Privacy Policy

1. Who We Are

This privacy policy applies to Zypp B.V., registered and located at:

For any privacy-related questions, you can reach us at: privacy@zypp.io

2. What Personal Data We Collect

When you register for or use our platform, we collect the following personal data:

• Name - to identify you as a user
• Email address - to communicate with you about your account
• Company information - to manage your business account and license

We also collect anonymised website usage data via Google Analytics (such as the number of visitors to our website). This data cannot be used to identify you personally.

We do not collect payment information directly through our platform. If we conduct business with you and issue an invoice, your invoicing details are stored securely in our financial administration system, which is separate from our platform.

3. How We Use Your Data

We use your personal data solely to:

• Provide and manage our services - creating and maintaining your account and business license
• Communicate with you - regarding your account or our business relationship
• Understand website traffic - using aggregated, anonymised analytics to measure visitor numbers

We do not use your personal data for marketing, profiling, or any form of automated decision-making.

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal grounds:

• Contract (Article 6(1)(b)) - processing your name, email, and company information is necessary to provide our services to you
• Legitimate interests (Article 6(1)(f)) - measuring website traffic in an anonymised way to improve our service

5. Who We Share Your Data With

We do not sell or share your personal data with third parties for commercial purposes. To operate our service, we work with the following trusted sub-processors:

Both parties are bound by appropriate data processing agreements and, where applicable, Standard Contractual Clauses (SCCs) to ensure your data is protected.

6. Data Retention

We retain your personal data for three years after:

• Your account or user profile has been inactive, or
• Your business terminates its license or account with us

After this period, your data is securely deleted from our systems. Data held in our financial administration may be retained longer to comply with Dutch statutory requirements (typically seven years under Dutch tax law).

7. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

• Right of access - request a copy of the personal data we hold about you
• Right to rectification - ask us to correct inaccurate or incomplete data
• Right to erasure - ask us to delete your personal data ("right to be forgotten")
• Right to restriction - ask us to limit how we process your data
• Right to data portability - receive your data in a portable format
• Right to object - object to our processing of your data

To exercise any of these rights, please contact us at privacy@zypp.io. We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch data protection authority:

8. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our platform is hosted on Microsoft Azure, which maintains industry-standard security certifications.

9. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "last updated" date at the top of this page. We encourage you to review this policy periodically.

10. Contact

For any questions or concerns about this privacy policy or how we handle your data, please contact us: