Version: October 2025
FlexCatch B.V. (“FlexCatch”, “we”, “us”) respects your privacy and processes personal data only to operate our marketplace and comply with applicable laws.
1. Controller
FlexCatch located: Amsterdam, The Netherlands
KvK 72601418 | info@flexcatch.nl
FlexCatch acts as an independent controller for Platform data (user accounts, communication, payments through PSPs).
Each Seller acts as an independent controller for its own Buyer data related to orders and delivery.
2. Data We Collect
We collect only what is necessary for basic platform use:
-
Account data: name, email, password (hashed), and optional profile info.
-
Order data: limited transaction reference, timestamps, and order metadata (no payment card details).
-
Communications: messages exchanged via the Platform for support or disputes.
-
Technical data: IP address, browser type, device info (for security and analytics).
-
Marketing (optional): name and email when you subscribe to newsletters.
We do not collect sensitive data unless you provide it voluntarily in messages.
3. Purpose & Legal Bases
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Provide and secure your account | Contract (Art. 6 (1)(b)) |
| Facilitate orders and payments | Contract / Legitimate interest |
| Communication & support | Legitimate interest |
| Fraud prevention, abuse detection | Legitimate interest |
| Newsletter (optional) | Consent |
| Legal compliance (tax, security) | Legal obligation |
4. Sharing of Data
We share data only when strictly necessary:
-
With Sellers: to complete your order (e.g. name, contact, delivery details).
-
With Payment Service Providers: for processing transactions.
-
With IT/hosting providers: under data-processing agreements ensuring GDPR compliance.
-
With authorities: only if legally required (court order, law enforcement).
We do not sell or trade your personal data.
5. International Transfers
If any data is transferred outside the EEA, we rely on:
-
an adequacy decision (e.g. EU–US Data Privacy Framework), or
-
Standard Contractual Clauses approved by the European Commission.
6. Retention
We keep data only as long as needed for the stated purposes:
-
Account data: while you have an account, then deleted within 30 days of closure.
-
Transaction records: up to 7 years for tax and audit compliance.
-
Communication logs: 2 years after closure for security/fraud checks.
-
Newsletter data: until you unsubscribe.
7. Your Rights
Under the GDPR you have the right to:
-
access your data,
-
correct or delete it,
-
restrict or object to processing,
-
withdraw consent (for newsletters),
-
request data portability.
To exercise your rights, email info@flexcatch.nl.
You may also lodge a complaint with the Autoriteit Persoonsgegevens (www.autoriteitpersoonsgegevens.nl).
8. Cookies & Analytics
We use essential cookies for login and security.
Analytics or marketing cookies (e.g. Google Analytics) are loaded only with your consent via our cookie banner.
You can withdraw consent at any time through your browser settings or our cookie panel.
9. Security
We use appropriate technical and organisational measures (TLS encryption, limited access, monitoring, backups) to protect your personal data.
10. Children
The Platform is not intended for anyone under 16 years of age. If we discover we hold data from a minor without valid consent, we will delete it immediately.
11. Changes
We may update this Privacy Policy periodically. The latest version will always be published on www.flexcatch.nl. Material changes will be communicated by email or on-site notice.
12. Contact
For privacy questions or data requests:
Email: info@flexcatch.nl
