Privacy policy

1. Who is responsible

Praktijk Erwin Blom is responsible for the processing of personal data within the practice. You can contact me using the email or postal address on this page. I use MijnDiAd as the software provider and processor for the client record and client portal; responsibility for how your information is used remains with me.

2. Information I use

For contact, appointments and administration, this may include your name, contact details, appointments, correspondence, invoices and payments. For coaching it may also include your intake questionnaire, your account of your situation and lifestyle, symptoms, relevant medical information you choose to share, scan reports, session notes and your personal plan.

The website itself has no intake form. Booking and intake take place in the external MijnDiAd client portal. Please share sensitive health information through that portal where possible, not through ordinary email or WhatsApp.

3. Purposes and legal bases

I use contact and appointment information to respond to your enquiry, arrange appointments and carry out our agreement. I use invoice information to meet legal accounting duties. Limited technical information may be needed to keep the website secure and functioning.

Health information receives additional protection. I ask for your explicit consent to process health information for lifestyle coaching, alongside the legal basis needed to carry out our agreement. You may withdraw that consent; this does not affect processing that was lawful before withdrawal. Without necessary information I may be unable to provide appropriate support.

4. Who may receive information

MijnDiAd supports bookings, intake and storage of client records as a processor. Email, website hosting and accounting providers may also process information where needed for their services. I do not sell your information or share the contents of your record for marketing.

Referrals, additional testing or sharing information with another healthcare professional take place only with an appropriate legal basis. If you follow a link to WhatsApp, the booking portal or a partner website, that provider's privacy terms also apply to your use of its service.

5. How long information is kept

Intake information and scan reports are stored in MijnDiAd for a maximum of 20 years after our last contact, unless an applicable legal duty or a valid erasure request calls for a different period. I review whether continued retention is necessary and delete information earlier when there is no longer a legal basis to keep it.

Invoices and associated tax records are generally kept for 7 years under Dutch accounting rules. One-off enquiries are kept no longer than needed to answer them and provide necessary follow-up.

6. Security and access

I restrict access to client information to those who need it for coaching or administration and use appropriate security measures. MijnDiAd processes record information on behalf of the practice. No digital system is entirely risk-free; please report suspected unauthorised access promptly using the email address on this page.

7. Website and external services

The site stores your language preference locally in your browser. Fonts are served by this website; loading them does not require a connection to Google Fonts. At present, the site has no newsletter, advertising pixels or analytics cookies of its own. Technical hosting logs may be used to operate and secure the site.

WhatsApp, the booking portal and partner websites may, as external providers, process data outside the European Economic Area. Their privacy terms and applicable safeguards govern their services. Please avoid sending medical or other sensitive information through WhatsApp.

8. Your rights

You can ask what personal information I hold about you, request a copy, correction, deletion, restriction or transfer of information, or object to processing. The rights available in a particular case depend on the legal basis and any statutory retention duties. Send your request to the email address on this page; I may verify your identity to prevent misuse.

If you disagree with my response, you may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. Changes

If the practice or the services it uses change, I will update this policy. The current version is always available on this page.