Privacy Policy

JSDVF.Digital-Labs is a sole proprietorship based in the Netherlands. We provide digital products and services via jsdvf-digital-labs.com.

Contact details:
Email: info@jsdvf-digital-labs.com

We process the following personal data:

• Account: name, email address (via Clerk)
• Payments: payment data processed by Stripe. We only see payment confirmations, never your full payment details
• Contact form: name, email address, message (via Formspree)
• Usage: purchases, loyalty points (stored in Supabase)
• Technical: IP address, browser type (via server logs, not actively stored)

• Account management and authentication
• Processing and delivering orders
• Tracking loyalty points
• Responding to contact requests
• Improving our services
• Compliance with legal obligations

We do not send marketing emails without explicit consent.

• Performance of contract: to process and deliver your order
• Legitimate interest: security and fraud prevention
• Consent: for non-essential cookies (can be withdrawn via the cookie banner)
• Legal obligation: for accounting record-keeping requirements

We use the following external services that process data on our behalf:

We never sell or share your data with third parties for commercial purposes.

We use the following cookies:

• Essential: authentication cookies (Clerk), required for login, cannot be declined
• Functional: session and payment cookies (Stripe), required for payment processing
• No tracking or advertising cookies

Your cookie choice is stored in your browser (localStorage). You can always revise your choice by clearing your browser cache.

• Account data: as long as your account is active
• Payment data: 7 years (statutory retention requirement)
• Contact form messages: maximum 1 year
• After account deletion, data is erased within 30 days

Under the General Data Protection Regulation (GDPR) you have the following rights:

• Access: request what data we hold about you
• Rectification: have incorrect data corrected
• Erasure: have your data deleted ("right to be forgotten")
• Restriction: have processing restricted
• Portability: receive your data in a common format
• Objection: object to processing based on legitimate interest

Send a request to info@jsdvf-digital-labs.com. We respond within 30 days.

You can also file a complaint with the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl.

We take appropriate technical and organisational measures to protect your data:

• HTTPS/SSL encryption on all connections
• Passwords are never stored, authentication via Clerk
• Payment data is never stored by us, processed by Stripe (PCI-DSS compliant)
• Database access via secured service-role keys

We may update this privacy policy. Material changes will be communicated via the website or by email. The date at the top of this document indicates when the policy was last updated.