Privacy statement
This statement explains what we do with your personal data when you visit this website, join our waiting list, request our research report, sign up for one of our studies, fill in one of our questionnaires, or email or speak with us.
Who we are
Bespoke Health is being set up in Amsterdam as a membership service and a private clinic (zelfstandig behandelcentrum). The company is still in formation. Until it is registered, the founding team of Bespoke Health is responsible for the processing described here. Once the companies are registered, we will add their names and Chamber of Commerce numbers to this statement.
For anything about your data, write to healthmanager@bespokehealth.nl.
What this statement does not cover
Before you become a member, we do not ask for medical information and we do not keep a medical record for you. Once Bespoke Health opens, medical care and the health record fall under a separate privacy statement for members, with its own legal basis and your explicit consent where the law requires it.
Our questionnaires are the one exception: they ask about your experiences with healthcare and what you would want, which can touch on your health. That is why they ask for no name or contact details and why we do not link your answers to you; see below. Apart from that, please do not send us medical details by email or through the forms on this site. If you do, we will only use them to answer your question and will not store them in our contact systems.
What we collect and why
| When | What | Why, and on what basis |
|---|---|---|
| Waiting list | First and last name, email, and optionally gender, date of birth, phone number, address, postcode, city and your main interest | To keep you informed about Bespoke Health, invite you to become a founding member, and send you printed information if we do. Based on your consent, which you can withdraw at any time. |
| Research report | First and last name, email, and optionally gender and organisation | To send you the report and occasional updates on our research. Based on your consent. |
| Studies | First and last name, email, the study you choose, and optionally gender, date of birth, phone number, city and a short motivation | To select participants and invite you for a survey or interview. Based on your consent. |
| Email and introductory calls | Your messages to us, our replies, the date and outcome of a call, and whether you would like to hear from us again | To answer your questions and follow up on your interest in membership. Based on our legitimate interest in responding to you, and on steps you ask us to take before becoming a member. |
| Our 2025 survey | If you joined the waiting list through our survey in 2025, the contact details you gave us then | To contact you about the waiting list you signed up for. Based on the consent you gave at the time. |
| Questionnaires (women, expats) | Your answers, the date and time you sent them, and, recorded automatically by our host, your IP address and browser. We do not ask for your name, email or date of birth. | To shape the service around what people actually need. We only look at the answers as a group and do not use the IP address to find out who you are. Based on your consent, which you give by sending the questionnaire. Signing up as a study participant is a separate form, so your answers stay without a name. |
| Website visits | Anonymous visitor statistics: which pages are visited, from which country and type of device | To see whether the site does its job. This uses no cookies and does not identify you. |
We do not sell your data, we do not use it for advertising, and we make no automated decisions about you. We group contacts by language, interest and where they are in the process, so that you only receive what is relevant to you.
Who helps us
We use a small number of service providers. Each processes your data only on our instructions and under a data processing agreement.
- MailerLite (Lithuania) sends our emails and holds the waiting list.
- Attio (United Kingdom) is where we keep track of contact and follow-up. By design it holds no medical information.
- Google Workspace (Ireland) runs our email and calendar, including the booking of introductory calls.
- Netlify (United States) hosts this website, keeps short-lived technical logs such as IP addresses, and receives the answers to our questionnaires.
- Plausible Analytics (Estonia) provides the anonymous visitor statistics, without cookies.
- Google Fonts supplies the typefaces on this site; your browser connects to Google to load them, which shares your IP address with Google.
- Introductory calls take place over Google Meet or Microsoft Teams. We do not record calls unless we ask you first and you agree.
- Our 2025 survey ran on Typeform (Spain).
Where a provider is based outside the European Economic Area, we rely on an adequacy decision of the European Commission (as for the United Kingdom, or the EU-US Data Privacy Framework) or on the Commission's standard contractual clauses.
How long we keep it
- Waiting list and report requests: until you unsubscribe or ask us to delete your data, and no longer than two years after our last contact with you.
- If you tell us you are not interested: we remove you from our contact systems within three months. We keep only your email address on a do-not-contact list, so that we do not write to you again.
- Questionnaires: we delete the individual answers, including the technical data, no later than twelve months after the questionnaire closes. Only the combined results remain.
- Studies: your motivation text is deleted once participants have been selected. The rest is kept until twelve months after the study ends.
- Emails and call notes: no longer than two years after our last contact, unless you become a member.
How we protect it
Access to your data is limited to the people in our team who follow up with you. Our contact system deliberately has no free-text fields for health information. The site runs entirely over an encrypted connection.
Your rights
You can ask us to show you the data we hold about you, correct it, delete it, limit its use, or send it to you or another party. You can object to our use of your data, and you can withdraw your consent at any time. Every email we send has an unsubscribe link, and a short email to healthmanager@bespokehealth.nl works just as well. We respond within one month.
If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens. We would appreciate the chance to put it right first.
Changes
We will update this statement when we open, when the companies are registered, and whenever the way we work changes. The version date at the top tells you which version you are reading.