FloatOS provides booking and management software for float, wellness and recovery centers. This policy explains what personal data we process through floatos.nl and the FloatOS platform, why we do so, and the rights you have.
Who we are
FloatOS is operated by FloatOS, registered in the Netherlands with the Chamber of Commerce (KvK) under number 76793796 and VAT number NL003136992B62. Postal address: Paxtonstraat 3 N, Box D9454, 8013 RP Zwolle. For any privacy question you can reach us at hello@floatos.nl.
Data we process
Depending on how you use FloatOS, we process:
- Account data — your name, email, a hashed password and your center's details.
- Booking and customer data your center enters into the platform, which may include your end-customers' contact details and appointment history.
- Payment data processed through our payment provider; we do not store full card details.
- Marketing data — your email address if you subscribe to our newsletter, and the details you send through our contact and demo forms.
- Technical data — IP address, browser type and usage statistics, collected in aggregate to keep the service secure and to improve it.
Why we process it
We use personal data to:
- provide, operate and secure the FloatOS platform;
- process bookings, payments and subscriptions;
- respond to enquiries and provide support;
- send product and marketing updates you have opted into;
- comply with our legal obligations.
Legal bases
We rely on the performance of our contract with you, your consent (for marketing), our legitimate interests in running and improving the service, and compliance with legal obligations.
Processors and third parties
We share data only with service providers that help us run FloatOS, under data-processing agreements:
- Mollie — payment processing.
- inbound.new — transactional and marketing email delivery.
- Plausible Analytics — privacy-friendly, cookieless usage statistics.
- Our hosting and infrastructure providers within the European Union.
- We never sell your personal data.
Where your data is stored
We host data on servers within the European Union. Where a provider processes data outside the EU, we ensure appropriate safeguards are in place.
How long we keep it
We keep personal data only as long as needed for the purposes above or as required by law. Account and booking data is retained while you use FloatOS and deleted or anonymised afterwards, subject to legal retention periods such as tax law.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to processing;
- receive your data in a portable format;
- withdraw consent at any time;
- lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Security
We take the security of your data seriously. We use encryption in transit, hashed passwords, access controls and regular backups. No system is perfectly secure, but we work to protect your data and to respond quickly to any incident. If you believe you have found a security vulnerability, please email us at hello@floatos.nl so we can address it responsibly.
Cookies
FloatOS uses only essential cookies and cookieless analytics. See our Cookie Statement for details.
Changes to this policy
We may update this policy from time to time. The date at the top reflects the latest version.
Contact
Questions about your privacy or this policy? Email us at hello@floatos.nl.