Privacy policy

Huurspot handles your personal data with care. We only collect what we need to get you to new rental listings faster, we never sell your data and we don’t track you on other websites. This privacy policy explains which data we process, why, for how long, and what rights you have.

1. Who is responsible?

Huurspot is the controller of your personal data within the meaning of the General Data Protection Regulation (GDPR).

Huurspot, trade name of Codebolt B.V., located at Assumburg 136, 2135BA Hoofddorp, registered with the Chamber of Commerce under number 83866906.

For privacy questions, email hallo@huurspot.io.

2. What data we process and why

We process data you give us yourself and data generated when you use Huurspot. Huurspot is intended for people aged 18 or older.

Matches are created automatically based on your search profile. This does not lead to decisions with legal effects or other significant effects for you.

Rental listings we collect may contain contact details of landlords or agents. We only display these as they appear publicly on the source and do not use them for any other purpose.

Our legitimate interests

Where we process data on the basis of legitimate interest, these are the interests concerned: protecting Huurspot and your account against misuse and fraud, quickly detecting and fixing errors, and improving the website based on anonymised statistics. We have weighed these interests against your privacy and process as little data as possible for them.

Required and optional data

An account requires an email address and password. A subscription requires payment details. Without this data we cannot perform the contract. A phone number is only needed if you want to receive alerts via WhatsApp or SMS. All other data is provided voluntarily.

3. How long we keep data

We do not keep data longer than necessary for the purpose for which it was collected.

• Account, search profiles, favourites and alert settings: for as long as your account exists. After your account is deleted, we erase this data within 30 days.

• Inactive accounts: after 2 years without logging in and without a subscription, we delete your account. You will receive an email about this in advance.

• Payment details and invoices: 7 years, due to the statutory retention obligation for accounting records.

• Contact, chat and support: 2 years after the last contact.

• Security and server logs: up to 90 days.

• Error reports: up to 14 days.

• Backups: deleted data may remain in backups for up to 14 days.

4. Who we share data with

We never sell your data. We only share data with parties we need to make Huurspot work. We have agreements with these processors on security and confidentiality, as required by the GDPR.

We only provide data to other parties, such as the police or the Tax Administration, if required by law.

5. Data outside the European Union

Some parties process data in the United States. This only happens on the basis of the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses, so your data keeps the same level of protection as within the EU. You can read which safeguards a party uses in that party’s privacy terms. You can check whether a party is covered by the Data Privacy Framework at dataprivacyframework.gov.

6. Cookies and statistics

You can read which cookies and similar technologies we use, and why, in our cookie policy on the website.

For statistics we use Plausible Analytics. Plausible does not place cookies, does not store IP addresses and does not build visitor profiles. We only see totals, such as the number of visitors per page and where visitors come from.

Messages we send you

If you have a subscription, we send you alerts about matches via the channels you choose, as well as service emails about your account, payments and renewals. These are not advertising messages; they are part of the service.

Messages with a commercial purpose, such as emails about missed matches if you don’t yet have a subscription, are only sent with your consent (Dutch Telecommunications Act, Article 11.7). Each of these messages includes a way to unsubscribe. Unsubscribing is free and takes effect immediately. We never give your data to others for their advertising.

7. Security

We protect your data with appropriate technical and organisational measures, including:

• an encrypted connection (HTTPS) across the entire website;

• passwords stored only in encrypted form;

• the option to enable two-factor authentication;

• access to data only for those who need it;

• daily backups and monitoring for errors and misuse.

If something does go wrong with your data (a data breach) and it affects you, we will let you know as soon as possible. Where required, we report the breach to the Dutch Data Protection Authority.

8. Your rights

You have the following rights:

• Access: you may know what data we hold about you.

• Rectification: you may have incorrect data corrected. You can change much of your data yourself in your account.

• Erasure: you may have your data deleted. You can also delete your account yourself via the settings.

• Restriction: you may ask us to temporarily restrict the use of your data.

• Portability: you may receive your data in a common file format.

• Objection: you may object to processing based on legitimate interest, such as statistics and error monitoring. We will then stop that processing, unless we have compelling grounds that outweigh your interests.

• Withdrawing consent: you can withdraw consent for push and WhatsApp messages and for emails about missed matches at any time in your account or browser.

Send your request to hallo@huurspot.io. We respond within one month. To prevent misuse, we may ask you to confirm your identity, for example by sending the request from your account’s email address. We do not ask for a copy of your ID.

Some data must be kept by law, such as invoices. We can only delete this data once the retention period has ended.

9. Complaints

If you have a complaint about how we handle your data, please let us know first via hallo@huurspot.io. If we can’t resolve it together, you can file a complaint with the Dutch Data Protection Authority via autoriteitpersoonsgegevens.nl.

Changes

We may update this privacy policy, for example when we start using a new service. The current version is always available on the website. We will email you about significant changes.

Version 1.0, effective from 1 October 2026.