Privacy Policy

1. Who we are

KVKBase is a service offered via kvkbase.nl. We provide an API and widget that allow developers and businesses to look up Dutch company data from public sources such as the Trade Register of the Chamber of Commerce (KVK).

For questions about this privacy policy, please contact us at info@kvkbase.nl.

2. What data we collect

We collect the following categories of personal data:

Account data

• Email address
• Password (stored as a cryptographic hash; the original password is not retained)

API usage data

• Lookups and search queries performed
• IP addresses from which requests are made
• Timestamp and frequency of API calls

Billing data

• Company name, address, and KVK number
• Billing contact details
• Payment details (processed via Moneybird; we do not store bank details directly)

3. How we use your data

We use your data exclusively for the following purposes:

• Account management -- Creating, maintaining, and securing your account.
• Billing -- Preparing and sending invoices and processing payments.
• Service improvement -- Analyzing anonymized API usage to improve the reliability and performance of our service.
• Abuse prevention -- Detecting and preventing misuse, fraud, or violations of our terms.

4. Cookies

KVKBase only uses functional cookies. We do not place tracking, marketing, or analytics cookies.

The only cookie we use is:

Because we only use functional cookies, a cookie banner is not required.

5. Sharing data with third parties

We never sell your data to third parties. To deliver our service, we work with the following processors:

• Moneybird -- For invoicing and accounting. Moneybird processes your company and billing data.
• Emailit -- For sending transactional emails, such as account confirmations and password resets.
• Cloudflare -- For hosting and delivering our service via Cloudflare Workers. Cloudflare may process IP addresses for security and performance purposes.

We have concluded appropriate data processing agreements with all these parties in accordance with the GDPR.

6. Retention periods

We do not retain your data longer than necessary:

• Account data -- Retained as long as your account is active, plus a maximum of 1 year after account deletion.
• API logs -- Automatically deleted after 90 days.
• Invoice data -- Retained for 7 years after the financial year in which the invoice was issued, in accordance with Dutch fiscal retention obligations.

7. Your rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access -- You can request to see what data we process about you.
• Right to rectification -- You can request correction of inaccurate data.
• Right to erasure -- You can request deletion of your data, unless we are legally required to retain it.
• Right to data portability -- You can request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to restriction -- You can request temporary restriction of the processing of your data.
• Right to object -- You can object to the processing of your data.

To exercise any of these rights, contact us at info@kvkbase.nl. We will respond to your request within 30 days. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Security

We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse:

• Passwords are stored as cryptographic hashes and cannot be reverse-engineered.
• All communication with our service is encrypted via HTTPS (TLS encryption).
• Our application runs on Cloudflare Workers, benefiting from Cloudflare's security infrastructure.
• Access to production systems is restricted and secured.

9. Changes

We reserve the right to modify this privacy policy. In case of material changes, we will notify you by email or through a notification in your dashboard. The most recent version is always available on this page.

10. Contact

Do you have questions about this privacy policy or how we handle your data? Please contact us: