GDPR-compliant

Privacy Policy

Last updated: March 13, 2026

At John Bee we take your privacy seriously. This privacy policy explains how we handle your personal data in accordance with the GDPR.

1. What data do we collect?

Account data

  • Name and email address (for creating and managing your account)
  • Company name, address, chamber of commerce and VAT number (if provided)
  • Payment details (via our secure payment provider)

Usage data

  • IP address and browser information
  • Date and time of visits to the application
  • Pages you visit within John Bee
  • Device and operating system information

Data you enter

  • Client data (names, addresses, contact information)
  • Quote and invoice data
  • Product catalogue and prices
  • Uploaded photos and documents

2. What do we use your data for?

Service delivery

  • Providing and improving the John Bee software
  • Processing payments and invoicing
  • Sending service emails (password reset, payment confirmations)
  • Technical support and customer service

Communication

  • Important service updates
  • Technical notices and maintenance notifications
  • Newsletters (only with your consent)

Service improvement

  • Analysing how the software is used
  • Identifying and resolving technical issues
  • Developing new features

3. How do we protect your data?

Technical measures

  • All communication via encrypted HTTPS connections
  • Passwords stored encrypted with modern hashing algorithms
  • Databases secured with access control and firewalls
  • Daily automatic backups of all data
  • Regular security updates and patches

Organisational measures

  • Strict access control: only authorised personnel have access
  • All staff are bound by confidentiality
  • Regular security audits and monitoring

4. Do we share your data with third parties?

We do NOT share your data for marketing purposes

  • John Bee never sells or rents your data to third parties
  • We do not use your data for advertising or profiling

We do share data with:

  • Payment providers (for processing payments)
  • Hosting providers (servers within the EU)
  • Email service providers (for service emails)
  • Government authorities (only when legally required)

All third parties:

  • Are carefully selected based on security and privacy
  • Have signed a data processing agreement
  • May only use your data for the specified purpose
  • Are bound by the same privacy and security standards

5. How long do we retain your data?

During active subscription

  • All data is retained as long as your account is active
  • You have access to all your data at all times

After subscription ends

  • On cancellation: data is permanently deleted within 30 days
  • On non-payment: data deleted within 30 days of account closure
  • You receive a reminder 7 days before deletion

Legal retention obligation

  • Billing data retained for 7 years (per Dutch law)
  • This data is stored securely and separately

6. Your rights (GDPR)

You have the following rights:

  • Right of access: you can request what data we hold
  • Right of rectification: you can have incorrect data corrected
  • Right to erasure: you can request deletion of your data
  • Right to restriction: you can stop certain processing
  • Right to data portability: you can request your data
  • Right to object: you can object to certain processing
  • Right to withdraw consent (e.g. for newsletters)

How to exercise your rights:

  • Many changes can be made via your account settings
  • For other requests: email privacy@sennd.nl
  • We respond within 30 days
  • We may ask for identification for your security

7. Cookies and tracking

Functional cookies

  • Necessary for the application to function
  • Remembering your login status
  • These cookies cannot be disabled

Analytical cookies

  • We use anonymised analytics
  • This data helps us improve the software
  • IP addresses are anonymised

No tracking cookies

  • We do not use third-party tracking cookies
  • We do not share data with advertising networks
  • We do not build user profiles for marketing

8. Data breaches

Our approach

  • In case of a breach we notify affected users within 72 hours
  • We report to the Data Protection Authority if required
  • We take immediate action to prevent further damage
  • We communicate transparently about what happened

9. Changes to this privacy policy

Updates

  • We may update this policy from time to time
  • Important changes are announced by email
  • The latest version is always on this page
  • Date of last change is shown at the top

10. Minors

Age restriction

  • John Bee is intended for business use by persons aged 18 and over
  • We do not knowingly collect data from persons under 18
  • If you suspect a minor has registered, please contact us