At Puffin Nesting, I value your privacy and the trust you place in me when sharing information about yourself and your baby.

This Privacy Policy explains how Puffin Nesting collects, uses, stores and protects personal information when you visit the website, contact Puffin Nesting, make a booking, complete an intake form or participate in a Puffin Nesting service.

Personal data is handled in accordance with the General Data Protection Regulation (GDPR) and the Dutch Algemene Verordening Gegevensbescherming (AVG).

Puffin Nesting is responsible for the processing of personal data described in this Privacy Policy.

Business name: Puffin Nesting
Owner: Inês Ribeiro
Email: info@puffinnesting.com
Location: The Hague, The Netherlands

KVK number: 42107202

If you have questions about how your personal information is handled, you can contact me using the email address above.

Depending on how you interact with Puffin Nesting, I may collect:

Parent or caregiver information

• Name

• Email address

• Telephone number

• Home address where required for home visits

• Communication preferences

Baby information

• Name

• Date of birth

• Corrected age, where relevant

• Developmental information

• Feeding information where relevant

• Relevant health information

• Allergies or sensitivities

• Skin conditions

• Medication where relevant

• Recent vaccinations

• Relevant information about pregnancy or birth

• Concerns or individual needs you choose to share

Booking and service information

• Service booked

• Appointment/course dates

• Payment and booking information

• Travel information where relevant

• Information provided through the intake form

• Session-related notes

• Communications relating to your booking or service

Optional information

• Photographs or videos where separate consent has been provided

• Reviews, testimonials or other information you voluntarily choose to provide

Personal information may be used to:

• Process and manage bookings

• Communicate with you about your booking or service

• Prepare safe and personalised sessions

• Understand your baby's individual needs

• Adapt guidance appropriately

• Provide the requested service

• Maintain appropriate professional and business records

• Process payments

• Meet legal, accounting or safeguarding obligations

• Respond to questions, requests or complaints

• Protect the safety and wellbeing of participants

• Use photographs or videos for agreed purposes where separate consent has been provided

Only information reasonably necessary for these purposes will be collected and used.

Depending on the information and purpose, Puffin Nesting may process personal data because:

• It is necessary to perform a contract with you or take steps at your request before entering into a contract, for example when managing your booking.

• It is necessary to comply with a legal obligation, such as certain administrative or financial record-keeping requirements.

• Puffin Nesting has a legitimate interest, where appropriate, in operating and protecting the business and communicating effectively with clients, provided your rights and interests do not override that interest.

• You have provided consent, where consent is the appropriate legal basis, for example for optional photography or marketing uses.

Where consent is relied upon, you may withdraw it at any time. Withdrawal does not affect processing that lawfully took place before consent was withdrawn.

Some information provided through the intake process may relate to your baby's health, development and wellbeing.

Health information receives additional protection under the GDPR/AVG.

Puffin Nesting only asks for health-related information that is relevant to providing an appropriate and safe baby massage service.

Where required under applicable data-protection law, explicit consent will be requested for the processing of health information.

This information may be used to:

• Prepare and adapt sessions appropriately

• Consider your baby's individual needs

• Identify circumstances in which massage should be postponed or adapted

• Support a safe and comfortable experience

Puffin Nesting does not use this information to diagnose or treat medical conditions.

Personal information may be collected when you:

• Make a booking

• Complete a Client Intake Form

• Contact Puffin Nesting by email, telephone, WhatsApp or another communication channel

• Participate in a session or course

• Provide consent for photography or marketing

• Use the Puffin Nesting website

Puffin Nesting takes reasonable technical and organisational measures to protect personal information against loss, unauthorised access, alteration, disclosure or misuse.

Access to client information is restricted to those who need it for legitimate Puffin Nesting purposes.

Client information and documents may be stored using secure, password-protected digital systems used by Puffin Nesting.

No method of electronic storage or transmission can be guaranteed to be completely secure, but reasonable measures are taken to protect the personal information entrusted to Puffin Nesting.

Service Providers

Puffin Nesting does not sell or rent your personal information.

To operate the business and provide its services, Puffin Nesting uses trusted third-party service providers. These providers may process personal information where necessary to provide their services.

Puffin Nesting currently uses:

• Squarespace – for website hosting and operation.

• Acuity Scheduling (Squarespace) – for appointment and course bookings, booking forms, scheduling and automated client emails.

• Stripe – for securely processing payments. Puffin Nesting does not receive or store your full payment card details.

• Microsoft 365 and Microsoft Forms – for client intake forms, email, business administration and the secure storage of relevant client information.

• Knab Boekhouden – for invoicing, bookkeeping and financial administration.

• Google Business Profile – for business visibility and optional client reviews.

• WhatsApp – where you choose to communicate with Puffin Nesting via WhatsApp.

These providers only receive or process the personal information necessary for the relevant purpose and are expected to handle personal information in accordance with applicable privacy and data-protection requirements.

Personal information may also be disclosed where:

• You have given permission;

• Disclosure is required by law;

• It is necessary to establish, exercise or defend legal rights; or

• Sharing is necessary and lawful in connection with protecting a child’s safety or wellbeing.

Where a service provider processes personal information outside the European Economic Area (EEA), Puffin Nesting takes appropriate steps to ensure that the transfer is made in accordance with applicable data-protection law.

Some technology providers used by Puffin Nesting may process or store personal information outside the European Economic Area.

Where this occurs, Puffin Nesting will rely on appropriate safeguards required by applicable data-protection law, such as an adequacy decision or approved contractual safeguards, where applicable.

Client intake information and routine session records are generally retained for one year after the last contact or completed service, unless there is a legal, safeguarding or other legitimate reason requiring information to be kept for a different period.

Financial and administrative records may be retained for longer where required by law.

Consent records may be retained for as long as necessary to demonstrate the consent given and how it was used.

Personal information will be securely deleted or anonymised when it is no longer required.

Photographs and videos of babies or families will only be taken or used by Puffin Nesting with separate, explicit consent.

You may choose which permitted purposes you consent to, such as use on the Puffin Nesting website, social media or printed marketing materials.

Photography consent is optional. Declining consent will never affect your ability to participate in a Puffin Nesting service.

You may withdraw your permission at any time by contacting Puffin Nesting.

After permission is withdrawn, Puffin Nesting will stop using the relevant material for new purposes. Where reasonably possible, previously published digital content will be removed. It may not always be possible to retrieve material already printed or lawfully published/shared before consent was withdrawn.

Depending on the circumstances, GDPR/AVG may give you rights including the right to:

• Access personal information held about you

• Correct inaccurate or incomplete information

• Request deletion of personal information

• Request restriction of processing

• Object to certain processing

• Receive certain personal information in a portable format

• Withdraw consent where processing relies on consent

• Make a complaint to the relevant supervisory authority

Not every right applies in every circumstance, and some information may need to be retained where there is a lawful reason to do so.

To exercise your rights, contact: info@puffinnesting.com

The Puffin Nesting website may use cookies and similar technologies necessary for the website to function and, depending on your choices, for analytics or other purposes.

More information about the cookies used and the choices available to you can be found in the Puffin Nesting Cookie Policy.

This Privacy Policy may occasionally be updated to reflect changes to Puffin Nesting services, systems or legal requirements.

The latest version will always be available on the Puffin Nesting website, with the date of the most recent update shown at the top of this page.

If you have questions about this Privacy Policy or how your personal information is handled, please contact:

Puffin Nesting
Email: info@puffinnesting.com

If you believe your personal information has not been handled appropriately, you also have the right to submit a complaint to the Dutch Data Protection Authority, Autoriteit Persoonsgegevens.