Privacy policy
Your privacy matters to us - here you can learn how we collect, use and protect your personal data.
Last updated: April 30, 2026
Noonla ("we,” "us,” or "our”) operates noonla.com. This privacy policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and the Dutch Personal Data Protection Act (AVG).
Contact information
Noonla
Van Heemstraweg 123
6651 KH, Druten
The Netherlands
info@noonla.com
+31 85 0703472
What personal data we collect
When you create an account, complete a consultation, or use our contact form, we collect:
- Your name and account details
- Your email address
- Consultation data, including your answers to health questionnaires
- Images you upload for analysis during a consultation
- The message content you submit via our contact form
We also automatically collect technical information through Google Analytics 4, including your IP address and browsing behavior, but only if you accept cookies through our cookie consent banner.
How we collect your data
Personal data is collected when you voluntarily create an account, complete a consultation (including uploading images and answering questions), or submit information through our contact form. Analytics data is collected through Google Analytics 4, which is managed by Cloudflare Zaraz and only loads after you provide cookie consent.
Purpose and legal basis for processing
We process your account and consultation data to provide you with personalized insights based on Traditional Chinese Medicine principles. We process your contact form data to respond to your inquiries and provide customer support. The legal basis for this processing is your consent and our legitimate interest in communicating with potential and existing clients.
We use Google Analytics 4 to analyze website traffic and improve user experience. This processing is based on your explicit consent through our cookie banner.
AI and service improvement
To continually improve our service and provide better, more accurate insights for everyone, we may use the data collected during your consultations (such as your answers to questionnaires and uploaded images) to train and refine our Artificial Intelligence (AI) models.
When your data is used for this purpose, we take strict measures to anonymize it, ensuring that it cannot be linked back to you personally. Your privacy remains our priority while we work to advance the capabilities of our tool.
Data storage and security
We take the security of your data seriously. Your data is stored as follows:
- Images uploaded during consultations are securely stored on Cloudflare R2.
- All other account, consultation, and contact data is stored securely on our own servers located in Germany.
- Data is protected through appropriate technical and organizational security measures.
- Contact form submissions may be forwarded to our secure Infomaniak email environment for processing.
Data retention
We retain your data only for as long as you keep your account active or until you request its deletion. You are in control of your data:
- If you delete an archived consultation, all data and images associated with that specific consultation are permanently deleted.
- If you delete your entire account, all of your personal data, consultations, and uploaded images are permanently deleted.
- Otherwise, your data is kept indefinitely until you delete it yourself or submit a formal deletion request to us.
Contact form data is retained for the duration of our business relationship plus any legally required retention period.
Data sharing
We do not sell your personal data to anyone. We only share necessary information with trusted service providers who help us operate our platform securely. These include:
- Cloudflare R2 (for secure image hosting)
- Google Analytics 4 (when you consent to cookies) for website analytics purposes
- Cloudflare Zaraz for cookie consent management
Your rights under GDPR
Under the GDPR and Dutch AVG, you have the right to:
- Access your personal data
- Rectify inaccurate personal data
- Request erasure of your personal data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
To exercise any of these rights, please contact us at info@noonla.com.
Cookies
We use Google Analytics 4 cookies to analyze website usage. These cookies are only placed on your device after you provide explicit consent through our Cloudflare Zaraz cookie banner. You can withdraw your consent at any time by adjusting your cookie preferences. For more detailed information on how we use cookies, please see our cookie policy.
Changes to this privacy policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.
Complaints
If you have any complaints about how we handle your personal data, please contact us first so we can try to resolve the issue. If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Contact information
If you have questions about this privacy policy or your personal data, please contact us:
Noonla
Van Heemstraweg 123
6651 KH, Druten
The Netherlands
