Privacy
Privacy statement
Below, in plain language, is what happens to your data when you create an account at Masana, book a class or buy a gift voucher. No wall of legal text: just what this system actually does.
Last updated on 26 August 2026.
Still to be reviewed by Marijke
Who is responsible for your data?
Masana, Oud Dorp 80, 9260 Wichelen, Belgium. Masana decides which data is kept and why, and is therefore the data controller under the GDPR. For any question about your data, write to masana.wichelen@gmail.com or call +32 486 707 785.
Which data do we keep?
Only what is needed to let your class or appointment happen. Nothing more.
Your account
First name, last name, e-mail address, phone number and the language you want your e-mails in. Your password is never stored as text, only as an encrypted fingerprint from which the password cannot be derived.
Bookings and attendance
Which classes and appointments you booked, when you cancelled, whether you were on a waiting list and whether you attended. That is how we know how many places are free and whether a credit should go back on your card.
Credits, packages and gift vouchers
Which package you bought, how many credits are left, until when they are valid, and the gift vouchers you bought or redeemed.
Payments
The amount, the date, what you paid for and a reference to the payment at Stripe. Your card details themselves never reach Masana.
Health data
Only what you write yourself about an injury or something we should take into account, and only if you give explicit consent. See below.
E-mails we send
Confirmations, reminders and messages about a cancelled class. We record which message went to which address and whether it arrived, so that a reminder does not go out twice or not at all.
Technical data
A sign-in cookie so you stay logged in, and a language cookie so the site remembers your language. Our server keeps ordinary error logs so that failures can be fixed.
Payments go through Stripe
All payments run through Stripe, an Irish payment provider used across Europe. You type your card or Bancontact details on Stripe's payment page, not on Masana's.
So Masana never sees your card number, its expiry date or your PIN. All we are told is that a payment succeeded, for which amount, plus a reference number that lets us find the payment again. Stripe processes your payment data under its own privacy policy.
Health data is kept separately
An injury, a pregnancy or a condition are special categories of personal data. They are only kept if you tick the box on the registration form yourself. If you tick nothing, what you typed is not sent and therefore not stored.
Those notes live in a separate table, apart from your account, with the date of your consent alongside. Only Marijke can read them, and only to keep the class or the treatment safe.
You can withdraw your consent at any time. Ask at masana.wichelen@gmail.com and the note is deleted, without your account or your credits disappearing.
Why we need that data
- To carry out your booking, your class card or your gift voucher. Without a name and an e-mail address we cannot hold your place or send your confirmation.
- To meet the bookkeeping and VAT obligations that come with a payment.
- For your health note: only with your explicit consent, which you can always withdraw.
- To keep things running safely: error logs, preventing abuse, and reminders that go out exactly once.
How long do we keep it?
- Your account and your data stay as long as you are a customer at Masana. Ask us to delete your account and they are gone.
- Bookings and attendance are kept as long as your account exists, so you can look back at your own history.
- Payment records are kept for seven years, because bookkeeping law requires it. Even after your account is deleted, that accounting line remains.
- Health notes are deleted as soon as you withdraw your consent, and in any case together with your account.
- Sent e-mails and their status are kept for at most a year, so we can check whether a reminder really went out.
Who do we share your data with?
Masana does not sell your data and does not pass it on for advertising. Three parties are technically needed to run the site:
- Stripe (Ireland) for the payments.
- Cloudflare for running the website and the database, and for sending e-mail.
- And beyond that, only those legally entitled to it, such as the accountant or the tax authorities.
There are no ad networks, no social media buttons and no embedded maps on this site. Even our contact page links to a map instead of loading one.
Cookies
This site uses two cookies, both strictly necessary. That is why we do not ask consent for them.
- A sign-in cookie so you stay logged in while booking. It disappears when you sign out.
- A language cookie that remembers whether you want the site in Dutch, French or English.
There is not a single analytics or advertising cookie on this site.
What can you ask for?
The GDPR gives you a number of rights. At Masana, an e-mail is enough to use them:
- Access: ask for an overview of everything we keep about you.
- Correction: have a wrong phone number or a misspelled name put right. You can also do that yourself in your account.
- Erasure: have your account and your data deleted, except what bookkeeping law obliges us to keep.
- Restriction and objection: ask us to stop a processing while a disagreement is being sorted out.
- Portability: receive your data in a readable file.
- Withdraw consent: have your health note deleted, without losing the rest.
Send your request to masana.wichelen@gmail.com. We answer within a month. To avoid someone else asking for your data, we may ask you to identify yourself.
If you are not happy with our answer, you can lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels.
Security
The site runs entirely over an encrypted connection. Passwords are stored encrypted, the back office is only accessible to Marijke, and health data is kept apart from the rest.
Changes
If what we keep changes, we update this text and put the new date at the top. For an important change we let you know by e-mail.