Privacy Policy

1. Introduction

Constrive B.V. ("Constrive", "we", "us", or "our"), located at Schillingweg 50, 2153 PL Nieuw-Vennep, the Netherlands, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website constrive.nl (the "Website") or use our services.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable Dutch and European data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

3. What Personal Data We Collect

We may collect the following categories of personal data:

3.1 Data you provide to us

• Contact information: first name, last name, email address, phone number
• Company information: company name, brandstore or marketplace URL, annual revenue, marketplace revenue share
• Communication data: messages and other information you provide through our contact or application forms

3.2 Data collected automatically

• Technical data: IP address, browser type and version, operating system, device type
• Usage data: pages visited, time spent on pages, referral source, navigation paths
• Cookie data: see our Cookie Policy for details

4. How We Use Your Data

We use your personal data for the following purposes:

• To respond to inquiries: processing and responding to your contact form submissions and partnership applications
• To provide our services: evaluating potential partnerships, managing business relationships, and delivering our BrandBuilders program
• To improve our website: analyzing how visitors use our website to improve functionality and user experience
• To comply with legal obligations: meeting our legal, regulatory, and compliance requirements
• To communicate with you: sending relevant updates about our services when you have given consent

5. Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR:

• Consent (Art. 6(1)(a) GDPR): when you submit a contact or application form, or accept non-essential cookies
• Legitimate interest (Art. 6(1)(f) GDPR): to improve our website and services, and to manage business relationships
• Contractual necessity (Art. 6(1)(b) GDPR): when processing is necessary for partnership agreements or pre-contractual measures
• Legal obligation (Art. 6(1)(c) GDPR): when we are required to process data by law

6. Data Sharing and Third Parties

We may share your personal data with the following third parties:

• Email service providers: to process and deliver form submissions (e.g., Resend)
• Hosting providers: to host and serve our website (e.g., Vercel)
• Analytics providers: to analyze website usage (with your consent)
• Professional advisors: accountants, lawyers, and auditors as necessary

We do not sell your personal data to third parties. We ensure that any third parties with whom we share data provide adequate safeguards for your personal data.

7. International Data Transfers

Some of our third-party service providers may be located outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your personal data.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specifically:

• Contact form submissions: retained for up to 2 years after last communication
• Application data: retained for up to 2 years after the application process concludes
• Website analytics data: retained for up to 26 months
• Financial and contractual records: retained for 7 years as required by Dutch tax law

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: request a copy of your personal data
• Right to rectification: request correction of inaccurate or incomplete data
• Right to erasure: request deletion of your personal data ("right to be forgotten")
• Right to restriction: request limitation of processing of your personal data
• Right to data portability: receive your data in a structured, commonly used format
• Right to object: object to processing based on legitimate interests
• Right to withdraw consent: withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at info@constrive.nl. We will respond to your request within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (SSL/TLS), secure hosting infrastructure, and access controls.

11. Cookies

Our website uses cookies and similar technologies. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

13. Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: