Privacy Policy

1. Who we are

Pollinity is an online marketplace that connects farmers, beekeepers and transport companies for crop pollination. Farmers book beehives from beekeepers; transport of the hives is handled by certified transport companies. Pollinity arranges the booking, draws up the agreement, processes the payment and arranges the payout. For collecting and paying out money we work with the payment provider Stripe.

The data controller within the meaning of the GDPR is Pollinity (legal entity yet to be determined), reachable at privacy@pollinity.com. Registered address, company and VAT number will follow once the entity has been established.

This policy applies to all Pollinity environments: the public website and the farmer and beekeeper portal, the transport portal and the admin environment. Pollinity is intended exclusively for businesses and is not intended for individuals under the age of 18.

2. What personal data we process, and from whom

Website visitors (not logged in)

• Technical data that every visit generates: IP address, browser and device type, pages viewed, date and time. Our hosting partners process this for the operation and security of the site.
• We collect website statistics using Pulse by Ciphera, a privacy-friendly analytics platform that operates without cookies and does not build a profile per visitor. The IP address is processed briefly to determine a country/region and is not stored. We cannot identify or track individual visitors with this.
• Address and place search: if you type an address or place in a search field, we send that search term via our own server to Google (Places) to get suggestions. Your browser does not connect to Google and your IP address is not passed on to Google. We do not store search terms.

Farmers and beekeepers (account holders)

Transport companies and drivers

From the transport company's administrator: name, email address, phone number, business details, IBAN and account holder, and certification details. From the driver: name, email address, phone number, the link to the company and assigned trips. Drivers are employed by the transport company; Pollinity does not pay them and does not process payroll data. Transport documents uploaded during a trip (waybills/transport receipts, photos as proof) are retained.

Staff in the admin environment

Name, email address, password (as an encrypted hash), the assigned role and permissions, and a log of admin actions performed.

Not-yet-connected businesses on the public map

To make the market visible, we show anonymised dots for beekeepers and farmers who do not (yet) have a Pollinity account, sourced from public business registers (currently the Belgian KBO). We never show the name, exact address or business registration number for these — only a deliberately blurred municipality-level location and the type. As soon as such a business signs up, the anonymous dot disappears and the real profile takes over.

3. Purposes and legal bases

We do not process special categories of personal data and do not ask for a BSN (Dutch citizen service number). We do not send commercial newsletters or marketing emails.

4. Recipients and processors

We do not sell personal data and do not share it with third parties for their own purposes. We engage the following service providers, each solely for the stated purpose and under a data processing agreement:

5. Transfers outside the European Economic Area (EEA)

Where possible, we choose processing and storage within the EU (database and file storage). Some service providers (including Stripe, Google, Resend, Cloudflare and Vercel) may process data in, or transfer data to, countries outside the EEA, in particular the United States. For such transfers we rely on the European Commission's standard contractual clauses (SCCs) and, where applicable, the EU-US Data Privacy Framework, supplemented with appropriate technical measures. Ciphera (Pulse) operates from Switzerland, which is covered by an adequacy decision of the European Commission.

6. Retention periods

7. Security

• Encryption of sensitive fields at rest: IBAN, business registration number and VAT number are stored encrypted with AES-256-GCM and never come back in readable form in API responses.
• Passwords are never stored in readable form, but as a salted hash.
• Encrypted connections (HTTPS/TLS) for all traffic, with HSTS.
• Role-based access: staff only see what belongs to their role; sensitive actions such as payouts require specific permissions and are logged.
• Location blurring: a beekeeper's exact address is never shown to farmers.
• Abuse limiting: limits on login, registration and verification attempts, and automatic blocking of accounts in case of abuse.
• Separation of payment data: card data and identity checks for payouts are processed by Stripe, not by Pollinity.

Found a vulnerability? Email security@pollinity.com.

8. Payments, payouts and Stripe

• Payments from farmers are processed via Stripe. The full card or bank details are processed by Stripe; Pollinity only receives a confirmation and the necessary transaction data.
• Beekeepers and transport companies receive their payouts via a Stripe account that is created in the background. They only provide their name and IBAN for this.
• As a payment provider, Stripe is legally required to verify the recipient of funds and carries out that check itself. Pollinity does not request, receive or store any identity documents or a BSN for this.
• Pollinity is free for beekeepers and farmers and charges no commission. The farmer pays service fees per payment (the payment costs of the chosen method and our processing, plus VAT), invoiced separately by Pollinity. The beekeeper and the transport company receive the full agreed amount and invoice it to the farmer themselves.
• Stripe's privacy policy also applies to processing carried out by Stripe.

9. Cookies

• One necessary cookie. To keep you logged in we use a single technical cookie (valid for 7 days, Secure and HttpOnly). This is strictly necessary for logging in; no consent is required for this and we do not show a cookie banner.
• No other cookies. We do not place analytics, advertising or tracking cookies. Our website statistics (Pulse by Ciphera) work entirely without cookies.
• For the map, your browser retrieves map data from OpenFreeMap (based on OpenStreetMap); your IP address is visible to that service. We do not place any cookies ourselves in doing so.

10. Your rights

Under the GDPR you have the right to:

• request access to the personal data we process about you;
• request correction of inaccurate data;
• request erasure, insofar as no legal retention obligation prevents this;
• have the processing restricted;
• object to processing based on legitimate interest;
• receive your data in a common format (data portability).

Send your request to privacy@pollinity.com. We respond within one month. If you disagree with how we handle your data, you can file a complaint with the Autoriteit Persoonsgegevens (the Netherlands) or the Gegevensbeschermingsautoriteit (Belgium).

11. Changes

We may amend this privacy policy when the service or the law requires it. The current version is always available on this page. In the event of a significant change, we will inform account holders by email.

12. Contact

Pollinity · privacy@pollinity.com