Privacy statement

What data we process

• Account data: name, company name, KvK number, email address, phone number, business address.
• Verification data: the outcome of the KvK check and, if you upload it, your proof of insurance.
• Usage data: your service area and services, purchased leads, follow-up statuses, credit balance and transactions.
• Payment data: payments run through Stripe; we never store bank or card details ourselves.
• Customer data in leads: the requester's name, address and contact details, visible to you after purchase.

Purposes and legal bases

• Performance of the contract: your account, verification, delivering leads and handling payments and refunds.
• Legal obligation: invoices and the credit ledger are kept for the statutory fiscal period (7 years).
• Legitimate interest: quality control of requests, fraud prevention and platform security.
• Consent: only for optional communication; you can withdraw it at any time.

Automated matching and pricing

Leads are matched automatically to your service area and services; the price per lead follows from a scoring model on characteristics of the request (job type, region, size). This processing has no legal effects on you as a person; the main parameters are explained in the terms and conditions.

After purchasing a lead, you become the controller

When you buy a lead you receive the requester's personal data. From that moment you are the controller for that data. You may use it solely to follow up this job request, not for your own marketing, and you delete it once the request is completed or dropped.

Retention periods

• Customer data in leads: up to 24 months after the request is closed, then anonymised.
• Account data: for as long as your account exists, then until statutory periods expire.
• Invoices and credit bookings: 7 years (fiscal retention obligation).
• Evidence around refund requests: for the duration of the dispute window.

Who we share data with

• Stripe (payments, iDEAL).
• KvK (verification of your registration).
• Plausible Analytics (cookieless web statistics).
• Our email provider for transactional messages (confirmations, payment receipts).
• Hosting within the EU. We never sell data to third parties.

Security

Requesters' contact details are stored encrypted and are only decrypted and shown after a lead is purchased. Access is restricted and logged.

Your rights

You have the right to access, rectification, erasure, restriction, objection and data portability. Email privacy@klusinbox.nl; we respond within 30 days. Complaints can be filed with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).