Privacy Policy

This Privacy Policy explains how CrimsonDirector B.V. collects, uses, and protects your personal information when you use our marketplace platform and services. We are committed to protecting your privacy and ensuring transparency in our data practices.

Last Updated: 15 January 2026

Data Controller Information

CrimsonDirector B.V., registered in the Netherlands (Registration Number: NL72938416), acts as the data controller for the personal data we collect and process. Our registered address is Kerkstraat 174, 1358 KU Almere, Flevoland, Netherlands.

Data We Collect

The data collection we undertake depends on how you interact with our marketplace platform. We collect information that you provide directly to us, information we obtain automatically when you use our services, and information from third-party sources where permitted by law.

Information You Provide

• Account registration details (name, email address, phone number)
• Business information for seller accounts (company details, VAT numbers, bank details)
• Contact form submissions and customer service communications
• Transaction information and payment details
• Product listings, descriptions, and marketplace content
• Reviews, ratings, and user-generated content

Information Collected Automatically

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, click patterns)
• Location information (general geographic location based on IP)
• Cookies and similar tracking technologies (see our Cookie Policy)

How We Use Your Information

We use of your data is based on legitimate interests, contractual necessity, legal compliance, and your consent where required. The information we collect serves multiple purposes essential to operating our marketplace platform effectively.

Service Provision

• Creating and managing your marketplace account
• Processing transactions and facilitating payments
• Providing customer support and responding to enquiries
• Enabling communication between buyers and sellers
• Maintaining platform security and preventing fraud

Platform Improvement

• Analysing usage patterns to improve our services
• Developing new features and functionality
• Personalising your marketplace experience
• Conducting research and analytics for business insights

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, their purposes, and how to control them, please refer to our comprehensive Cookie Policy.

Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your information in the following circumstances:

• With other marketplace users as necessary for transactions (e.g., shipping information)
• With service providers who assist in operating our platform (payment processors, hosting services)
• With legal authorities when required by law or to protect our rights
• In connection with business transfers or corporate restructuring
• With your explicit consent for specific purposes

Data Retention

Data retention periods vary depending on the type of information and the purpose for which it was collected. We retain personal data for as long as necessary to fulfil the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements.

• Account information: Retained whilst your account is active and for 7 years after closure for legal compliance
• Transaction data: Retained for 7 years for accounting and tax purposes
• Marketing data: Retained until you withdraw consent or for 3 years of inactivity
• Website analytics: Typically retained for 26 months in accordance with standard practices

Your Rights

Under the General Data Protection Regulation (GDPR) and other applicable data protection laws, you have several rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

International Data Transfers

As a European-based company, we primarily process data within the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions by the European Commission or standard contractual clauses approved by the European Commission.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, regular security assessments, and staff training on data protection principles.

Children's Privacy

Our marketplace platform is not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. For significant changes, we may provide additional notice through email or platform notifications.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us using the following contact information:

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data in accordance with applicable data protection laws.

Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Contract: Processing necessary for the performance of our marketplace services
• Legitimate Interest: For business operations, fraud prevention, and service improvement
• Legal Obligation: To comply with applicable laws and regulations
• Consent: For marketing communications and optional services where consent is required