Privacy Policy — Measured″

Measured″ ("we", "us", "our") is a secondhand marketplace for men's suits and accessories, operated from the Netherlands. We are committed to handling your personal data responsibly and in compliance with the General Data Protection Regulation (GDPR) and the Dutch Uitvoeringswet AVG.

1. Who we are

Controller: Measured″
Country: Netherlands
Contact: info@getmeasured.nl

For questions about this policy or to exercise your rights, please contact us at the address above. We aim to respond within 30 days.

2. What data we collect

Account data: Your name, email address, and (optionally) phone number when you register. Business sellers also provide a KvK number and VAT number.
Listing data: Measurements, photos, brand, price, condition, and any other details you enter when creating a listing.
Messages: Content of messages exchanged between buyers and sellers through the platform's messaging system.
Payment data: Transaction amounts and payout details. Card and bank account data is processed exclusively by Stripe; we do not store raw payment credentials.
Shipping data: Delivery address and shipment tracking information processed in conjunction with Sendcloud.
Usage data: Pages visited, filters applied, session duration, and device/browser type — collected only with your consent for analytics purposes.

3. Why we collect it (legal basis)

Performance of a contract (Art. 6(1)(b) GDPR): Account data, listing data, payment data, and shipping data are processed to enable transactions between buyers and sellers on the platform.
Legal obligation (Art. 6(1)(c) GDPR): Order and financial records are retained to meet Dutch tax law requirements (Belastingdienst).
Legitimate interest (Art. 6(1)(f) GDPR): Fraud prevention, platform security, and dispute resolution. Messages are retained to facilitate dispute evidence.
Consent (Art. 6(1)(a) GDPR): Analytics and marketing cookies are only placed with your explicit consent, which you can withdraw at any time.

4. How long we keep your data

Account data: Until you request deletion. We will process deletion requests within 30 days unless a legal obligation requires retention.
Order and financial data: 7 years, as required by Dutch tax law (Belastingwet, Art. 52 AWR).
Messages: 2 years from the date of the last message in a conversation.
Dispute evidence: Retained for 2 years after a dispute is closed.
Usage/analytics data: Aggregated and anonymised; individual session data is not retained beyond 90 days.

5. Your rights

Under the GDPR you have the following rights:

Access: Request a copy of the personal data we hold about you.
Rectification: Ask us to correct inaccurate or incomplete data.
Erasure ("right to be forgotten"): Request deletion of your data, subject to legal retention obligations.
Data portability: Receive your data in a structured, machine-readable format.
Objection: Object to processing based on legitimate interests.
Restriction: Ask us to limit how we process your data in certain circumstances.
Withdraw consent: Withdraw any consent you have given at any time, without affecting the lawfulness of prior processing.

Access and erasure are self-service: go to Account settings to download a copy of your data or permanently delete your account at any time.

For the other rights above, email info@getmeasured.nl with your request. We will respond within 30 days.

6. Third parties

Stripe (payments): Payment processing and seller payouts. Stripe acts as an independent data controller for card data. See Stripe's Privacy Policy.
Sendcloud (shipping): Label generation and shipment tracking. Delivery addresses are shared with Sendcloud and onward to the relevant carrier. See Sendcloud's Privacy Policy.
Hosting provider: Server infrastructure located within the European Economic Area. Data is not transferred outside the EEA without appropriate safeguards.

We do not sell your personal data to any third party, nor do we share it for advertising purposes without your explicit consent.

7. Cookies

We use strictly necessary cookies for session management and security. With your consent, we may also use analytics and marketing cookies. See our Cookie Policy for full details and to manage your preferences.

8. Contact & supervisory authority

For privacy-related questions, contact us at info@getmeasured.nl.

If you believe we are not handling your data correctly, you have the right to lodge a complaint with the Dutch data protection authority:

Autoriteit Persoonsgegevens
Hoge Nieuwstraat 8, 2514 EL Den Haag
www.autoriteitpersoonsgegevens.nl