Privacy statement

1. Data controller

• Company name: DELNOYE
• Platform name: Plennie
• Website: delnoye.nl
• Email: legal@delnoye.nl
• Registered address: Spui 37a, 2511 BL The Hague, Netherlands

2. Which data do we collect?

We process the following categories of personal data:

• Account data: name, email address, username, password (hashed).
• Booking data: date and time of the appointment, chosen service, name of the Vendor, amounts.
• Contact data: phone number (optional), address details (for Vendors).
• Payment data: transaction status and invoice amounts. Payment card details are processed by our payment partner (Stripe) and not stored by us.
• Technical data: IP address, browser type, pages used, solely for security and troubleshooting.

3. Why do we process this data?

We process your data on the basis of one or more of the following grounds:

• Performance of contract: to process your booking, manage your account and carry out payments.
• Legal obligation: retention obligation for tax data (7 years) and AML obligations.
• Legitimate interest: platform security, fraud prevention and improvement of the service.
• Consent: for marketing communication, which you can withdraw at any time.

4. How long do we keep your data?

• Account data: as long as your account is active. After deletion, up to 30 days for recovery.
• Booking and invoice data: 7 years due to the tax retention obligation.
• Support communication: up to 2 years after the last contact.
• Log files: up to 12 months.

5. With whom do we share your data?

We share your data only with parties needed to provide our service, and always under a data processing agreement:

• Stripe: for processing payments.
• Resend: for sending transactional emails.
• MongoDB Atlas: for storing your data within the EU.
• Vendor: when you place a booking, Plennie shares your name, email, phone number and booking data with the relevant service provider.

We never sell your data to third parties and do not use it for advertising targeting outside the platform.

6. Transfer outside the EU

Our primary infrastructure is located in the EU. If data is unexpectedly processed outside the EU (e.g. by sub-processors of Stripe), this happens solely on the basis of standard contractual clauses (SCCs) in accordance with the GDPR.

7. Your rights

You have the right to:

• Access, correct or delete your data.
• Object to processing.
• Withdraw your consent for marketing at any time.
• Receive your data in a structured format (data portability).
• Lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

To exercise these rights, send an email to legal@delnoye.nl. We respond within 30 days.

8. Security

We take appropriate technical and organisational measures to protect your data: encrypted connections (HTTPS), hashed passwords, restricted access to production systems and periodic security audits.

9. Cookies

Plennie uses functional cookies needed to run the service (e.g. staying logged in). We do not place tracking cookies for third-party advertising. You can always delete cookies via your browser settings.

10. Changes to this statement

We may amend this statement from time to time. The most current version is always available on this page. For significant changes we will inform you by email or via the platform.