Privacy policy

Who are we?

Bundl is a Dutch collective purchasing platform: we combine consumer demand to achieve better offers together. Bundl B.V. (Provinciepassage 196, 2408 EV Alphen aan den Rijn, Chamber of Commerce number 98150731) is the controller of your personal data. For privacy questions, contact privacy@bundl.nl.

What data do we process?

When you sign up, we only ask for your first name and email address. If you voluntarily provide additional details, such as your postcode, usage or current supplier, we process those too. If you register as a supplier, we process your company name, Dutch Chamber of Commerce number and business email address.

What do we use your data for?

• To register you for your chosen group and keep you updated on progress (performance of the agreement).

• To present a suitable offer once suppliers have submitted their bids (performance of the agreement).

• To send a confirmation or welcome email after registration (legitimate interest).

• To measure whether our Facebook and Instagram advertisements work, and only if you consent through the cookie notice (consent). We also record which advertisement brought you to us.

We do not send newsletters without separate consent and never sell data to third parties.

With your separate permission for our own measurement, we identify whether you arrived from Google. If you register during that visit, we save google/organic as the source of your signup unless advertising attribution already exists. We do not store search terms or a full referring URL for this purpose, or send this measurement to Google. The retention period for your signup also applies to this source information. You can withdraw permission via Cookie settings or ask us to delete this information.

Who do we share your data with?

Your data is stored in our own database with our Dutch hosting provider, Hostnet. We use Brevo (EU) to send email. Only once a specific offer is available and you choose it do we share the necessary data with that supplier, never before.

If you consent to the Meta pixel, Meta Platforms Ireland (Facebook and Instagram) receives information about your visit and, after registration, a hashed version of your email address and first name, together with your IP address. Meta uses this to measure and improve our advertising. Further details are in our cookie policy and Meta’s privacy policy.

How do we protect your data?

• Encrypted connections (HTTPS/TLS) for all data transfers.

• Access to data is restricted and password-protected.

• Data processing agreements with parties that process data on our behalf.

How long do we keep your data?

We retain your data while your participation is active and for up to one year afterwards, unless a longer period is legally required. We then delete or anonymise it.

Your rights

You have rights of access, correction, objection, restriction, erasure and data portability. Email privacy@bundl.nl to exercise them. If you are dissatisfied with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority.

Changes

Bundl may update this privacy policy. The latest version is always available on this page.