1. Name and contact details of the controller

Simpleroomplanner, a trading name of Woodmont Digital

Contact for privacy matters: [email protected]

2. What personal data do we process?

2.1 Account data

Full name
Email address
Password
Telephone number
Company name
VAT number
Contact person

2.2 Billing data

Billing address
Contact or reference details
Credit card expiry date

2.3 Usage data

The provided URLs may in some cases be indirectly traceable to natural persons and are therefore treated as personal data where applicable:

URLs of websites you have tested
Test results and reports
Usage statistics of our service

2.4 Technical data

IP address
Browser type and version
Device information
Cookie data

3. Purposes and legal grounds for processing

Performance of subscription agreement: Legal ground: Contract (Art. 6(1)(b) GDPR) — Retention: during subscription + 7 years
Billing and financial administration: Legal ground: Legal obligation (Art. 6(1)(c) GDPR) — Retention: 7 years after end of agreement
Simple Room Planner application: Legal ground: Contract (Art. 6(1)(b) GDPR) — Retention: during subscription + 1 year
Customer service and support: Legal ground: Legitimate interest (Art. 6(1)(f) GDPR) — Retention: 2 years after last contact
Website analysis: Legal ground: Consent (Art. 6(1)(a) GDPR) — Retention: 26 months
Marketing communication: Legal ground: Consent (Art. 6(1)(a) GDPR) — Retention: until consent withdrawn

4. Disclosure to third parties

Stripe (payment processing)

Stripe acts as a data controller for payment data. Stripe DPA

Cloudflare (CDN)

Used for web security, CDN delivery, and Font Awesome availability.

Google Analytics

Used with consent to collect anonymised usage statistics.

5. International data transfers

Transfers outside the EEA follow Chapter V GDPR safeguards.

Stripe — EU‑US Data Privacy Framework
Cloudflare — EU‑US Data Privacy Framework / Standard Contractual Clauses
Google — EU‑US Data Privacy Framework / Standard Contractual Clauses

6. Your rights under GDPR

You have the right to:

Access
Rectification
Erasure
Restriction
Data portability
Object
Withdraw consent

Contact: [email protected]
Response time: 1 month (extendable to 3 months for complex cases).

7. Supervisory authority

Autoriteit Persoonsgegevens — autoriteitpersoonsgegevens.nl

8. Cookies and storage

Cookies and local storage may be used for:

Analytics
Consent tracking
Language preferences

Domain: simpleroomplanner.com

9. Security measures

Technical and organisational safeguards include:

Encryption
Secure Dutch data centres (Cloud86)
Access controls
Security updates

Payments processed by Stripe under PCI DSS.

10. Payments

Only card expiry date and network are stored. Full card numbers are not processed.

11. GDPR definitions

Includes definitions of:

Personal data
Processing
Controller
Processor
Data subject
Consent
Personal data breach

12. Changes to this policy

Material updates are communicated via email or website notice.

13. Legitimate interest

Customer support interest outweighs limited privacy impact due to minimal data usage and reasonable expectations.

14. Contact

[email protected]

15. Automated decision‑making

No automated decision‑making with legal or significant effects.

Privacy Policy