Privacy Policy

1 Introduction and Scope

This Privacy Policy ("Policy") governs the collection, processing, storage, and disclosure of personal data by PeaceWeb B.V., trading as Steadcloud, a company registered in the Netherlands at Hedikhuizerweg 7F, 5222 BC 's-Hertogenbosch, Netherlands, registered with the Dutch Chamber of Commerce (Kamer van Koophandel) under number 88526461.

This Policy applies to all personal data collected from clients using Steadcloud services, website visitors, portal users, and individuals engaging with Steadcloud for inquiries or support.

By using our services, you acknowledge and consent to the collection and processing of your personal data as set forth in this Policy, in accordance with Dutch law and the General Data Protection Regulation (GDPR).

2 Data We Collect

2.1 Data Provided by You

2.2 Data Collected Automatically

• • Log Data: IP address, browser type, operating system, access timestamps
• • Usage Data: Pages accessed, session duration, actions performed
• • Cookies: Essential and analytics cookies (see Cookie section)

3 How We Use Your Data

We process your personal data for the following purposes, each grounded in a legal basis under GDPR:

4 Data Sharing

We may share your personal data with:

• • Payment Processors: Mollie, Stripe for payment processing
• • Analytics Providers: PostHog for product analytics
• • Support Tools: Front for customer support
• • Regulatory Authorities: When required by law

We do not sell your personal data to third parties.

5 Data Retention

We retain your personal data only as long as necessary for the purposes described in this Policy:

6 Your Rights

Under GDPR, you have the following rights regarding your personal data:

To exercise these rights, contact us at privacy@steadcloud.com.

7 Data Security

We implement industry-standard security measures to protect your data:

• ✓ TLS 1.3 encryption for all data in transit
• ✓ AES-256 encryption for data at rest
• ✓ Multi-factor authentication available
• ✓ Regular security audits and penetration testing
• ✓ EU-based data centers (Netherlands)

8 Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience. Our cookie usage includes:

You can manage cookie preferences through your browser settings or our cookie consent banner.

9 International Data Transfers

All primary data storage and processing occurs within the European Union (Netherlands). We do not transfer your personal data outside the EU/EEA unless absolutely necessary and with appropriate safeguards:

• ✓ Standard Contractual Clauses (SCCs) approved by the EU Commission
• ✓ Adequacy decisions for recipient countries
• ✓ Binding Corporate Rules where applicable

Our infrastructure is explicitly designed to keep data within the EU to ensure GDPR compliance and avoid US CLOUD Act exposure.

10 Children's Privacy

Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.

11 Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through a prominent notice on our website at least 30 days before taking effect. Your continued use of services after changes take effect constitutes acceptance of the updated Policy.

12 Contact & Complaints

For privacy-related inquiries, contact our Data Protection team:

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.