In short
- We only collect data necessary to make visit planning work.
- You maintain control over who gets access.
- Data is stored securely with Supabase, on servers in Ireland.
- We do not share data with third parties for commercial purposes.
- You can always request access to the data we process about you, or have it deleted. You can also delete your account yourself via the settings page.
1. Introduction
Visitpal respects your privacy and is transparent about how we collect, use and protect your personal data. This privacy statement explains how we handle your data when you use our service, in line with the General Data Protection Regulation (GDPR). The controller is JTB development (trade name Bezoekmaatje), registered with the Dutch Chamber of Commerce under number 42160483.2. What data do we collect?
We only collect data necessary for the functioning of the service:- Email addresses for confirmations and notifications
- Names of visitors for appointments
- Selected time slots for visits
- Agenda settings you configure
- Cookie preferences (for storing your cookie notice)
- Anonymous usage statistics (Vercel Analytics, always active)
- Extended analytics via Google Analytics 4 (only after your consent)
- With Visitpal Plus: details of your payment and subscription (status, amount and date). Visitpal does not see or store your bank or card details; Stripe processes those.
3. Legal basis for processing
We process your personal data only based on:- User consent (for example when registering or sharing an agenda)
- Performing the agreement (providing the visit planning service)
- A legitimate interest, such as improving the operation and security of the app
4. How do we use your data?
Your data is used exclusively for:- Showing scheduled visits in your agenda
- Sending confirmation emails for appointments
- Facilitating the visit planning functionality
- Technical support when needed
- Sending our newsletter, only if you consented when creating your account or in your settings. You can unsubscribe at any time under Settings → Notifications.
5. Data sharing and processors
We do not share your personal data with third parties for commercial purposes. For the operation of Visitpal, we use third-party services that act as processors: Supabase (database and accounts), Vercel (hosting), Resend (sending emails) and Stripe (payments for Visitpal Plus). These parties process data only on our behalf and under strict conditions.6. International transfers
Your agendas, appointments and account data are stored with Supabase, on servers within the European Union (Ireland). For sending emails and for website statistics we use providers that may also process data outside the European Union. Appropriate safeguards are always applied, such as the European Commission's standard contractual clauses.7. Data security
We take appropriate technical and organizational measures to protect your personal data against loss, misuse and unauthorized access. All data is stored and exchanged encrypted. However, we cannot provide absolute guarantees that unauthorized access will never occur.8. Cookie Policy and Analytics
Visitpal uses essential cookies for the operation of the website. Additionally, we offer the option to accept analytical cookies for more detailed statistics.Essential cookies (always active)
These cookies are necessary for the website to function. Without these cookies, the website cannot function properly.| Cookie name | Purpose | Duration |
|---|
| cookieConsent | Remember your cookie preferences | 1 year |
| Supabase Auth tokens | Login and session management | Session / 1 hour |
Basic Analytics - Vercel (always active)
We use Vercel Analytics for basic insight into website usage. These analytics are completely privacy-friendly:- No cookies: Vercel Analytics uses no cookies
- No IP tracking: IP addresses are not stored
- No personal data: Only anonymous statistics
- GDPR-compliant: Fully compliant without requiring consent
Extended Analytics - Google Analytics 4 (only after consent)
When you choose "Accept all" in the cookie notice, we also use Google Analytics 4 for more detailed statistics. This helps us improve the website.What do we collect with Google Analytics?- Page views and navigation behavior
- General usage statistics (e.g. which features are used)
- Device and browser information (anonymized)
- Geographic location at country level
Your choice: You can choose "Only necessary" in the cookie notice to reject Google Analytics. The website works fully without these cookies.| Cookie name | Purpose | Duration |
|---|
| _ga | Distinguish users (anonymized) | 2 years |
| _ga_* | Session information for GA4 | 2 years |
Important: Visitpal does not use:- Advertising networks or remarketing tools
- Facebook Pixel or similar tracking
- Cross-site tracking or profiling
- Sale or sharing of user data with third parties
9. Retention period
We only keep your data as long as necessary to provide our service. You can delete your account and all associated data at any time.10. Your rights
You have the right to:- Access your stored data
- Have your data modified or deleted
- Object to the processing of your data
- Receive a copy of your data
- File a complaint with the Data Protection Authority
11. Contact
For questions about this privacy statement, about how we handle your data, or to exercise your rights, you can contact us at info@bezoekmaatje.nl. Our business address is on the contact page.12. Changes
We may update this privacy policy from time to time. Changes will be published on this page with a new date.Last updated: September 19, 2026
