Privacy Policy

Last updated: 19 October 2026

1. Who is responsible

Xendd V.O.F. (KvK 85313882), Gaandeweg 63, 1103 SG Amsterdam, the Netherlands, is the controller for the personal data described in this policy. Questions or requests about your data can be sent to business@xendd.com or by phone at +31 6 11876148.

This policy covers this website and our own business contacts. When we build or host software for a client and process data of its users (such as students or teachers), the client is the controller and we act as its processor under a data processing agreement. In that case, the client's privacy policy applies.

2. What we collect and why

We only collect what we need. Depending on how you interact with us, that is:

• Contact form and email: your name, email address, organization and message, to answer your question and follow up on it. Legal basis: our legitimate interest in responding to enquiries, or steps prior to entering into an agreement.
• Clients: contact and billing details of the people we work with (name, role, email, phone, billing address, VAT number), to perform the agreement, send invoices and give access to the Xendd Portal. Legal basis: performance of the agreement and our legal obligations.
• Technical data: when you visit the website, our hosting server automatically logs technical information such as your IP address, browser type and the pages requested, to keep the website secure and working. Legal basis: our legitimate interest in a secure, reliable website.

3. Cookies

This website does not set any cookies. The English and Dutch versions each have their own address (Dutch pages start with /nl/), so no cookie is needed to remember your language. We do not use analytics, advertising or tracking cookies, and our fonts are hosted on our own server, so your visit is not shared with font or analytics providers. Because we set no cookies, no cookie banner is required.

4. Who we share data with

We never sell your data. We only share it with service providers that help us run our business, under agreements that require them to protect it:

• Web3Forms, which delivers messages sent through our contact form to our inbox.
• Our hosting provider, which runs the servers for this website and the Xendd Portal.
• Our email, accounting and payment providers, for communication, bookkeeping and processing payments.
• Authorities, only when we are legally required to.

5. Transfers outside the EU

Some of our service providers may process data outside the European Economic Area. We only allow this when appropriate safeguards are in place, such as an adequacy decision of the European Commission (including the EU-US Data Privacy Framework) or the EU Standard Contractual Clauses.

6. How long we keep data

Enquiries that do not lead to a collaboration are deleted within two years. Client contact details are kept for the duration of the collaboration and up to two years after. Invoices and related administration are kept for seven years, as required by Dutch tax law. Server logs are kept for a short period, typically no longer than 90 days.

7. Security

We take appropriate technical and organizational measures to protect personal data, including encrypted connections (HTTPS), access restricted to the people who need it, and up-to-date software. If a data breach occurs that poses a risk to you, we will inform you and the Dutch Data Protection Authority as required by law.

8. Your rights

Under the GDPR you have the right to access, correct or delete your personal data, to restrict or object to its processing, and to receive your data in a portable format. Where processing is based on consent, you can withdraw it at any time. Send your request to business@xendd.com; we respond within one month and may ask you to confirm your identity.

If you are not satisfied with how we handle your data, please tell us first so we can fix it. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

9. External links

Our website links to external sites such as Instagram and LinkedIn. We are not responsible for how those sites handle your data; please read their privacy policies.

10. Changes

We may update this policy when our services or the law change. The latest version is always on this page, with the date it was last updated at the top.

Questions about your privacy? Email us at business@xendd.com.