Privacy Policy

This policy explains how REHOWS processes personal data when you use REHOWS.com. REHOWS is the controller for the processing described here. Privacy-request contact options will be provided through the website.

1. Data we process

• Updates: email address, consent wording and date, language, country, subscription status and unsubscribe identifier.
• Feedback: rating, a random browser-session identifier, source page, language, country and timestamps.
• Contributions: if contribution features are made available, the details you submit, which may include name, email, organisation, website, region and cost information.
• Technical and analytics data: hosting and security logs may include IP address, browser/device information, requested URL and timestamps. Vercel Web Analytics provides aggregated, cookie-free information such as visited pages, referrers, approximate location, device and browser type.

Cost plans and PDF reports are generally created in your browser. Do not enter confidential or sensitive personal information into free-text fields.

2. Purposes and legal bases

• Send requested product updates based on your consent. You may withdraw consent at any time.
• Collect ratings, understand site and feature performance, and improve estimates based on our legitimate interests in improving and securing the service.
• Review submitted cost information and communicate about a contribution based on our legitimate interests and, where applicable, steps requested by you.
• Prevent abuse, maintain security and meet legal obligations based on legitimate interests or applicable law.

3. Service providers and international transfers

We use Supabase for database services and Vercel for hosting and delivery. These providers process data on our behalf under their contractual terms. Processing or support may involve countries outside the European Economic Area. Where required, transfers are protected by an adequacy decision, Standard Contractual Clauses or another lawful safeguard.

4. Retention

We retain personal data only while needed for the purposes above. Subscription records are kept while you remain registered and for a limited period afterward to document requests and consent. Feedback and contribution records are reviewed periodically and deleted or anonymised when no longer reasonably needed. Security logs are kept according to the hosting provider’s operational retention periods. Legal obligations, disputes or fraud prevention may require longer retention.

5. Your rights

Subject to the GDPR and applicable exceptions, you may request access, correction, deletion, restriction, portability or object to processing. Where processing relies on consent, you may withdraw it without affecting earlier processing. We may request information needed to verify your identity.

You may also lodge a complaint with the Dutch Data Protection Authority or the supervisory authority where you live or work.

6. Security, children and changes

We use reasonable technical and organisational safeguards, but no internet service is completely secure. REHOWS is not directed to children and we do not knowingly request children’s personal data. We may update this policy when the service or legal requirements change.