Effective Date: 22 July 2026
This privacy policy explains how your personal data is collected, used, and protected by Qi Rising® Studio.
Data Controller
Qi Rising® Studio, a sole proprietorship registered with the Dutch Chamber of Commerce (KvK no. 96420022), is responsible for processing your personal data as the data controller, regardless of your location.
Registered Address: Westblaak 122, 3012 KM Rotterdam, Netherlands. Visiting Address (by appointment): Westblaak 122C, 3012 KM Rotterdam, Netherlands. Email: privacy@qirising.studio. Phone: +31 625 418 514.
What Personal Data We Collect
Depending on the services you use, we may collect the following information:
- Full name
- Date of birth
- Postal address
- Email address
- Phone number
- Gender identity (optional and only when disclosed)
- Medical information relevant to your care (with your explicit consent)
- Other information you provide in communications (e.g. WhatsApp, email, forms)
Lawful Basis for Processing (as per GDPR)
We process your personal data based on one or more of the following legal grounds:
- Performance of a contract – e.g. to provide you with services.
- Legal obligation – e.g. tax reporting.
- Explicit consent – e.g. for processing sensitive health data. You may withdraw your consent at any time where processing is based solely on consent.
- Legitimate interests – e.g. improving our services, communication.
Automated Decision-Making
We use AI-powered tools only to record or summarise conversations (e.g. for note-taking). These tools do not make decisions about your treatment, and all clinical decisions are made by a qualified practitioner.
Retention Period
We retain your data for up to 5 years from your last interaction with us unless legal requirements mandate a longer retention period (e.g. tax records). After this period, data is securely deleted.
Who We Share Data With
We do not sell your personal data. We only share it with trusted third parties when it is necessary to deliver services, we are legally obliged to do so, or you have given explicit consent. All third-party processors are GDPR-compliant and bound by data processing agreements.
Cookies and Tracking
Our website uses essential cookies for core functionality and analytical cookies for site performance insights (anonymised). No marketing or tracking cookies are used without your consent.
International Data Transfers
Some of the tools we use to run the practice may store data outside the EU/EEA. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or equivalent legal mechanisms.
Your Rights Under the GDPR
You have the following rights, exercisable via privacy@qirising.studio:
- Right of access: request a copy of your data
- Right to rectification: correct inaccuracies
- Right to erasure: request deletion (subject to legal exceptions)
- Right to restrict processing
- Right to data portability
- Right to object to processing based on legitimate interests
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
Supervisory Authority
If you believe your data protection rights have been violated, you may contact the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority): www.autoriteitpersoonsgegevens.nl.
Data Security
We implement appropriate technical and organisational measures to safeguard your data, including secure encrypted storage, access controls, and regular audits. If you suspect a data breach, please contact us immediately at privacy@qirising.studio.
