Privacy Policy

Last updated: 15 January 2026

This Privacy Policy explains how Nextura S.A. ("we", "us", or "our") collects, uses, and protects your personal information when you use our website and services. We are committed to protecting your privacy and ensuring the security of your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Belgian data protection laws.

Data Controller Information

Nextura S.A. is the data controller for the personal information we collect. Our contact details are:

  • Company: Nextura S.A.
  • Registration Number: 4753219859
  • VAT Number: BE4763215893
  • Address: Grand Place 91, 1044 Brussels, Belgium
  • Email: privacy@nextura.pro
  • Phone: +32 2 524 9566

Data Collection

We collect personal data that you provide directly to us and information that is automatically collected when you use our website. The data we collect includes:

Information You Provide

  • Contact information (name, email address, phone number)
  • Appointment and consultation requests
  • Medical history and aesthetic goals (during consultations)
  • Communication preferences
  • Feedback and correspondence

Automatically Collected Information

  • IP address and device information
  • Browser type and version
  • Pages visited and time spent on our website
  • Referring website information
  • Cookie and tracking data (see our Cookie Policy for details)

How We Use Your Information

We use your personal data for the following purposes, based on the legal grounds indicated:

Service Provision (Contract Performance)

  • Scheduling and managing appointments
  • Providing consultation and treatment services
  • Communicating about your treatments and aftercare
  • Processing payments and maintaining records

Legitimate Business Interests

How we use your data for our legitimate business operations includes:

  • Improving our website and services
  • Analysing website usage and performance
  • Responding to enquiries and providing customer support
  • Maintaining security and preventing fraud

Consent-Based Activities

  • Marketing communications (with your explicit consent)
  • Newsletter subscriptions
  • Optional cookies for analytics and advertising

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner or by visiting our Cookie Policy page.

Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

  • With trusted service providers who assist us in operating our website and providing services
  • With healthcare professionals involved in your treatment (with your consent)
  • To comply with legal obligations or respond to lawful requests
  • To protect our rights, property, or safety, or that of others
  • In connection with a business transaction (merger, acquisition, etc.)

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy. Specifically, we retain consultation records for seven years in accordance with medical record retention requirements, website analytics data for 26 months, and marketing consent records until you withdraw consent or we no longer have a legitimate need to process the data. When data is no longer needed, we securely delete or anonymise it.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate or incomplete data
  • Erasure: Request deletion of your personal data in certain circumstances
  • Restriction: Request limitation of processing in certain situations
  • Portability: Request transfer of your data to another service provider
  • Objection: Object to processing based on legitimate interests or for marketing purposes
  • Withdraw Consent: Withdraw consent for processing based on consent

To exercise any of these rights, please contact us at privacy@nextura.pro or call +32 2 524 9566. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

International Data Transfers

Your personal data is primarily processed within the European Union. If we transfer data outside the EU, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children under 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us so we can delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Complaints and Supervisory Authority

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit) or your local supervisory authority.

Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

This Privacy Policy is governed by Belgian law and GDPR regulations.