At Let's Flip, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our Platform to discover and book creative workshops in Amsterdam.
All capitalized terms used but not defined herein have the meanings set forth in the Terms & Conditions.
1. Personal data we collect
1.1 Personal account data
When you register or use our services, we collect:
- Name and contact data (name, email address, phone number).
- Account credentials (username and password).
- Company information (for corporate accounts).
- Payment information, including:
- Payment card details (card type, last 4 digits, expiration date, country of issuance).
- Bank account information (IBAN, BIC) where applicable.
- Billing address.
- Cardholder name.
- Transaction details (amount, currency, date and time of payment, transaction status).
- Technical information for fraud prevention (IP address, device information, browser type).
- All payment card and bank account details are processed securely through Mollie and are not stored on our servers. We only receive anonymized payment confirmations and transaction identifiers.
- Profile preferences related to Platform settings and workshops on the Platform.
- Other personal information shared by you in communicating with us, such as in response to our surveys related to our Platform and your creativity.
1.2 Workshop and booking data
- Workshop bookings and attendance history.
- Reviews and ratings you provide.
- Communication with Hosts and support.
- Expense claims and reimbursement data (for corporate users).
1.3 Usage data
- IP address and device information.
- Browser type and version.
- Usage data and analytics such as visited pages and actions, contact with customer service, provided feedback, marketing interaction and other communications or interactions on the Platform or with Let's Flip.
Apart from information you provide to Let's Flip via communications or interactions, the usage data is retrieved via cookies and similar tracking technologies. You can find more information on this in our Cookie Policy.
2. How we use your personal data
We use the collected personal data for:
- Service Delivery: Processing bookings, managing your account, and facilitating workshop experiences.
- Payment Processing: Processing payments securely through our payment partner Mollie.
- Communication: Sending booking confirmations, updates about the Platform, booked, attended or missed workshops, payment issues or other workshop, Platform or personal Account issues, new partners or new features on the Platform, and customer support responses.
- Marketing: Sending newsletters and promotional content, including personalized offers for workshops or services offered on our Platform based on your usage patterns, about the Platform including partners, (new) features or services and workshops.
- Improvement: Analyzing usage patterns to understand how people use our Platform and with this knowledge improve our Platform and services to our users' needs.
- Research: Analyzing usage data and survey responses to gain insight in behaviour and effects of our services and the workshops to develop new features and ideas for the Platform and optimize and improve the Platform for our users.
- Legal Compliance: Complying with Dutch and EU legal obligations such as tax obligations.
- Safety: Preventing fraud and ensuring platform security.
3. Legal basis for processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your data based on:
- Contract performance: Processing necessary to fulfill our services to you.
- Consent: Where you have given explicit consent (e.g. certain marketing communications).
- Legitimate interest: For fraud prevention on our Platform, providing customer service, use analytics and usage data and profiles for platform improvement, and optimalization and personalisation of the Platform for users. Let's Flip uses your personal data for marketing communication such as sending newsletters and (personal) promotional offers (opt-out is always possible), unless consent therefore is required under applicable law.
- Legal obligation: Compliance with legal obligations to which Let's Flip is subject, such as tax obligations.
4. With whom we share your personal data
We may share your personal data with:
4.1 Workshop Hosts
When you book a workshop, we share necessary personal data (such as name, contact details) with the Host to facilitate your workshop experience and verify payments.
4.2 Corporate partners
For corporate accounts, we share booking data with your employer for expense management and reporting purposes.
4.3 Service providers
We share personal data with service providers whose services we make use of for operating our Platform:
- Mollie: Payment processing service provider.
- Supabase: Database and authentication services provider.
- Email Service: Transactional and marketing emails service provider.
- Analytics: Usage analytics and platform improvement service provider.
- Any other service providers or partners that provide services to Let's Flip such as to support our Platform and its functionality or enhance security of our Platform, enhance customer service or hosting providers.
4.4 Other third parties
We may disclose personal data if you've given your consent therefore or if this is required by law, court order, or government regulation, or to protect our rights and safety. In the event of a merger, acquisition, or sale of all or part of Let's Flip, your personal data may be transferred to the new owner(s).
5. Data security
We implement appropriate security measures including:
- Encryption of personal data in transit and at rest.
- Secure authentication and access controls.
- Regular security audits and updates.
- PCI DSS compliant payment processing through Mollie.
- Employee training on data protection.
However, no method of transmission over the internet is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.
6. Your privacy rights (GDPR)
Under GDPR, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Correct inaccurate or incomplete personal data we hold about you.
- Erasure: Request deletion of the personal data we hold about you.
- Restriction: Request limitation on processing your personal data.
- Portability: Receive your personal data in a machine-readable format.
- Object: Object to processing your personal data based on our legitimate interest.
- Withdraw consent: Withdraw consent where we rely on your consent to process your personal data.
- Right to lodge a complaint: Lodge a complaint with the relevant supervisory authority. If you live or work in the Netherlands or if an alleged infringement of the GDPR took place in the Netherlands, this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
To exercise these rights, contact us at hello@letsflip.nl
7. Cookies and tracking
We use cookies and similar technologies to enhance your experience. Types of cookies we use:
- Essential Cookies: Required for platform functionality.
- Performance Cookies: Help us understand how you use our Platform.
- Functional Cookies: Remember your preferences.
- Marketing Cookies: Personalize ads and measure campaign effectiveness.
You can control cookies through your browser settings. See our Cookie Policy for more details.
8. Data retention
We will retain the personal data we collect for as long as necessary to fulfill the purposes for which Let's Flip collected the personal data and in line with any statutory obligations for data retention. In any case we retain your personal Account data, workshop and booking data and usage data for as long as your Account is active.
Your Account will in any case be deactivated by Let's Flip if no bookings have been made for more than a year. After you or Let's Flip deactivates your Account, it will remain archived for service message purposes, possible investigations, complaints or other safety, security or integrity reasons, to protect our own rights, or to be able to easily re-activate your account should you wish to use our services again in the future. Your account will be kept in archive (if not re-activated) for as long as necessary for the aforementioned purposes.
We can retain certain personal data, for example communication and emails, usage data and Account data, for a longer period if we have a legitimate interest in doing so, for example for business continuity, investigations related to violations of law or our terms and conditions, or in case of a legal conflict or proceeding.
After these periods, data is securely deleted or anonymized.
9. Children's privacy
Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected personal data from a child, please contact us immediately.
10. International data transfers
Your data is primarily stored within the European Union. If we transfer data outside the EU, we ensure appropriate safeguards are in place through Standard Contractual Clauses or adequacy decisions by the European Commission.
11. Third-party links
Our Platform may contain links to third-party websites (e.g., Host websites, social media) or services. We are not responsible for the privacy practices of these websites or services. Please review their privacy policies.
12. Changes to this privacy policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or prominent notice on our Platform.
13. Contact information & data protection authority
Let's Flip
Email: hello@letsflip.nl
Address: Bredeweg 38-3, 1098BS Amsterdam, The Netherlands
KvK: 98902806
BTW nummer: NL005361134B85
Dutch data protection authority
If you have concerns about how we handle your data, you have the right to lodge a complaint with:
Autoriteit Persoonsgegevens
Postbus 93374
2509 AJ Den Haag
Phone: +31 (0)70 888 8500
Website: autoriteitpersoonsgegevens.nl
Summary
We collect and use your personal data to provide workshop booking services, process payments, and improve your experience on our Platform and the services offered thereon. You have full control over your data and can exercise your GDPR rights at any time.
Questions? Contact us at hello@letsflip.nl