Privacy Policy

JungleVault is operated by JungleVault B.V., registered in the Netherlands at the Chamber of Commerce (KvK) under number 87654321. Our registered address is Keizersgracht 123, 1015 CK Amsterdam, the Netherlands.

For privacy matters, contact us at: privacy@junglevault.nl

We collect the following categories of personal data:

• —Account data: name, email address, password (hashed)
• —Order data: billing address, shipping address, order history
• —Payment data: payment method details (processed by Stripe — we do not store card numbers)
• —Communication data: support messages, email correspondence
• —Technical data: IP address, browser type, device information, cookies
• —Usage data: pages visited, search queries, wishlist and cart contents
• —Seller data: item descriptions, photos, identity documents (for verified sellers)

We process your personal data on the following legal bases (Article 6 GDPR):

• —Contract (Art. 6(1)(b)): Processing necessary to fulfil your order, manage your account, and provide customer service.
• —Legal obligation (Art. 6(1)(c)): Tax and accounting obligations under Dutch law (Belastingdienst), anti-money laundering compliance (Wwft), and consumer law compliance.
• —Legitimate interest (Art. 6(1)(f)): Fraud prevention, platform security, improving our services, and direct marketing to existing customers.
• —Consent (Art. 6(1)(a)): Analytics cookies, marketing cookies, and marketing email communications — only when you have explicitly consented.

We use cookies to operate our platform and, with your consent, to analyse usage and serve personalised content. Necessary cookies are always active. See our Cookie Policy for full details.

We share your personal data with the following sub-processors only to the extent necessary for the service they provide:

• —Account data: retained for the duration of the account + 2 years after deletion
• —Order data: 7 years (Dutch tax law — Article 52 AWR)
• —Payment records: 7 years (Dutch tax law)
• —Support correspondence: 2 years from last contact
• —Analytics data: 26 months (aggregated, anonymised after 14 months)
• —Consent logs: 5 years

Under the GDPR you have the following rights regarding your personal data:

• —Access (Art. 15): Request a copy of the data we hold about you.
• —Rectification (Art. 16): Correct inaccurate or incomplete data.
• —Erasure (Art. 17): Request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
• —Restriction (Art. 18): Request that we limit processing of your data in certain circumstances.
• —Portability (Art. 20): Receive your data in a structured, machine-readable format.
• —Objection (Art. 21): Object to processing based on legitimate interest, including direct marketing.
• —Withdraw consent (Art. 7(3)): Withdraw consent at any time without affecting prior processing.

To exercise any right, email privacy@junglevault.nl. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl

JungleVault B.V. · Keizersgracht 123, 1015 CK Amsterdam · Netherlands
Email: privacy@junglevault.nl