Privacy Policy

How BodyResetNow collects, uses, and protects your personal data.

Last updated: March 2026

1. Who We Are

BodyResetNow is a metabolic health and orthomolecular therapy practice operated by Gabi Hacmon, MBOG-certified and RBCZ-registered practitioner. We are established in the Netherlands and provide functional health services for women 40+.

For proper treatment, it is necessary for me as your treating practitioner to maintain a client file. This is also a legal obligation under the Dutch Medical Treatment Contracts Act (WGBO/Wkkgz). Your file contains notes about your health status and information about examinations and treatments performed.

As your treating practitioner, I am the only person with access to the data in your file. I have a legal duty of confidentiality (medical professional secrecy).

Contact details:
BodyResetNow
Gabi Hacmon
Email: gabi@bodyresetnow.com
Phone: +31 651 607696

2. What Personal Data We Collect

Depending on how you interact with our website and services, we may collect the following personal data:

Contact & Booking Information

  • Name, email address, phone number
  • Appointment date and time preferences
  • Messages or questions submitted through our contact form

Health-Related Information (once you become a client)

  • Health history and current symptoms
  • Lab test results and metabolic data
  • Dietary and lifestyle information
  • Treatment plans and progress notes

Website Usage

  • This website uses only essential functional cookies necessary for the site to work. We do not use analytics or tracking cookies.

3. Why We Process Your Data & Legal Basis

We process your personal data for the following purposes:

Purpose Legal Basis (GDPR Art. 6)
Responding to your inquiry or contact form Your consent & performance of contract
Scheduling and managing appointments Performance of contract
Providing healthcare and treatment Legal obligation (WGBO) & explicit consent (Art. 9)
Maintaining medical records Legal obligation (WGBO — 20-year retention)
Billing and administration Legal obligation & performance of contract

4. How Long We Keep Your Data

  • Contact form inquiries: Deleted within 1 year after your request has been handled, unless a treatment relationship is established
  • Medical/treatment records: 20 years after the last entry, as required by Dutch law (WGBO)
  • Billing records: 7 years, as required by Dutch tax legislation

5. Who Has Access to Your Data

Your personal data is treated with the strictest confidentiality. We do not sell, rent, or trade your information.

The data in your file may also be used for the following purposes:

  • To inform other healthcare providers, for example when therapy has been completed or in case of a referral to another practitioner. This only happens with your explicit (written) consent.
  • For anonymized use during peer review.
  • A small part of the data from your file is used for financial administration, so that an invoice can be issued.

Cooperation with other organisations

From my practice I work with the following organisations regarding the processing of your data:

  • Dropbox: For secure storage of client files. Only I have access to the login credentials.
  • Google (Calendar & Workspace): For appointment scheduling and email communication.
  • Formspree: For processing contact form submissions via the website.
  • Calendly: For online appointment scheduling.
  • Laboratory service providers: When lab tests are ordered as part of your treatment.
  • Zijp (Accountant): For financial administration.

We do not share your data with any other third parties without your explicit consent.

6. International Data Transfers

Some services we use (such as Google Calendar) may process data outside the European Economic Area (EEA). Where this occurs, appropriate safeguards are in place, including EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework.

7. Your Rights

Under GDPR/AVG and the Dutch Medical Treatment Contracts Act (WGBO), you have the following rights regarding your personal data and your treatment file:

  • Right of access: You can request access to the data recorded in your file
  • Right to a copy: You have the right to request a complete copy of your file
  • Right to rectification: You can ask us to correct or supplement inaccurate data
  • Right to destruction: You can request the destruction of (part of) your file. This request will be fulfilled within three months, unless it is plausible that retaining the file is of substantial interest to someone other than the client
  • Right to restrict processing: You can ask us to limit how we use your data
  • Right to data portability: You can request your data in a portable format
  • Right to object: You can object to certain processing of your data
  • Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at gabi@bodyresetnow.com. We will respond within 30 days.

8. Cookies

This website uses only essential functional cookies that are necessary for the website to operate correctly. We do not use analytics cookies, tracking cookies, or advertising cookies. No consent is required for these essential cookies under Dutch telecommunications law (Telecommunicatiewet).

9. Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

  • Client files are stored in Dropbox, secured with a personal password. Only I have access to the login credentials.
  • I handle your personal and medical data with care.
  • I ensure that unauthorized persons do not have access to your data.

10. Complaints Procedure

In the event of a complaint about a treatment, we will first attempt to discuss this with you.

It is also possible to engage an independent complaints officer. This officer can provide support in formulating the complaint or in cases of dissatisfaction and helps in finding solutions. The therapist has the right to be informed of this. The practice is affiliated with the MBOG for this purpose.

In addition, the practice is affiliated with a government-recognised dispute resolution body, SCAG.

For more information, visit the website of my professional association MBOG: https://mbog.nl/over-mbog/klachten-en-geschillen/.

If you believe that your personal data is being processed in violation of applicable privacy legislation, you have the right to file a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
PO Box 93374
2509 AJ The Hague
Phone: (+31) 070 888 8500
Website: www.autoriteitpersoonsgegevens.nl

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.