Let's Flip

At Let's Flip, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our platform to discover and book creative workshops in Amsterdam.

1. Personal data we collect

1.1 Personal account data

When you register or use our services, we collect:

Name and contact data (name, email address, phone number).
Account credentials (username and password).
Company information (for corporate accounts).
Payment information (including bank account, BIC, IBAN, date and time of payment. Processed securely through Stripe).
Profile information and preferences.

1.2 Workshop and booking data

Workshop bookings and attendance history.
Reviews and ratings you provide.
Communication with hosts and support.
Expense claims and reimbursement data (for corporate users).

1.3 Usage data

IP address and device information.
Browser type and version.
Usage data and analytics such as visited pages and actions, contact with customer service, provided feedback, marketing interaction and other communications or interactions on the platform or with Let’s Flip.

Apart from information you provide to Let’s Flip via communications or interactions, the usage data is retrieved via cookies and similar tracking technologies. You can find more information on this in our Cookie Policy.

2. How we use your personal data

We use the collected personal data for:

Service Delivery: Processing bookings, managing your account, and facilitating workshop experiences.
Payment Processing: Processing payments securely through our payment partner Stripe.
Communication: Sending booking confirmations, updates, and customer support responses.
Marketing: Sending newsletters and promotional content.
Improvement: Analyzing usage patterns to improve our platform and services.
Legal Compliance: Complying with Dutch and EU legal obligations.
Safety: Preventing fraud and ensuring platform security.

3. Legal basis for processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

Contract performance: Processing necessary to fulfill our services to you.
Consent: Where you have given explicit consent (e.g. certain marketing communications).
Legitimate interest: For fraud prevention, providing customer service, analytics, and platform improvement. Let’s Flip uses your personal data for marketing communication such as sending newsletters and promotional offers (opt-out is always possible), unless consent therefore is required under applicable law.
Legal obligation: Compliance with Dutch tax laws and regulations.

4. With whom we share your personal data

We may share your personal data with:

4.1 Workshop Hosts

When you book a workshop, we share necessary personal data (name, contact details) with the host to facilitate your workshop experience.

4.2 Corporate Partners

For corporate accounts, we share booking data with your employer for expense management and reporting purposes.

4.3 Service providers

Stripe: Payment processing service provider (subject to Stripe's privacy policy).
Supabase: Database and authentication services provider.
Email Service: Transactional and marketing emails service provider.
Analytics: Usage analytics and platform improvement service provider.
Any other service providers or partners that provide services to Let’s Flip such as to support our platform and its functionality or enhance security of our platform, enhance customer service or hosting providers.

4.4 Other third-parties

We may disclose personal data if you’ve given your consent therefore or if this is required by law, court order, or government regulation, or to protect our rights and safety.

5. Data security

We implement appropriate security measures including:

Encryption of personal data in transit and at rest.
Secure authentication and access controls.
Regular security audits and updates.
PCI DSS compliant payment processing through Stripe.
Employee training on data protection.

However, no method of transmission over the internet is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

6. Your Privacy Rights (GDPR)

Under GDPR, you have the right to:

Access: Request a copy of the personal data we hold about you.
Rectification: Correct inaccurate or incomplete personal data we hold about you.
Erasure: Request deletion of the personal data we hold about you.
Restriction: Request limitation on processing your personal data.
Portability: Receive your personal data in a machine-readable format.
Object: Object to processing your personal data based on our legitimate interest.
Withdraw consent: Withdraw consent where we rely on your consent to process your personal data.
Right to lodge a complaint: Lodge a complaint with the relevant supervisory authority. If you live or work in the Netherlands or if an alleged infringement of the GDPR took place in the Netherlands, this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

To exercise these rights, contact us at hello@letsflip.nl

7. Cookies and tracking

We use cookies and similar technologies to enhance your experience. Types of cookies we use:

Essential Cookies: Required for platform functionality.
Performance Cookies: Help us understand how you use our platform.
Functional Cookies: Remember your preferences.
Marketing Cookies: Personalize ads and measure campaign effectiveness.

You can control cookies through your browser settings. See our Cookies Policy for more details.

8. Data retention

We will retain the personal data we collect for as long as necessary to fulfill the purposes for which Let’s Flip collected the personal data and in line with any statutory obligations for data retention. In any case we retain your personal account data, workshop and booking data and usage data for as long as your account is active or you require service for your account and [X] years after either (i) your account was deactivated (by either you or Let’s Flip) or deleted, whichever of the two happened earlier or (ii) you last needed service for your deactivated or deleted account.

We can retain certain personal data, for example communication and emails, usage data and account data, for a longer period if we have a legitimate interest in doing so, for example for business continuity, investigations related to violations of law or our terms and conditions, or in case of a legal conflict or proceeding.

After these periods, data is securely deleted or anonymized.

9. Children's privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected personal data from a child, please contact us immediately.

10. International data transfers

Your data is primarily stored within the European Union. If we transfer data outside the EU, we ensure appropriate safeguards are in place through Standard Contractual Clauses or adequacy decisions by the European Commission.

11. Third-party links

Our platform may contain links to third-party websites (e.g., host websites, social media) or services. We are not responsible for the privacy practices of these websites or services. Please review their privacy policies.

12. Changes to this privacy policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or prominent notice on our platform. Continued use after changes constitutes acceptance.

13. Contact information & data protection authority

Email: [hello@letsflip.nl]

Address: Bredeweg 38-3, 1098BS Amsterdam, The Netherlands

KvK: 98902806
BTW nummer: NL005361134B85

Dutch data protection authority

If you have concerns about how we handle your data, you have the right to lodge a complaint with:

Autoriteit Persoonsgegevens

Postbus 93374

2509 AJ Den Haag

Phone: +31 (0)70 888 8500

Website: autoriteitpersoonsgegevens.nl

Summary

We collect and use your personal data to provide workshop booking services, process payments, and improve your experience on our platform and the services offered thereon. You have full control over your data and can exercise your GDPR rights at any time.

Questions? Contact us at [hello@letsflip.nl]

Document version: 0