NL Create a free account
  1. Home
  2. Privacy statement

Privacy statement.

Which data Lightr processes, why we do so and how to exercise your rights. Questions? Email support@lightr.nl.

Privacy and GDPR Cookie policy

Last updated: 21 November 2024.

Lightr B.V. (“Lightr”) processes personal data to send handwritten cards, automate campaigns and improve our services. This privacy statement sets out which data we process, why we do so and how you can exercise your rights.

1. Who is responsible?

Lightr B.V.
The Netherlands
Email: support@lightr.nl
Website: https://lightr.nl

2. What data do we process?

Recipient data (for handwritten cards)

  • First and last name
  • Address details (street, house number, postcode, town, country)
  • Company name (optional)
  • Email address (for gift cards or notifications)
  • QR scan information (date, time, device, anonymised IP location)

Customer (user) data

  • First and last name
  • Company name
  • Address details
  • Email address
  • Telephone number
  • Payment and billing details
  • Login details
  • Campaign settings
  • Data supplied via CSV, API or Make.com
  • Log and usage data

3. Purposes, legal bases and retention periods

3.1 Payments

Data:
Name, address, email, telephone number, billing details.

Legal basis: Performance of the contract.

Retention period: 7 years (statutory record-keeping obligation).

3.2 Registering and managing an account

Data: Name, email, telephone number, account name.

Legal basis: Performance of the contract.

Retention period: For as long as the account is active. After deletion, this data is permanently deleted.

3.3 Sending handwritten cards

Data:
Recipients’ names and addresses, email address, company name, QR scan data.

Legal basis: Performance of the contract.

Retention period:
The data is retained for as long as the customer account is active, so that the sending history remains visible. When an order is deleted, the associated recipient data is deleted immediately and permanently.

3.4 Customer service

Data: Name, contact details, information you provide yourself.

Legal basis: Performance of the contract.

Retention period: A maximum of 6 months after handling.

3.5 Newsletters and marketing

Data: Name, email.

Legal basis: Consent.

Retention period: Until you unsubscribe.

3.6 Website use and statistics

Data: Anonymous or pseudonymised IP addresses, browser and device data, click behaviour, location based on anonymised IP.

Legal basis: Consent (cookie banner).

Retention period: A maximum of 14 months.

4. Who do we share data with?

We share data only with parties that are essential to our services:

  • Webparking (hosting)
  • Google Cloud Storage (file storage)
  • Make.com (automations)
  • Pipedrive (CRM)
  • Gift card partners such as Giffy (only when used)

These parties work under data processing agreements and in accordance with the GDPR.

5. Cookies and tracking

We use functional cookies and, only with your consent, analytical and marketing cookies such as:

  • Google Analytics
  • Meta Pixel
  • LinkedIn Insight Tag

6. Security

We take appropriate measures to protect personal data, including:

  • HTTPS and TLS encryption
  • Anonymised IP addresses
  • Secure storage via Google Cloud Storage
  • Role-based access
  • Logging and monitoring
  • Encryption where possible

7. Your rights

You have the right to:

  • access your data
  • correct your data
  • have your data erased
  • object to processing
  • withdraw your consent
  • request your data (data portability)

You can submit your request to support@lightr.nl. We will respond within 30 days.

8. Minors

We do not target people under the age of 16. If we have nonetheless received personal data from a minor, we will delete it as soon as we are notified.

9. Changes

We may amend this privacy statement. The most recent version is always available at https://lightr.nl/privacy.