Privacy policy
Last updated: July 2026
1. Who are we?
Alvessa is an online platform connecting customers with independent home service providers. We are currently building a network of massage therapists in Utrecht; customer bookings are not open yet. Alvessa is the data controller for the personal data described in this policy.
2. What data do we process?
We process: name and email address (on registration), address details (for in-home appointments), payment information (processed via Stripe — we do not store full payment card details), and booking history.
3. Why do we process your data?
Your data is processed for the performance of the contract (booking), compliance with legal obligations (including 7-year financial record-keeping), and service improvement. We do not process data for marketing without your consent.
4. How long do we retain your data?
Account data is retained while your account is active. Booking and payment data is retained for at least 7 years as required by Dutch tax law. You can delete your account at any time via hello@alvessa.nl.
5. Processors
We use Supabase (database hosting) and Stripe (payment processing, PCI-DSS certified) as processors. Where data is processed outside the EEA, we do so with appropriate safeguards. We have data processing agreements with all processors.
6. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Contact us at info@alvessa.nl. You can also lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
7. Contact
Questions about this privacy policy? Email info@alvessa.nl.
KvK-nummer: 42069738