Last updated: April 2026

At MenoWiser, we take the careful handling of your personal data very seriously. This Privacy Policy explains what information we collect, why we collect it, how we protect it, and what rights you have.

Who is responsible for your data?

MenoWiser is a sole proprietorship / business activity operated by Suzanne Rethans, registered at Hanenpad 48, 1501 WD Zaandam, the Netherlands, and registered with the Dutch Chamber of Commerce (Kamer van Koophandel) under number 52471268. If you have any questions about privacy, you can contact us at privacy@menowiser.com.

For the processing of your client data, I (Suzanne Rethans, MenoWiser) am the data controller within the meaning of the General Data Protection Regulation (GDPR).

What data do we process?

Depending on how you interact with us, we may process the following personal data:

When you contact us through the website (contact form, newsletter):

• Name
• Email address
• Telephone number (if provided)
• The content of your message

When you book and attend a consultation:

• Name, address and place of residence
• Date of birth
• Email address and telephone number
• Your responses to the intake questionnaire regarding your symptoms, medical history, lifestyle and health status
• Any laboratory results, DNA reports or medical records you provide
• Notes I make during and after the consultation
• Recommendations I have provided to you (hormonal, supplements and lifestyle)
• Invoice and payment details

Special categories of personal data

Some of the information listed above constitutes special category personal data under the GDPR — specifically, data concerning your health and, where provided by you, genetic data (DNA). This information is particularly sensitive and is handled using the strictest security measures. Some of the information listed above constitutes special category personal data under the GDPR — specifically, data concerning your health and, where provided by you, genetic data (DNA). This information is particularly sensitive and is handled using the strictest security measures.

Why do we process your data?

I process your personal data solely for the following purposes:

• To provide the consultation you have booked
• To prepare personalised recommendations
• To maintain your client record (as legally required under the Dutch Medical Treatment Contracts Act — Wet op de geneeskundige behandelingsovereenkomst, WGBO)
• To issue invoices and process payments
• To communicate with you about your appointment, including confirmations, reminders and any follow-up appointments
• To improve my services on an anonymised basis

The legal bases for processing are:

• Performance of a contract (Article 6(1)(b) GDPR) — for the consultation itself
• Compliance with a legal obligation (Article 6(1)(c) GDPR) — for record-keeping obligations under the WGBO and statutory tax retention requirements
• Explicit consent (Article 9(2)(a) GDPR) — for the processing of special category personal data, such as health and genetic data

I will explicitly ask for your consent during the intake process before processing DNA data and health information. You may withdraw your consent at any time.

How long do we retain your data?

I retain client data and consultation notes for 20 years following your last consultation. This is the statutory retention period under the WGBO.

Invoice records are retained for 7 years in accordance with statutory tax retention requirements.

General contact information — for example, correspondence that does not result in a consultation — is deleted after a maximum of 2 years.

If you have subscribed to the newsletter, I will retain your email address until you unsubscribe.

Who has access to your data?

Only I (Suzanne Rethans) have access to your client record. I do not share your personal data with third parties, except in the following circumstances:

• My accountant, insofar as necessary for financial administration (invoice information only; no medical data)
• My client record system, MijnDiAd, which acts as a data processor under a data processing agreement
• Where you have given your explicit consent, for example to allow consultation with your GP or specialist
• Where I am legally required to disclose information, for example pursuant to a court order

I have entered into data processing agreements with parties that act as data processors, such as MijnDiAd, setting out the measures required to protect your personal data.

How do we protect your data?

I take the protection of your personal data seriously and have implemented appropriate technical and organisational measures, including:

• Encrypted storage of client records in a system compliant with NEN 7510 and the GDPR
• Two-factor authentication on all systems that provide access to client data
• Tweestapsverificatie op alle systemen die toegang geven tot cliëntdata
• Strong passwords and automatic logout after periods of inactivity
• Regular backups to secure locations within the European Union
• No storage of personal data on unsecured devices or cloud storage services

Your rights
Under the GDPR, you have the following rights:

• Right of access to your personal data
• Right to rectification where your personal data is inaccurate
• Right to erasure (‘right to be forgotten’), subject to applicable statutory retention requirements
• Right to restriction of processing
• Right to data portability, including the right to receive your client record in a readable format where applicable
• Right to object to the processing of your personal data
• Right to withdraw your consent to the processing of special category personal data

You can submit a request regarding any of these rights by emailing privacy@menowiser.com. I will respond to your request within four weeks.

Complaints
If you have a complaint about the way I handle your personal data, please contact me first so that we can try to resolve the matter. If we are unable to resolve your complaint, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.

Changes to this Privacy Policy

I may update this Privacy Policy from time to time. The most recent version will always be available on this page, with the date of the latest update shown at the top.