Legal

Privacy Policy

How Salesupply collects, uses, and protects your personal data. Last updated: March 2026.

1. Data Controller

Salesupply B.V. ("Salesupply", "we", "us") is the data controller for the personal data processed through this website, within the meaning of the General Data Protection Regulation (EU) 2016/679 ("GDPR").

Registered name: Salesupply B.V.
KvK number: 69807361
Statutory seat: Nijmegen, the Netherlands
Address: Kerkenbos 1047, 6546 BB Nijmegen
Privacy contact: info@salesupply.com

2. What Data We Collect

We collect the following categories of personal data:

Contact information — name, email address, phone number, company name — when you fill in a contact form, sign up for an account, or request a callback.
Usage data — pages visited, time on site, referral source, browser type, device type — collected via cookies and analytics tools.
Communication data — the content of messages you send us via forms or email.
Account data — login credentials and preferences when you create an account on our SaaS platform.

We do not knowingly collect personal data from individuals under the age of 16. If you believe we have inadvertently collected such data, please contact us at info@salesupply.com and we will promptly delete it.

3. Why We Process Your Data

We process personal data for the following purposes:

To respond to inquiries — when you contact us or request a call, we use your data to respond. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
To provide our services — when you sign up for Salesupply, we process your data to deliver the services. Legal basis: contract performance (Art. 6(1)(b) GDPR).
To improve our website — we use analytics data to understand how visitors use our site and improve the experience. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
To send relevant updates — if you opt in, we may send you operational insights or service updates. Legal basis: consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time.

4. Cookies

This website uses cookies for essential functionality and analytics. We use:

Essential cookies — required for the website to function (session management, security). These are placed without consent as they are strictly necessary.
Analytics cookies — to understand how visitors interact with the site. We use privacy-friendly analytics that do not track individuals across websites. Placed only with your consent.
Marketing cookies — only placed with your explicit consent. Used for remarketing and measuring advertising effectiveness.

You can manage your cookie preferences at any time using the cookie banner on this website. You may also disable cookies through your browser settings, though this may affect website functionality.

5. Third Parties & Data Sharing

We do not sell your personal data. We share data only with:

Service providers — who process data on our behalf under Data Processing Agreements (DPAs):

Cloudflare, Inc. — website hosting and security (EU/US, certified under the EU-US Data Privacy Framework)
HubSpot, Inc. — CRM and marketing automation (EU data centre, certified under the EU-US Data Privacy Framework)
Privacy-friendly analytics — website usage analytics, no cross-site tracking (EU-based processing)

Legal obligations — when required by law, regulation, or legal proceedings.

Where personal data is transferred outside the EU/EEA, we rely on the EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) as approved by the European Commission, to ensure an adequate level of data protection.

6. Data Retention

We retain personal data only as long as necessary for the purpose it was collected:

• Contact form submissions: 2 years after last contact.
• Client data: duration of the contract plus 7 years (Dutch legal retention obligation).
• Analytics data: anonymized after 26 months.
• Account data: retained for the duration of the account, deleted within 30 days of account closure (unless legal retention obligations apply).

7. Your Rights

Under the GDPR, you have the right to:

Access your personal data — request a copy of what we hold (Art. 15 GDPR).
Rectify inaccurate data — ask us to correct or complete your data (Art. 16 GDPR).
Erase your data — request deletion, also known as the "right to be forgotten" (Art. 17 GDPR).
Restrict processing — ask us to limit how we use your data (Art. 18 GDPR).
Port your data — receive your data in a structured, machine-readable format (Art. 20 GDPR).
Object to processing — opt out of processing based on legitimate interest (Art. 21 GDPR).
Withdraw consent — at any time, without affecting the lawfulness of prior processing (Art. 7(3) GDPR).

To exercise any of these rights, contact us at info@salesupply.com. We will respond within 30 days. If your request is complex, we may extend this period by an additional 60 days, in which case we will notify you.

8. Data Security

We implement appropriate technical and organisational measures to protect your data in accordance with Art. 32 GDPR. These include encryption in transit (TLS 1.2+), encryption at rest, access controls, regular security assessments, and staff training. See our Terms & Conditions (section 7) for details on our security framework.

9. Supervisory Authority

If you believe we are not handling your data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl. We encourage you to contact us first so we can try to resolve your concern.

10. Changes to This Policy

We may update this privacy policy from time to time. The current version is always available on this page with the date of the last update. Material changes will be communicated via email to registered users. Continued use of the website after changes constitutes acceptance of the updated policy.