10 steps too much

Privacy policy

This is a small website where you can browse our skincare products and reserve them. We collect as little as possible, and explain it here in plain words.

Last updated: 11 October 2026

Who is responsible

[NAME TO BE FILLED IN] runs this website and is responsible for your data. Questions or requests: [EMAIL TO BE FILLED IN].

[KVK ANSWER TO BE FILLED IN]

What we store

  • Your email address, to log in and so we can contact you about a reservation.
  • Your name, only if you give one. It's never shown publicly, only to you and us.
  • Your password, but only as a scrambled code (a hash) that nobody can turn back into your password.
  • Your reservations: which product, how many, the price and the date.

Why

Only to handle your reservations and to let you log in. That's what you ask for when you create an account or reserve something.

What we don't do

  • No tracking, no analytics, no advertising.
  • We never sell your data or share it with others.
  • There's only one cookie: the one that keeps you logged in and protects the forms. It's deleted when you log out or close your browser.
  • The video on the home page only loads from YouTube when you press play. From then on, YouTube's own privacy policy applies.

Protection against abuse

To stop people from guessing passwords or creating many accounts, we briefly count login attempts and new accounts per internet (IP) address. These counters only exist in the server's memory and disappear within an hour. When a limit is reached, a shortened address is written to the server's log.

Where and how long

Everything is stored on servers of Hetzner in Germany. Backups are stored encrypted at Backblaze, in their EU region (Amsterdam). Both are in the EU.

Your data is kept until you delete your account. After that, we keep what was reserved (product, number, price and date), without your name or email address. Backups are kept for up to 6 months, after which deleted data is gone from them too.

Your rights

You can see and change your name on your account page, and delete your account there yourself. How to delete your data

You can also email [EMAIL TO BE FILLED IN] to ask what we store about you, or to have it corrected or deleted.

If you're not happy with how we handle your data, you can complain to the Dutch data protection authority (Autoriteit Persoonsgegevens).