Privacy Policy

Liftly B.V. (“Liftly”, “we”, “us” or “our”) respects your privacy. This Privacy Policy explains how we handle personal data when you visit liftly.co, contact us or use our services, and describes your rights under the General Data Protection Regulation (“GDPR”).

1. Who we are

Liftly B.V. is responsible for the processing of personal data described in this policy and acts as the data controller.

Company: Liftly B.V.
Chamber of Commerce number: 42193648
Website: https://liftly.co
Email: hello@liftly.co

For privacy questions or requests concerning your personal data, contact hello@liftly.co.

2. Personal data we process

The personal data we process depends on how you interact with us. It may include:

• Contact details: your name, email address, telephone number and business details when you provide them.
• Service information: information you submit when requesting or using our services, including relevant instructions, preferences and content.
• Account information: login information and account settings when you create or use an account.
• Transaction information: billing details, purchase records and payment status when you purchase services.
• Communications: enquiries, support requests, feedback and other correspondence.
• Technical information: IP address, browser type, device information, access times and information needed to diagnose errors or investigate security incidents.
• Preferences: your communication preferences and records of consent where relevant.

We collect personal data directly from you, through your use of our website and services, and from service providers involved in fulfilling your requests, such as payment providers confirming a transaction.

Where a particular feature involves additional data or information obtained from another source, we provide further information when required.

3. Why we process personal data

We process personal data for specific purposes and on an appropriate legal basis.

PurposeLegal basisResponding to enquiries about services you wish to purchaseTaking steps at your request before entering into a contractProviding services, administering accounts and handling related supportPerformance of a contractProcessing payments and administering purchasesPerformance of a contractKeeping records required by tax, accounting or other applicable legislationCompliance with a legal obligationAnswering general correspondence and handling feedbackOur legitimate interest in communicating with people who contact usProtecting our website, services and users against fraud, misuse and security incidentsOur legitimate interest in maintaining secure and reliable operationsEstablishing, exercising or defending legal claimsOur legitimate interest in protecting our legal rightsSending optional marketing communicationsConsent, or an applicable existing-customer exception where permitted by lawUsing cookies or similar technologies that require permissionConsent

Where we rely on legitimate interests, we assess the necessity of the processing and balance our interests against your rights and freedoms.

We do not treat your acceptance of this Privacy Policy as consent to optional processing.

4. Information needed to provide services

Where information is necessary to provide a requested service, enter into a contract or meet a legal obligation, we indicate this when collecting it. If you do not provide the necessary information, we may be unable to fulfil your request.

Providing optional information is voluntary. You can decline optional marketing communications without affecting your ability to use our services.

5. Sharing personal data

We share personal data only where necessary for the purposes described in this policy. Depending on the service involved, recipients may include:

• Hosting, infrastructure and IT support providers.
• Providers of communication, administration and customer support tools.
• Payment providers and financial service providers.
• Accountants, legal advisers and other professional advisers.
• Public authorities where disclosure is required by law.
• Other parties where disclosure is necessary to establish, exercise or defend legal claims.

Providers processing personal data on our behalf must operate under appropriate data processing agreements and process information in accordance with our instructions.

Some recipients process information as independent controllers, including public authorities and certain payment or professional service providers. Their own privacy notices explain their processing.

6. International transfers

Where providing our services involves transferring personal data outside the European Economic Area, we ensure that an appropriate GDPR transfer mechanism applies.

This may involve a European Commission adequacy decision or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, together with supplementary measures where necessary.

You can contact hello@liftly.co for information about transfers relevant to your personal data and to request a copy of applicable safeguards, subject to necessary redactions.

7. Retention

We keep personal data only for as long as necessary for the purpose for which it was collected.

We determine retention using the following criteria:

• Enquiries and correspondence: the time needed to answer your enquiry, complete follow-up actions and resolve related issues.
• Account and service information: the duration of the service relationship and any subsequent period necessary to complete outstanding obligations or handle disputes.
• Financial and contractual records: the retention periods required by applicable tax, accounting and other legislation.
• Security and technical records: the time needed to investigate errors, detect misuse and resolve security incidents.
• Marketing information: until you unsubscribe, withdraw consent or the information is no longer needed. We may retain a minimal suppression record to respect your decision not to receive marketing.
• Consent and privacy request records: the period necessary to demonstrate compliance and document how requests were handled.

Where records are required for an identified legal claim, we retain the relevant information for as long as necessary to address that claim.

When information is no longer needed, we delete it or irreversibly anonymise it. Copies in backups expire through the applicable backup retention cycle.

8. Cookies and similar technologies

Cookies and similar technologies can support website functionality, remember preferences and provide information about website use.

Where we deploy technologies requiring consent, we request your permission before activating them and provide information about their purposes, providers and duration. You can refuse or withdraw that consent using the controls provided.

Technologies that are strictly necessary, or that qualify for an applicable legal exemption, do not require consent. Any related processing of personal data must still have an appropriate legal basis.

You can also manage cookies through your browser settings. Blocking essential cookies may affect website functionality.

9. Security

We use technical and organisational measures appropriate to the nature of the personal data and the risks involved. These measures are intended to protect information against unauthorised access, loss, alteration and disclosure.

Access to personal data is limited to people and service providers who need it to perform their duties and are subject to appropriate confidentiality obligations.

10. Your rights

Subject to the conditions and exceptions in the GDPR, you have the right to:

• Access your personal data and receive a copy.
• Correct inaccurate or incomplete information.
• Request deletion of your personal data.
• Request restriction of processing.
• Receive eligible personal data in a structured, commonly used, machine-readable format and request its transfer to another controller.
• Object to processing based on legitimate interests for reasons relating to your particular situation.
• Object at any time to direct marketing, including profiling related to that marketing.
• Withdraw consent at any time where processing relies on consent.
• Exercise applicable rights concerning decisions based solely on automated processing that produce legal or similarly significant effects, including safeguards such as human intervention and the ability to contest a decision.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, email hello@liftly.co.

We respond without undue delay and normally within one month. Where necessary because of the complexity or number of requests, we may extend this period by up to two additional months. We will explain any extension within the initial month.

If we have reasonable doubts about your identity, we may request proportionate additional information to verify it. Requests are normally free of charge, subject to the exceptions permitted by the GDPR.

11. Complaints

You can contact hello@liftly.co with any concern about our handling of personal data.

You also have the right to lodge a complaint with a competent supervisory authority, particularly in the country where you live, work or believe a data protection infringement occurred.

In the Netherlands, this is the Autoriteit Persoonsgegevens:

https://www.autoriteitpersoonsgegevens.nl

12. Changes to this policy

We may update this Privacy Policy to reflect changes to our services, processing activities or legal requirements. The latest version will be published on our website with its revision date.

Where required, we will notify you of material changes and provide information before processing personal data for a new purpose. We will obtain consent where legally required.

13. Contact

Liftly B.V.
Chamber of Commerce number: 42193648
Email: hello@liftly.co
Website: https://liftly.co

‍