Privacy Policy

At Let's Flip, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our Platform to discover and book creative workshops in Amsterdam.

All capitalized terms used but not defined herein have the meanings set forth in the Terms & Conditions.

1. Personal data we collect

1.1 Personal account data

When you register or use our services, we collect:

Name and contact data (name, email address, phone number).
Account credentials (username and password).
Company information (for corporate accounts).
Payment information, including:
- Payment card details (card type, last 4 digits, expiration date, country of issuance).
- Bank account information (IBAN, BIC) where applicable.
- Billing address.
- Cardholder name.
- Transaction details (amount, currency, date and time of payment, transaction status).
- Technical information for fraud prevention (IP address, device information, browser type).
All payment card and bank account details are processed securely through Mollie and are not stored on our servers. We only receive anonymized payment confirmations and transaction identifiers.
Profile preferences related to Platform settings and workshops on the Platform.
Other personal information shared by you in communicating with us, such as in response to our surveys related to our Platform and your creativity.

1.2 Workshop and booking data

Workshop bookings and attendance history.
Reviews and ratings you provide.
Communication with Hosts and support.
Expense claims and reimbursement data (for corporate users).

1.3 Usage data

IP address and device information.
Browser type and version.
Usage data and analytics such as visited pages and actions, contact with customer service, provided feedback, marketing interaction and other communications or interactions on the Platform or with Let's Flip.

Apart from information you provide to Let's Flip via communications or interactions, the usage data is retrieved via cookies and similar tracking technologies. Cookies are small text files placed on your device (computer, smartphone, or tablet) when you visit our website. Let's Flip only makes use of functional and limited analytical cookies to collect your personal data in order to have the Platform function properly and more efficiently in the future. You can find more information on this in our Cookie Policy.

2. How we use your personal data

We use the collected personal data for:

Service Delivery: Processing bookings, managing your account, and facilitating workshop experiences.
Payment Processing: Processing payments securely through our payment partner Mollie.
Communication: Sending booking confirmations, updates about the Platform, booked, attended or missed workshops, payment issues or other workshop, Platform or personal Account issues, new partners or new features on the Platform, and customer support responses.
Marketing: Sending newsletters and promotional content, including personalized offers for workshops or services offered on our Platform based on your usage patterns, about the Platform including partners, (new) features or services and workshops.
Improvement: Analyzing usage patterns to understand how people use our Platform and with this knowledge improve our Platform and services to our users' needs.
Research: Analyzing usage data and survey responses to gain insight in behaviour and effects of our services and the workshops to develop new features and ideas for the Platform and optimize and improve the Platform for our users.
Legal Compliance: Complying with Dutch and EU legal obligations such as tax obligations.
Safety: Preventing fraud and ensuring platform security.

3. Legal basis for processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

Contract performance: Processing necessary to fulfill our services to you.
Consent: Where you have given explicit consent (e.g. certain marketing communications and, if applicable, placement of tracking or marketing cookies).
Legitimate interest: For fraud prevention on our Platform, providing customer service, use analytics and usage data and profiles for platform improvement, and optimalization and personalisation of the Platform for users. Let's Flip uses your personal data for marketing communication such as sending newsletters and (personal) promotional offers (opt-out is always possible), unless consent therefore is required under applicable law. For analytics cookies (Google Analytics, Hotjar, Mixpanel), we rely on your consent as required by the ePrivacy Directive.
Legal obligation: Compliance with legal obligations to which Let's Flip is subject, such as tax obligations.

4. With whom we share your personal data

We may share your personal data with:

4.1 Workshop Hosts

When you book a workshop, we share necessary personal data (such as name, contact details) with the Host to facilitate your workshop experience and verify payments.

4.2 Corporate partners

For corporate accounts, we share booking data with your employer for expense management and reporting purposes.

4.3 Service providers

We share personal data with service providers whose services we make use of for operating our Platform:

Mollie: Payment processing service provider.
Supabase: Database and authentication services provider.
Resend Inc.: Transactional email delivery (booking confirmations, receipts).
Google LLC (Google Analytics): Usage analytics and platform improvement.
Hotjar Ltd.: Session recordings and heatmaps for usability improvement.
Mixpanel Inc.: Product analytics and event tracking.
Mailchimp (Intuit Inc.): Marketing email and newsletter delivery.
Any other service providers or partners that provide services to Let's Flip such as to support our Platform and its functionality or enhance security of our Platform, enhance customer service or hosting providers.

4.4 Other third parties

We may disclose personal data if you've given your consent therefore or if this is required by law, court order, or government regulation, or to protect our rights and safety. In the event of a merger, acquisition, or sale of all or part of Let's Flip, your personal data may be transferred to the new owner(s).

5. Data security

We implement appropriate security measures including:

Encryption of personal data in transit and at rest.
Secure authentication and access controls.
Regular security audits and updates.
PCI DSS compliant payment processing through Mollie.
Employee training on data protection.

However, no method of transmission over the internet is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

6. Your privacy rights (GDPR)

Under GDPR, you have the right to:

Access: Request a copy of the personal data we hold about you.
Rectification: Correct inaccurate or incomplete personal data we hold about you.
Erasure: Request deletion of the personal data we hold about you.
Restriction: Request limitation on processing your personal data.
Portability: Receive your personal data in a machine-readable format.
Object: Object to processing your personal data based on our legitimate interest.
Withdraw consent: Withdraw consent where we rely on your consent to process your personal data.
Right to lodge a complaint: Lodge a complaint with the relevant supervisory authority. If you live or work in the Netherlands or if an alleged infringement of the GDPR took place in the Netherlands, this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

To exercise these rights, contact us at hello@letsflip.nl

7. Cookies and tracking

We use cookies and similar technologies to enhance your experience. Cookies are small text files placed on your device (computer, smartphone, or tablet) when you visit our website. These small files allow us to store certain pieces of information each time you visit or use our Platform. Let's Flip only makes use of functional and limited analytical cookies to collect your personal data in order to have the Platform function properly and more efficiently in the future. You can find more information on this in our Cookie Policy.

Types of cookies we use:

Essential Cookies: Required for platform functionality.
Performance Cookies: Help us understand how you use our Platform.
Functional Cookies: Remember your preferences.
Marketing Cookies: Personalize ads and measure campaign effectiveness.

You can control cookies through your browser settings where you can block, delete or disable these technologies. It may be possible that you can't make use of certain features, services, applications, tools or conveniences if you adjust your cookie settings. See our Cookie Policy for more details.

8. Data retention

We will retain the personal data we collect for as long as necessary to fulfill the purposes for which Let's Flip collected the personal data and in line with any statutory obligations for data retention. In any case we retain your personal Account data, workshop and booking data and usage data for as long as your Account is active.

Your Account will in any case be deactivated by Let's Flip if no bookings have been made for more than a year. After you or Let's Flip deactivates your Account, it will remain archived for service message purposes, possible investigations, complaints or other safety, security or integrity reasons, to protect our own rights, or to be able to easily re-activate your account should you wish to use our services again in the future. Your account will be kept in archive (if not re-activated) for as long as necessary for the aforementioned purposes but in any case 2 years after your Account was deactivated (by either you or Let's Flip) or 2 years after you last needed service for your deactivated Account.

We can retain certain personal data, for example communication and emails, usage data and Account data, for a longer period if we have a legitimate interest in doing so, for example for business continuity, investigations related to violations of law or our terms and conditions, or in case of a legal conflict or proceeding.

After these periods, data is securely deleted or anonymized.

9. Children's privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected personal data from a child, please contact us immediately.

10. International data transfers

Your data is primarily stored within the European Union. If we transfer data outside the EU, we ensure appropriate safeguards are in place through Standard Contractual Clauses or adequacy decisions by the European Commission.

11. Third-party links

Our Platform may contain links to third-party websites (e.g., Host websites, social media) or services. We are not responsible for the privacy practices of these websites or services. Please review their privacy policies.

12. Changes to this privacy policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or prominent notice on our Platform.