Yourfluence Privacybeleid:
jouw data & veiligheid

Last updated: 05/05/2025

Yourfluence B.V. (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform.

1. Who we are

Yourfluence B.V.
Oranjestraat 158
2013VK Haarlem, The Netherlands
Chamber of Commerce (KvK): 96845554
For questions: info@yourfluence.nl

2. What data do we collect?

We're fully transparent in the data we collect. We only collect what's necessary and remove it on request or automatically after the legal requirements.

a. Upon Account Registration

We collect the following personal data when you create an account:

Full name
Address (used for campaign targeting and promotional deliveries)
Age (used for campaign eligibility and targeting)
Phone number (used for verification and communication)
Fluencer type (flexfluencer, profluencer, elitefluencer)x
BSN (only in case of flexfluencer)

b. Upon Connecting a TikTok Account

When you link your TikTok account to Creator Hub, we collect:

TikTok profile photo
Number of followers
Video view count, updated hourly only for videos linked to campaigns

We only access data for campaign participation purposes, with your explicit consent.

3. How we use your data

We process your personal data for the following purposes:

To create and manage your account
To connect you with relevant campaigns
To verify your identity and ensure platform integrity
To process payments and rewards
To provide customer support
To ship campaign-related promotional items
To analyze performance and improve platform experience

We do not sell your data to third parties. Only authorized Yourfluence staff has access to your data.

4. Processing of Citizen Service Number (BSN)

If you use our Platform as a private individual (not as a registered business) and receive earnings (“Flexfluencer”), we are legally required under Dutch tax law to submit a UBD declaration (Uitbetalingen aan Derden – Payments to Third Parties) to the Dutch Tax Authorities. To fulfill this legal obligation, we must collect and process your Citizen Service Number (“BSN”).

Purpose of Processing

To comply with our legal obligations under Dutch tax legislation, specifically the submission of the UBD declaration to the Dutch Tax Authorities.
The BSN will never be used for commercial, marketing, or profiling purposes.

Legal Basis

Processing of your BSN is based on our legal obligation under Dutch tax law (Article 6(1)(c) GDPR).

Data Security

Your BSN is collected only if you register as a Flexfluencer (private individual).
Upon collection, your BSN is immediately encrypted using AES-256 encryption.
Encrypted BSN data is stored securely within our systems and is accessible only to two authorized administrators of Yourfluence B.V.
Your BSN will only be decrypted for the sole purpose of preparing and submitting the UBD declaration to the Dutch Tax Authorities.

Retention Period

Your BSN is retained for as long as you are an active creator on our Platform and at least until completion of the following year’s UBD declaration.
After this period, you may submit a written request for deletion of your BSN. In such cases, we will delete your BSN unless retention is required by law.

Rights of Data Subjects

In accordance with GDPR, you have the right to:

Request access to your BSN data.
Request rectification of incorrect or incomplete BSN data.
Request deletion of your BSN after the retention period.
File a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe your data is processed unlawfully.

4. Legal grounds for processing (GDPR Article 6)

We process your data based on the following lawful bases:

Consent – for linking TikTok accounts and receiving promotional materials
Contractual necessity – to provide the Yourfluence's services
Legal obligation – where necessary (e.g., accounting requirements)
Legitimate interests – to prevent fraud, ensure fair usage, and improve platform operations

5. Data Retention

We retain your personal data only as long as necessary to provide our services, comply with our legal obligations, or resolve disputes. Inactive accounts will be deleted after 24 months of inactivity. Campaign data is retained for up to 12 months after campaign completion, unless legal retention duties require otherwise.

You may request deletion of your data at any time (see our data deletion policy).

6. Data sharing

Your personal data is not shared with third parties unless:

It is required by law (e.g., government authorities)
It is necessary for service providers operating under strict data agreements (e.g., cloud hosting, SMS verification)

All external parties operate under GDPR-compliant agreements.

7. Data security

We apply strict access controls, encryption where appropriate, and audit procedures to protect your data. Only Yourfluence team members with a specific need have access.

8. Your rights under the GDPR

As a user based in the EU/EEA, you have the following rights:

Right of Access – You can request a copy of the data we hold about you.
Right to Rectification – You can request correction of inaccurate or incomplete data.
Right to Erasure – You can request deletion of your personal data ("right to be forgotten").
Right to Restrict Processing – You may request that we limit the way we use your data.
Right to Data Portability – You can receive your data in a structured, commonly used, and machine-readable format.
Right to Object – You may object to processing based on our legitimate interests.
Right to Withdraw Consent – You may withdraw your consent at any time for data you consented to share.

To exercise your rights, contact info@yourfluence.nl. We will respond within 30 days.

You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) via https://autoriteitpersoonsgegevens.nl.

9. International transfers

We store data within the European Economic Area (EEA). If data is ever processed outside the EEA, we ensure it is covered by standard contractual clauses or other safeguards in line with GDPR.