Privacy Policy

1. Who we are

Benefitly NL is a company registered in the Netherlands with KvK number 42031175. We help expats navigate Dutch administration, registrations, benefits and tax-related paperwork. Contact: info@benefitly.nl

2. Data we collect

• Name, email, phone
• Date of birth and nationality
• BSN and IBAN, where required for a service, protected with application-level AES-256-GCM encryption in the client portal
• Documents needed to handle your case, stored in private, non-public storage
• Payment data via Stripe (no card details stored)
• Portal login, consent, case status and audit/activity records

3. How we use your data

To deliver your service, submit applications to Dutch authorities, communicate with you, process payment, and comply with legal obligations. We never sell your data.

4. Legal basis (GDPR)

Contract performance (Art. 6(1)(b)), legal obligation (Art. 6(1)(c)), legitimate interest for fraud prevention and service security (Art. 6(1)(f)), and explicit consent or legal necessity where special-category or highly sensitive data is required. BSN is processed only when necessary for the requested Dutch administrative, benefit or tax-related service.

5. Security

Portal BSN/IBAN fields are protected with application-level AES-256-GCM encryption. Documents are stored in private storage. Data is transferred over HTTPS/TLS, hosted with EU-capable processors where available, and access is restricted to authorized operators only.

6. Retention

Data is kept only as long as needed to deliver the service, handle disputes, meet accounting/tax obligations and maintain an audit trail. Financial records may be kept for up to 7 years under Dutch law. Case files and documents that are no longer needed are deleted or minimized where legally possible. You can request deletion at any time for data that is not legally required.

7. Your rights

Access, correct, delete, restrict, object, port your data or withdraw consent. Email info@benefitly.nl — we respond within 30 days. You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Processors

Stripe (payments), Supabase (database/storage), Resend (email), Vercel (hosting/analytics), Google Analytics/Tag Manager where consented, and Meta Pixel where consented. We only use processors needed to provide, secure and improve the service. Where required, processing agreements or equivalent data processing terms apply.

9. Cookies and analytics

Essential cookies are used for login, security and checkout. Analytics/marketing cookies are only used according to your cookie choices where consent is required.

10. International transfers

Some processors may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as EU Standard Contractual Clauses or equivalent mechanisms.

11. Contact

info@benefitly.nl | Benefitly NL, Netherlands