate interest, required by law or based on consent. For special-category data, such as relevant health information, we request explicit consent where legally required.

4. Clients under the age of 18

For treatments involving a minor, we involve a parent or legal representative where this is required because of the client’s age or the nature of the treatment.

5. With whom do we share data?

We do not sell personal data. Data is shared only where necessary for our services or to comply with a legal obligation. This may include our hosting and email providers, administrative service providers and professional advisers. We make appropriate arrangements with service providers that process personal data on our behalf.

If you contact us through WhatsApp or use an external link to Google Maps, Instagram or Facebook, those organisations process data under their own privacy policies. They may process data outside the European Economic Area and are responsible for the applicable safeguards.

6. Website, external fonts and cookies

The website does not use analytics, advertising or marketing cookies and does not set its own tracking cookies. Google Fonts are loaded for the website’s design, which may technically disclose your IP address to Google. Links to WhatsApp, Google Maps, Instagram and Facebook open only after you choose to click them.

7. How long do we retain data?

We do not retain personal data longer than necessary for the purpose for which it was collected. Correspondence and appointment details are deleted when they are no longer needed. Treatment, consent and administrative records may be retained for longer where necessary for safe follow-up treatments, handling questions or complaints, or complying with a statutory retention obligation.

8. Security

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or disclosure.

9. Your privacy rights

You may ask us for access to, rectification, erasure, restriction or transfer of your personal data. You may also object to processing or withdraw previously given consent. Withdrawal does not affect the lawfulness of processing carried out before that withdrawal. Send your request to info@locean.nl. We may request additional information to verify your identity.

10. Making a complaint

If you have a complaint about how we handle personal data, please contact us first. You also have the right to lodge a complaint with the Dutch Data Protection Authority.

11. Changes

We may update this privacy policy when our services or applicable law change. The latest version will always be available on this page.