Your data, clearly explained.

1. Who are we?

Manseli is an online booking platform that enables businesses to manage their website, calendar, services, staff, customers, appointments and payments. Businesses with Premium can also connect WhatsApp, allowing customers to use a digital booking assistant to view availability and create, change or cancel appointments.

Manseli is registered with the Dutch Chamber of Commerce under number 95611967. Our postal address is Postbus 145, 2250 AC Voorschoten, the Netherlands. Privacy questions may be sent to hello@manseli.nl.

2. Who does this policy apply to?

This policy applies to visitors of manseli.nl, businesses and staff using Manseli, customers booking through a connected business, customers communicating with the booking assistant through WhatsApp and anyone contacting Manseli.

3. Who is responsible for what?

Customers of a connected business

The business with which a customer books determines why and how customer information is used. That business will generally be the data controller. Manseli processes the information on its behalf and then acts as a processor. Questions about an appointment, treatment, customer record or deletion should therefore normally first be directed to that business.

Manseli's own processing

Manseli acts as controller for account management, subscriptions, invoicing, security, abuse prevention, support, platform communications and compliance with legal obligations.

4. Which personal data do we process?

Businesses and account users

We may process names, business contact details, roles, company and billing information, Chamber of Commerce and VAT numbers, account settings, services, prices, staff, opening hours, subscription information, payment statuses, correspondence, support requests and usage and security logs. Passwords are not stored in readable form.

Customers making an appointment

Depending on the business's settings, we process name, telephone number, email address, selected business, service, staff member, appointment date, time, duration and price, appointment status, notes, previous and future appointments, changes, cancellations, payment status and appointment communications.

Do not share medical, health-related or other sensitive information in free-text fields or through WhatsApp unless necessary for the service and specifically requested by the business. The business remains responsible for a valid legal basis and appropriate safeguards.

WhatsApp

When WhatsApp is used, we may process the telephone number, displayed profile name, message content and timestamps, technical message IDs, delivery, read and error statuses, language preferences, appointment details and files voluntarily submitted. This information is used to display availability, create, change or cancel appointments and send practical messages.

Manseli does not sell this information, use WhatsApp conversations for its own advertising or use the content to train general-purpose AI models.

Payments

Online payments are processed by Mollie or Stripe, depending on the choice made by Manseli or the connected business. Manseli does not receive complete card or bank details, but may receive the amount, status, method, transaction ID, date and refund status.

Website, technical and support information

We may process IP address, date and time, browser and device type, operating system, visited pages, session information, errors, security events and approximate location derived from an IP address. When support is contacted, we also process the request and submitted files or screenshots.

5. How do we obtain information?

We receive information directly from the individual, from a connected business, through booking pages, WhatsApp Business Platform, Mollie or Stripe, from account administrators adding staff, automatically through our websites and systems and, where necessary, from public business registers.

6. Why do we process information?

We process information to manage accounts and access, calculate availability, create, change and cancel appointments, send confirmations and reminders, handle WhatsApp conversations about appointments, process payments and credits, provide support, manage subscriptions and invoices, prevent fraud and incidents, resolve errors and comply with legal obligations.

Manseli does not use customer appointment or conversation information for its own marketing. Connected businesses are responsible for their commercial communications and the required legal basis or consent.

7. Legal bases

Where Manseli acts as controller, we process information because this is necessary to perform a contract, comply with a legal obligation, pursue a legitimate interest such as security, fraud prevention, troubleshooting and business communications, or based on consent. Consent can be withdrawn without affecting earlier lawful processing.

Where Manseli acts as processor, the connected business determines the applicable legal basis.

8. WhatsApp and Meta

The WhatsApp integration uses services provided by WhatsApp and Meta. When communicating through WhatsApp, information may be processed by the business, Manseli, WhatsApp, Meta and necessary technical providers. WhatsApp and Meta process certain information under their own terms and privacy policies, including to deliver, route, secure and administer messages and accounts.

WhatsApp is optional. Customers can use the business's booking website or other contact methods instead, and can block the business within WhatsApp.

9. With whom do we share information?

Where necessary, information is shared with the business receiving the booking and its authorised staff, Meta and WhatsApp, hosting and infrastructure providers, email and messaging providers, Mollie, Stripe, security and troubleshooting providers, professional advisers and competent public authorities. In a merger, acquisition or transfer, information may be provided to a successor under appropriate conditions.

We enter into data processing agreements where required. A current overview of important subprocessors may be requested through hello@manseli.nl. Manseli does not sell personal data.

10. Transfers outside the EEA

Some providers, including companies within the Meta group, may process information outside the European Economic Area. Where required, we use an adequacy decision, approved Standard Contractual Clauses and additional technical or organisational safeguards. Information about applicable safeguards may be requested through hello@manseli.nl.

11. How long do we retain information?

We retain information no longer than needed for the purpose for which it was collected. As controller, the connected business determines the retention period for customer and appointment information within Manseli's available settings. Manseli deletes or returns this information at the end of the service or on the business's instruction, unless the law or a justified need requires continued retention.

We retain account, contract and support information for the agreement and afterwards for as long as necessary for administration, support or legal claims. Financial records are generally retained for seven years. Technical logs and backups are retained only as long as needed for security, recovery and continuity, after which they are deleted or overwritten.

12. Security

Manseli uses appropriate technical and organisational measures, including encrypted connections, secure password storage, roles and access controls, logging, monitoring, backups, software updates, separation of business data and incident procedures. No digital service can guarantee absolute security. Users must protect their credentials and devices.

Potential security incidents may be reported to hello@manseli.nl.

13. Your privacy rights

Depending on the circumstances, you may request access, correction, erasure, restriction or portability. You may object, withdraw consent and object to direct marketing. These rights are not absolute; a statutory retention obligation or legal dispute may limit deletion.

For appointment or customer information, first contact the relevant business where possible. For information for which Manseli is responsible, email hello@manseli.nl. We may request information to verify your identity and will respond within the legally applicable period.

14. Automated processing

The booking assistant can automatically display availability, collect booking information, create, change or cancel appointments and send confirmations. Manseli does not make solely automated decisions that produce legal or similarly significant effects.

15. Children and minors

Manseli is not aimed directly at children. A parent or legal representative may book for a minor. The connected business determines whether parental consent is required. Minors should not share information through free-text fields or WhatsApp without guidance.

16. Cookies and local storage

Manseli uses necessary cookies and similar storage to operate the website securely, keep users signed in, remember booking choices and prevent abuse. If we later use non-essential analytics or marketing technologies requiring consent, we will request consent before they are placed and update this policy.

17. Third-party services

Our websites may link to WhatsApp, payment providers or connected businesses. These parties may independently process personal data. Please also read their privacy policies.

18. Changes

We may change this policy when our services, providers, processing or applicable law change. The current version is available on this page. We may separately inform account users about material changes.

19. Complaints

Questions or complaints may be sent to hello@manseli.nl. We will first try to resolve complaints directly. You may also lodge a complaint with the Dutch Data Protection Authority or another competent European supervisory authority.

20. Contact