This is an English translation for convenience; the Dutch version is the binding one.
Privacy statement
Strippie is software for trainers and teachers (personal trainers, music teachers, instructors): a booking page, a calendar, cards and payments through the trainer or teacher themselves (hereafter: the trainer). Here you can read which personal data is used for this, what for, and what your rights are.
Strippie is offered by:
Triton IT B.V.
Wijnruitgaarde 43
3436 HN Nieuwegein
Chamber of Commerce (KvK) 88144216
VAT ID NL864516988B01
Questions about privacy? Email us at [email protected].
Who is responsible for what
- Trainers. We are the controller for the data in your own account.
- Clients of a trainer. If you book with a trainer, that trainer is the controller for your data. Strippie is the processor: we only process your data on behalf of the trainer, so you can book, pay and use your card. If you want to see your data or have it deleted, ask your trainer. We help the trainer with that.
What data we process
From trainers:
- your name, email address and password (we only store the password as an irreversible hash). If you log in with Google, Google gives us your name and email address;
- what you put on your page: name, photo or logo, description, WhatsApp number and colour. This data is public, because it is on your page;
- your services, cards, prices, availability and settings;
- for your Strippie subscription: the status of your subscription, the reference of your SEPA mandate, your customer number at Mollie, the name and address on your invoices, and the invoices themselves (as a PDF in your dashboard and by email);
- your Mollie API key, stored encrypted.
From clients, on behalf of the trainer:
- name, email address and, if you enter it, your phone number;
- a comment with an appointment, if you enter one. It may contain information about your health, such as an injury. Only write down what your trainer needs to know;
- your appointments (what you book, date, time and status), your cards and every change to them (granted, used, returned, expired);
- your payments: amount, status and the payment reference at Mollie. You enter your bank details at Mollie, not with us; we don't store them.
From visitors:
- usage statistics through Tidings, with one first-party cookie containing a random ID. The cookie lasts 13 months. We don't use it for advertising and don't track you on other websites. A Global Privacy Control signal from your browser is respected. In the dashboard we link the statistics to the trainer's account, and on a client's personal page to that client, so we can see which parts are used;
- functional cookies needed to log in and to submit forms securely.
What we use it for
- to deliver the service: showing your page, keeping track of appointments and cards, starting and checking payments at Mollie (performance of the contract);
- to send email that belongs to the service: appointment confirmations, a client's personal link and messages about your account;
- to improve Strippie with the usage statistics above (legitimate interest);
- to keep payment data for as long as the law requires (legal obligation).
Who we share data with
- Scaleway hosts Strippie, the database and the photos on pages, in a data centre in Amsterdam (EU). We send email through Scaleway Transactional Email.
- Mollie processes the payments. Your client pays at Mollie, into the trainer's Mollie account. Mollie is itself responsible for the payment details you enter there and has its own privacy statement.
- Mollie also processes the payments for your Strippie subscription. For that, we give Mollie your business name and your email address. We are the controller for that data.
- Tidings processes the usage statistics for us.
- Google, only if you log in with Google as a trainer.
We don't sell data and don't use it for advertising.
How long we keep data
We keep the data of a trainer and their clients for as long as the trainer's account exists. In addition, we keep payment data for as long as the law requires for bookkeeping. The statistics cookie expires after 13 months.
Security
Strippie only works over an encrypted connection (HTTPS). Passwords are hashed, Mollie keys are stored encrypted, and clients' personal links are long and impossible to guess. Each trainer only sees the data of their own clients.
Your rights
Under the GDPR, you may access your data, have it corrected or deleted, have its processing restricted, object to its processing and have your data transferred. Trainers email us at [email protected]. Clients of a trainer ask the trainer. If you don't agree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes
When Strippie changes, we update this statement. We let trainers know about important changes by email.