Privacy Policy

1. Who we are

Benefitly NL is a registered company in the Netherlands. We help expats navigate Dutch admin. Contact: info@benefitly.nl

2. Data we collect

• Name, email, phone
• Date of birth and nationality
• BSN encrypted at rest (AES-256-GCM)
• IBAN encrypted at rest (AES-256-GCM)
• Payment data via Stripe (no card details stored)

3. How we use your data

To deliver your service, submit applications to Dutch authorities, communicate with you, process payment, and comply with legal obligations. We never sell your data.

4. Legal basis (GDPR)

Contract performance (Art. 6(1)(b)), legal obligation (Art. 6(1)(c)), and explicit consent (Art. 9(2)(a)) for sensitive data like BSN.

5. Security

AES-256-GCM encryption for BSN and IBAN. Supabase EU region. TLS 1.3 in transit. Access restricted to authorized operators.

6. Retention

Data kept as long as needed and per Dutch law (7 years for financial records). Request deletion at any time for non-legally-required data.

7. Your rights

Access, correct, delete, restrict, port or withdraw consent. Email info@benefitly.nl — we respond within 30 days.

8. Processors

Stripe (payments), Supabase EU (database), Resend EU (email), Vercel EU (hosting).

9. Contact

info@benefitly.nl | Benefitly NL, Netherlands