Privacy Policy of NurtureFlow Nederland B.V.
Effective date: 21 July 2026
1. Introduction and company information
This privacy policy explains how NurtureFlow Nederland B.V. (“we”, “us”, or “our”) collects, uses, shares, stores, and protects personal data when you interact with our lead-nurturing services, website, communications, forms, campaigns, and related business activities.
NurtureFlow Nederland B.V. is the data controller for the processing of personal data described in this privacy policy, unless we expressly state otherwise.
Company details:
- Name: NurtureFlow Nederland B.V.
- Address: Korte Molenweg 18, 1812 BS Alkmaar, Netherlands
- Email: [email protected]
- Phone: +31 72 845 63 91
This policy applies to all individuals whose personal data we process in connection with our lead-nurturing activities, including prospective customers, website visitors, business contacts, subscribers, leads, and other users who interact with our services.
2. Data collection and processing
We may collect and process the following categories of personal data, depending on your interaction with us:
- Identification and contact data: name, business name, job title, email address, phone number, postal address, and similar contact details.
- Communication data: messages, inquiries, call notes, email correspondence, and feedback.
- Lead and interaction data: information provided through contact forms, landing pages, downloads, subscription forms, campaigns, appointment requests, and other lead-generation or lead-nurturing touchpoints.
- Technical data: IP address, browser type, device identifiers, operating system, language settings, log data, and usage information.
- Marketing and engagement data: preferences, interests, campaign responses, email open rates, click-through data, and interaction history.
- Transaction and business data: invoicing details, contract information, and service-related records where applicable.
- Cookies and similar technologies: information collected through cookies, pixels, tags, and comparable technologies, subject to applicable consent requirements.
We generally collect personal data directly from you when you contact us, submit a form, subscribe to updates, attend an event, engage with our communications, or otherwise use our website and services. We may also receive data from business partners, referral sources, analytics providers, advertising platforms, and publicly available sources, where permitted by law.
We do not intentionally collect special categories of personal data unless you choose to provide such information or unless it is otherwise necessary and lawful to do so.
3. Purpose of data processing
We process personal data for the following purposes:
- to respond to inquiries and communicate with you;
- to manage and nurture sales leads and business relationships;
- to deliver marketing communications, newsletters, and promotional messages where permitted;
- to personalize and improve our communications and services;
- to analyze campaign performance, user engagement, and website usage;
- to operate, maintain, secure, and improve our website, systems, and business operations;
- to comply with legal obligations;
- to establish, exercise, or defend legal claims;
- to perform administrative, accounting, and record-keeping tasks; and
- to manage contracts, proposals, and customer or supplier relationships.
Where consent is required for specific processing activities, we will request it separately and in a clear manner.
4. Legal basis for processing
We process personal data only where we have a valid legal basis under applicable privacy law. Depending on the context, our processing may rely on one or more of the following bases:
- Consent: where you have given us permission, for example for certain marketing communications or cookies.
- Performance of a contract: where processing is necessary to enter into or perform a contract with you.
- Legitimate interests: where processing is necessary for our legitimate business interests, such as lead nurturing, business development, service improvement, fraud prevention, and internal administration, provided these interests are not overridden by your rights and freedoms.
- Legal obligation: where processing is necessary to comply with a legal or regulatory requirement.
Where we rely on legitimate interests, we assess and balance our interests against your privacy rights. You may object to processing based on legitimate interests as described below.
5. Data sharing and third parties
We may share personal data with third parties only where necessary for the purposes described in this policy, including:
- Service providers and processors: hosting providers, CRM systems, email delivery services, analytics providers, support tools, IT security providers, and marketing automation platforms.
- Professional advisers: accountants, auditors, legal advisers, insurers, and consultants.
- Business partners: where collaboration is required for lead generation, lead nurturing, or related business services and where appropriate legal safeguards are in place.
- Authorities and regulators: where disclosure is required by law, court order, or governmental request.
- Corporate transactions: in connection with a merger, acquisition, restructuring, financing, or sale of assets, subject to confidentiality and lawful processing requirements.
We require third parties that process personal data on our behalf to implement appropriate security measures and to process data only under our instructions and for permitted purposes.
6. Data transfer to third countries
Depending on the location of our service providers and business partners, your personal data may be transferred to, stored in, or accessed from countries outside the European Economic Area (EEA) or other jurisdictions with different data protection standards.
Where such transfers occur, we will take appropriate safeguards to protect your personal data, which may include:
- standard contractual clauses or equivalent transfer mechanisms;
- adequacy decisions, where applicable;
- supplementary technical and organizational measures; and
- transfer risk assessments where required.
You may contact us using the details below if you would like more information about international transfers and the safeguards we use.
7. Storage duration
We retain personal data only for as long as necessary to fulfill the purposes described in this privacy policy, unless a longer retention period is required or permitted by law.
The retention period depends on factors such as:
- the nature of the data and the purpose for which it was collected;
- whether you are an active lead, customer, subscriber, or contact;
- contractual, legal, tax, accounting, or regulatory requirements;
- whether a dispute, investigation, or claim is ongoing; and
- our legitimate business needs for record-keeping and security.
When personal data is no longer needed, we will delete, anonymize, or securely archive it in accordance with applicable law and internal retention practices.
8. User rights
Depending on applicable law, you may have the following rights in relation to your personal data:
- Right of access: to obtain confirmation as to whether we process your personal data and to request a copy of that data.
- Right to rectification: to request correction of inaccurate or incomplete personal data.
- Right to erasure: to request deletion of your personal data in certain circumstances.
- Right to restriction: to request limitation of the processing of your personal data in certain circumstances.
- Right to data portability: to receive certain personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller where applicable.
- Right to object: to object to processing based on legitimate interests and to object at any time to direct marketing.
To exercise any of these rights, please contact us using the details provided in this privacy policy. We may need to verify your identity before responding to your request. We will respond within the time limits required by applicable law.
Please note that these rights are not absolute and may be subject to legal exceptions and limitations.
9. Withdrawal of consent
Where we process your personal data based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent, we may no longer be able to provide certain communications, features, or services that depend on that consent. You can withdraw consent by using the unsubscribe mechanism provided in our communications or by contacting us directly.
10. Right to complain
If you believe that our processing of your personal data infringes applicable privacy law, you have the right to lodge a complaint with a competent supervisory authority.
Without limiting that right, we encourage you to contact us first so that we may try to resolve your concerns quickly and directly.
11. Data security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, alteration, disclosure, or misuse. These measures may include:
- access controls and authentication;
- role-based permissions and least-privilege principles;
- encryption where appropriate;
- secure data storage and transmission methods;
- monitoring and logging of relevant system activity;
- staff confidentiality obligations and training; and
- regular review of security practices and vendor arrangements.
While we take reasonable steps to protect personal data, no system can be guaranteed to be fully secure. You are responsible for keeping your own access credentials confidential where applicable.
12. Contact information
If you have any questions, requests, or complaints regarding this privacy policy or our processing of personal data, please contact:
- NurtureFlow Nederland B.V.
- Address: Korte Molenweg 18, 1812 BS Alkmaar, Netherlands
- Email: [email protected]
- Phone: +31 72 845 63 91
13. Changes to privacy policy
We may update this privacy policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. The updated version will be made available on our website or through other appropriate channels.
Where changes are material, we will take reasonable steps to notify you, for example by posting a prominent notice or contacting you directly where appropriate. The “Effective date” above indicates when this version last took effect.