Privacy Policy

1. Who we are

This Privacy Policy applies to BIYU B.V. ("BIYU", "we", "us", or "our"), the controller of your personal data.

We are committed to protecting your personal data and handling it in a transparent, responsible manner in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch law.

2. What data we collect

We collect personal data in the following situations:

a) Demo request form

When you submit a demo request on our website, we collect:

• Full name
• Work email address
• Company name
• Your message / business context (optional)

b) Direct contact

If you contact us by email, we collect the information you include in that communication, such as your name, email address, and the content of your message.

c) Website usage

If you accept analytics cookies, we use HubSpot to understand how this website is used. HubSpot then collects pages viewed, how you arrived, general location derived from your IP address, browser and device type, and a visitor identifier stored in a cookie. If you later submit a form with your email address, HubSpot can connect that visit history to your contact record.

If you reject analytics cookies, we tell HubSpot not to place those cookies or identify you. The tracking script stays on the page so HubSpot can confirm it is installed. We also use Vercel Analytics to count page views. That tool does not use cookies and does not identify you.

3. Why we collect your data

We process your personal data for the following purposes and on the following legal bases:

We do not use your data for automated decision-making that produces legal effects or similarly significant effects. Analytics, when you consent, is used to understand traffic.

4. How long we keep your data

We retain your personal data for no longer than necessary for the purpose for which it was collected:

• Demo request data: retained for up to 24 months after our last interaction, or until you ask us to delete it.
• Email correspondence: retained for up to 24 months, unless a longer retention period is required by law.
• Website analytics: HubSpot cookies expire within 6 months. You can withdraw consent sooner via Cookie settings, which stops further tracking and removes those cookies. Ask us if you want analytics data already stored in HubSpot deleted.

After the retention period expires, your data is securely deleted or anonymised.

5. Who we share your data with

We do not sell your personal data. We may share it with trusted third parties in the following limited circumstances:

• Email / communication tools: we use third-party email services to manage correspondence. These processors are bound by data processing agreements.
• Scheduling tools: if we use a calendar or meeting scheduling tool to book your demo, that provider may process your name and email. We will always use GDPR-compliant providers.
• Website analytics: if you accept analytics cookies, HubSpot Ireland Limited processes that data for us from HubSpot's EU hosting. HubSpot acts as our processor under a data processing agreement.
• Legal requirements: we may disclose data if required by law or a competent authority.

All third-party processors are contractually obliged to handle your data securely and only for the purpose specified.

6. International data transfers

Where possible, we keep your data within the European Economic Area (EEA). If any of our processors transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) as approved by the European Commission.

7. Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: you can request a copy of the personal data we hold about you.
• Right to rectification: you can ask us to correct inaccurate or incomplete data.
• Right to erasure: you can request deletion of your data, subject to certain conditions.
• Right to restriction: you can ask us to restrict how we process your data in certain circumstances.
• Right to data portability: you can request your data in a structured, machine-readable format.
• Right to object: you can object to processing based on legitimate interest at any time.
• Right to withdraw consent: where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@biyu.world. We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at www.autoriteitpersoonsgegevens.nl.

8. Cookies

The HubSpot tracking script is included on every page. Analytics cookies are placed only after you choose Accept. Reject tells HubSpot not to identify you and removes any analytics cookies already stored. Your choice is stored in your browser's local storage so we do not ask on every page. That storage does not track you. You can change the choice at any time via Cookie settings in the footer. We do not use advertising cookies.

This consent is required under the Dutch Telecommunications Act (Telecommunicatiewet) and the GDPR before non-essential cookies are placed.

9. Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures include secure email communication and limiting access to personal data to those who need it.

10. Changes to this policy

We may update this Privacy Policy from time to time. The most current version will always be available at www.biyu.world/privacy. The "Last updated" date at the top of this page reflects when the policy was last revised. We encourage you to review this page periodically.

11. Contact

For any questions about this Privacy Policy or how we handle your data, please contact us:

• Email: info@biyu.world
• Post: BIYU B.V., Hoofdweg 1490, 2153 NA Nieuw-Vennep, the Netherlands