Privacy Policy of Retention North BV
1. Introduction and Company Information
This Privacy Policy explains how Retention North BV (“we”, “us”, or “our”) collects, uses, discloses, stores, and protects personal data in connection with our retention-marketing activities, services, website, campaigns, communications, and related business operations.
Retention North BV is the data controller for the personal data described in this Privacy Policy, unless we inform you otherwise in a specific situation.
Company details:
- Legal name: Retention North BV
- Address: Keizersgracht 127, 1015 CJ Amsterdam, Netherlands
- Email: [email protected]
- Phone: +31 20 684 79 52
This Privacy Policy is intended to provide transparent information about our privacy practices in a manner consistent with applicable privacy and data protection laws. Where local law grants you additional rights, those rights remain unaffected.
2. Data Collection and Processing
We may collect and process the following categories of personal data, depending on your relationship with us and how you interact with our services:
- Identification and contact data: name, email address, phone number, company name, job title, mailing address, and other contact details.
- Communication data: messages, inquiries, support requests, correspondence history, and records of our interactions.
- Marketing and engagement data: subscription status, preferences, campaign responses, email open and click activity, conversion-related information, and engagement metrics.
- Technical data: IP address, browser type, device identifiers, operating system, language settings, log data, and usage data collected through our website or digital tools.
- Commercial and service data: information related to prospecting, customer relationship management, lead management, retention campaigns, and business communications.
- Consent and preference data: records of opt-ins, opt-outs, communication preferences, and consent history where required.
We may collect personal data directly from you, from your employer or organization, from public sources, from our service providers, from analytics or advertising technologies, and from business partners where permitted by law.
We process personal data only to the extent necessary for the purposes described in this Privacy Policy.
3. Purpose of Data Processing
We process personal data for the following purposes:
- to provide, manage, and improve our retention-marketing services;
- to communicate with clients, prospects, suppliers, and website visitors;
- to send marketing communications, newsletters, updates, and campaign materials where permitted;
- to personalize content, offers, and communications;
- to analyze the effectiveness of marketing campaigns and user engagement;
- to manage business relationships, inquiries, and support requests;
- to maintain internal records, administration, and reporting;
- to comply with legal obligations and respond to lawful requests;
- to detect, prevent, and investigate fraud, security incidents, and misuse;
- to establish, exercise, or defend legal claims;
- to perform website analytics, improve functionality, and ensure security.
Where required, we will not use personal data for a purpose that is incompatible with the purpose for which it was originally collected unless we have a lawful basis to do so and have informed you where necessary.
4. Legal Basis for Processing
We process personal data only where we have a valid legal basis under applicable law. Depending on the context, the legal basis may include:
- Consent: where you have given clear permission for specific processing activities, such as receiving certain marketing communications or accepting non-essential cookies, where applicable.
- Performance of a contract: where processing is necessary to enter into or perform a contract with you or your organization.
- Legal obligation: where processing is necessary to comply with a legal or regulatory obligation.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as business development, client relationship management, internal administration, security, fraud prevention, and marketing to business contacts, provided these interests are not overridden by your rights and freedoms.
Where we rely on legitimate interests, we conduct an assessment to ensure that our interests are balanced against your privacy rights.
5. Data Sharing and Third Parties
We may share personal data with third parties only where necessary and in accordance with applicable law. These third parties may include:
- Service providers: hosting providers, email delivery services, CRM platforms, analytics providers, customer support tools, payment processors, and IT/security vendors.
- Professional advisors: lawyers, accountants, auditors, insurers, and other professional consultants.
- Business partners and clients: where required to deliver our services or coordinate campaigns and business communications.
- Authorities and regulators: when disclosure is required by law, court order, or lawful request.
- Corporate transaction parties: in the event of a merger, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.
We require third parties that process personal data on our behalf to implement appropriate confidentiality and security measures and to process personal data only according to our instructions and applicable law.
6. Data Transfer to Third Countries
In some cases, personal data may be transferred to or accessed from countries outside the European Economic Area (EEA) or outside the country in which the data was originally collected. This may occur when we use international service providers or when recipients of data operate globally.
Where such transfers take place, we take appropriate steps to ensure that personal data receives an adequate level of protection. These measures may include:
- transfers to countries recognized as providing an adequate level of protection;
- standard contractual clauses or equivalent contractual safeguards;
- additional technical and organizational measures where necessary;
- assessment of the transfer context and recipient safeguards.
You may contact us for more information about the safeguards applied to international transfers, subject to any legal restrictions.
7. Storage Duration
We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, reporting, and operational requirements.
The retention period depends on factors such as:
- the nature of the personal data;
- the purpose of processing;
- whether a contractual or business relationship exists;
- applicable legal retention obligations;
- the need to resolve disputes, enforce agreements, or establish legal claims.
When personal data is no longer required, we will delete, anonymize, or securely archive it in accordance with applicable law and our retention practices.
8. User Rights
Subject to applicable law, you may have the following rights regarding your personal data:
- Access: to request confirmation of whether we process your personal data and to obtain a copy of that data.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of your personal data in certain circumstances.
- Restriction: to request limitation of processing in certain cases.
- Data portability: to receive certain personal data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller.
- Objection: to object to processing based on legitimate interests and, where applicable, to object to direct marketing at any time.
Please note that these rights are not absolute. In some cases, we may continue processing where permitted or required by law, or where processing is necessary for legal claims, compliance, or other legitimate reasons.
To exercise your rights, please contact us using the details in Section 12. We may need to verify your identity before responding to your request.
9. Withdrawal of Consent
Where our processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent, we may no longer be able to provide certain services, communications, or features that depend on that consent. Where applicable, you can also unsubscribe from marketing communications by using the unsubscribe link in our emails or by contacting us directly.
10. Right to Complain
If you believe that our processing of your personal data infringes applicable law, you have the right to lodge a complaint with a competent supervisory authority. If you are located in the Netherlands, this may include the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
We encourage you to contact us first so that we can try to resolve your concern directly and efficiently. However, your right to contact a supervisory authority remains unaffected.
11. Data Security
We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, destruction, alteration, disclosure, or misuse. These measures may include:
- access controls and role-based permissions;
- encryption or pseudonymization where appropriate;
- secure hosting and network protections;
- regular monitoring, backups, and logging;
- staff confidentiality obligations and security awareness practices;
- vendor due diligence and contractual security requirements.
Although we strive to protect personal data, no method of transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we maintain reasonable safeguards in line with industry practices and applicable law.
12. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our processing of personal data, please contact:
- Retention North BV
- Address: Keizersgracht 127, 1015 CJ Amsterdam, Netherlands
- Email: [email protected]
- Phone: +31 20 684 79 52
Please include sufficient detail in your request so that we can assess and respond appropriately.
13. Changes to Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, technologies, or business operations. Any updated version will be effective when posted on our website or otherwise made available, unless a different effective date is stated.
Where changes are material, we may provide additional notice through our website, email, or other appropriate channels. We encourage you to review this Privacy Policy periodically to stay informed about how Retention North BV processes personal data.