Privacy policy

Last updated: 2026-07-20 (version 1.0)

Stocklinq processes personal data of contacts at businesses that use our B2B platform. This statement explains which data we use, why we use it and with whom we share it.

1. Contact details

Stocklinq is the data controller for the processing of personal data as set out in this statement.

Name: Stocklinq
Email for privacy questions: support@stocklinq.nl

2. Personal data we process

As a B2B platform, we generally process data about business contacts. This includes:

Account data: name, business email address, telephone number and login details.
Company data: company name, address, Chamber of Commerce number, VAT number, website and business contact details.
Application and verification: data needed to assess a business application and manage access, such as company data and approval status.
Platform data: bids, deals, messages, notification preferences, delivery and invoicing details, usage and security data such as IP address and listing views.
Content: listings, photos, product descriptions and reviews posted by Users.

3. Purposes and legal bases for processing

We process personal data only where a GDPR legal basis applies:

Performance of a contract: for the account, platform, bids, deals, communication, optional subscriptions and commissions.
Legal obligation: For our tax administration and accounting (e.g. invoicing).
Legitimate interest: for security, fraud prevention, business verification, measuring and improving our services, and protecting our rights.
Consent: for non-essential analytics and, where offered, marketing messages. You can withdraw consent at any time.

4. Sharing data with third parties

We share data only where necessary for the platform or a legal obligation:

Other Users: public company profiles show limited company information only. For a deal, Buyer and Seller may see data needed for communication, delivery and invoicing.
Service providers: Supabase for accounts, database and storage, Resend for transactional email, and Vercel for hosting and optional analytics. They process data for us or under their own role for the relevant service.
International transfers: if a provider processes data outside the EEA, we use appropriate safeguards, such as the European Commission's standard contractual clauses, where required.
Government authorities: Only when we are legally required to do so.

5. Retention period

Stocklinq retains personal data no longer than strictly necessary to achieve the purposes for which the data was collected.

Account and company data: while an account is active and afterwards only as long as needed for closure, security, disputes or a legal obligation.
Financial administration: We are legally required to retain invoice data for 7 years for the tax authorities.
Listings, bids, deals and messages: as long as needed for the platform and fulfilment of a deal; afterwards they are deleted or anonymised unless retention is needed for administration, security or a dispute.

6. Security

We take appropriate technical and organisational measures to prevent misuse, loss, unauthorised access and unwanted disclosure. Access to the platform is secured via SSL encryption and strict access controls.

7. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. Where we rely on consent, you can withdraw it at any time.

You may also lodge a complaint with the Dutch Data Protection Authority. A request does not affect data we are legally required to retain.

Send a request to support@stocklinq.nl. We generally respond within one month.

8. Cookies and analytics

We use necessary cookies for your session and security. We load Vercel Analytics only after your consent. Read more in our cookie policy and change your choice there.

9. Automated decision-making

Stocklinq does not make decisions based solely on automated processing that have legal or similarly significant effects on you.

10. Changes and contact

We may update this statement when our services or the law change. The current version is always available on this page.

2. Personal data we process

As a B2B platform, we generally process data about business contacts. This includes:

Account data: name, business email address, telephone number and login details.

Company data: company name, address, Chamber of Commerce number, VAT number, website and business contact details.

Application and verification: data needed to assess a business application and manage access, such as company data and approval status.

Platform data: bids, deals, messages, notification preferences, delivery and invoicing details, usage and security data such as IP address and listing views.

Content: listings, photos, product descriptions and reviews posted by Users.

3. Purposes and legal bases for processing

We process personal data only where a GDPR legal basis applies:

Performance of a contract: for the account, platform, bids, deals, communication, optional subscriptions and commissions.

Legal obligation: For our tax administration and accounting (e.g. invoicing).

Legitimate interest: for security, fraud prevention, business verification, measuring and improving our services, and protecting our rights.

Consent: for non-essential analytics and, where offered, marketing messages. You can withdraw consent at any time.

4. Sharing data with third parties

We share data only where necessary for the platform or a legal obligation:

Other Users: public company profiles show limited company information only. For a deal, Buyer and Seller may see data needed for communication, delivery and invoicing.

Service providers: Supabase for accounts, database and storage, Resend for transactional email, and Vercel for hosting and optional analytics. They process data for us or under their own role for the relevant service.

International transfers: if a provider processes data outside the EEA, we use appropriate safeguards, such as the European Commission's standard contractual clauses, where required.

Government authorities: Only when we are legally required to do so.

5. Retention period

Stocklinq retains personal data no longer than strictly necessary to achieve the purposes for which the data was collected.

Account and company data: while an account is active and afterwards only as long as needed for closure, security, disputes or a legal obligation.

Financial administration: We are legally required to retain invoice data for 7 years for the tax authorities.

Listings, bids, deals and messages: as long as needed for the platform and fulfilment of a deal; afterwards they are deleted or anonymised unless retention is needed for administration, security or a dispute.

7. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. Where we rely on consent, you can withdraw it at any time.

You may also lodge a complaint with the Dutch Data Protection Authority. A request does not affect data we are legally required to retain.

Send a request to support@stocklinq.nl. We generally respond within one month.