Privacy policy

Last updated: 23 October 2026

Sbuilder V.O.F. (“SBuilder”) values your privacy. In this statement we explain which personal data we process when you use https://sbuilder.nl, for what purpose, and what rights you have under the General Data Protection Regulation (GDPR). This is a translation; in case of differences the Dutch version prevails.

1. Controller

The controller for your data is:
Sbuilder V.O.F.
Verlaatseweg 22, 8331 PD Steenwijk, the Netherlands
Chamber of Commerce (KvK): 97960535 · VAT: NL868304682B01
Email: info@sbuilder.nl

2. What data do we process?

  • Contact details: name, email address, phone number, company name (with a contact, quote or demo request).
  • Customer data: order, invoice and project details; payment status; communication history.
  • Account data: email address, hashed password, 2FA tokens (when using the client portal).
  • Technical data: IP address, browser type, session cookies, request logs (for security and troubleshooting).
  • Free tools (such as the website scan and the PHP2Shell check): we anonymously record which website was checked and what the outcome was, for statistics. We do not store an IP address or email address for this. We only use your email address if you provide it yourself, to send you the report and to contact you once about the outcome.
  • Marketing data: only after explicit consent via the cookie banner — opens and clicks of mailings.

3. Purpose of processing

  • Performing agreements and delivering services.
  • Customer contact, after-sales and invoicing.
  • Security against misuse and fraud prevention.
  • Statutory administrative obligations (tax retention period).
  • Marketing and newsletters, only with your explicit consent.

4. Legal basis

We process your data on the basis of: (a) performance of the agreement, (b) legal obligation, (c) legitimate interest in security, and (d) your consent for optional cookies and marketing communication.

5. Retention period

We keep order and invoicing data for at least 7 years in line with the statutory tax retention obligation. Account data is kept for as long as your account is active. On request we delete non-mandatory data sooner.

6. Sharing data with third parties

We never sell your data to third parties. Data is shared with:

  • Our hosting provider (within the EU) to deliver the service.
  • Payment provider Mollie to process payments.
  • Mailing service (SMTP) for transactional email.
  • Authorities, if we are legally required to do so.

7. Cookies

We use functional cookies (session, security, language) that are necessary for the website to work. Analytics and marketing cookies are only placed after your explicit consent via the cookie banner. See also our cookie policy.

8. Your rights

Under the GDPR you have the right to:

  • Access your personal data.
  • Rectification or correction of incorrect data.
  • Erasure (“right to be forgotten”), insofar as the statutory retention obligation allows.
  • Restriction of processing and objection.
  • Data portability and withdrawal of consent.

You can exercise these rights by sending a request to info@sbuilder.nl. We respond within 30 days.

9. Security

We take appropriate technical and organisational measures, including TLS encryption, hashed passwords, 2FA on accounts, limited access to production data and periodic backups.

10. Filing a complaint

Do you disagree with how we process your data? You can always file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.

11. Changes

This privacy policy may be amended. Material changes will be communicated in advance by email or via the website.