1. Who We Are
Tapze ("we", "us", "our") operates the website www.tapzecard.com and provides NFC business cards and digital profile services. We are the data controller responsible for your personal data under the General Data Protection Regulation (GDPR).
Contact our data team at: support@tapzecard.com
2. Data We Collect
We collect the following categories of personal data:
Order and contact data
- Full name, email address, phone number
- Shipping address (street, city, postal code, country)
- Company name (optional)
- Instagram or WhatsApp handle (optional, for order coordination)
- Order notes and preferences
Account and profile data
- Username, password (hashed — we never store plain-text passwords)
- Profile information you choose to publish: name, job title, bio, contact details, social links, profile photo
- Custom links you add to your profile
Usage and analytics data
- Page views and profile tap events (associated with your card)
- IP addresses (used to count unique visitors — not stored permanently)
- Device type and browser information
3. How We Use Your Data
We use your data for the following purposes:
- Fulfilling and managing your orders, including shipping and delivery coordination
- Communicating with you about your order, account, and support requests
- Operating and displaying your digital profile when someone visits your profile page
- Providing you with analytics about your profile views and card taps
- Improving our products and website experience
- Complying with legal and regulatory obligations
4. Legal Basis for Processing (GDPR)
We process your data on the following legal bases:
- Contract performance — processing necessary to fulfil your order and provide the digital profile service
- Legitimate interests — analytics and service improvement, provided these do not override your rights
- Legal obligation — where required by applicable law
- Consent — for optional communications such as updates or newsletters (you can withdraw consent at any time)
5. Data Sharing
We do not sell your personal data. We share data only where necessary:
- Hosting and infrastructure providers (to operate the website and database)
- Shipping and logistics partners (to deliver your order)
- Payment providers (to process payments — they handle their own data under their own privacy policies)
- Legal authorities, if required by law or to protect our rights
Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).
6. Data Retention
- Order records — retained for 7 years to comply with Dutch tax and accounting obligations
- Account data — retained for the lifetime of your account, then deleted within 90 days of account closure
- Profile data — deleted when you request deletion or close your account
- Analytics data — aggregated data retained indefinitely; raw IP data retained for no more than 90 days
7. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of access — you can request a copy of the personal data we hold about you
- Right to rectification — you can ask us to correct inaccurate data
- Right to erasure — you can request deletion of your data in certain circumstances
- Right to restrict processing — you can ask us to limit how we use your data
- Right to data portability — you can request your data in a machine-readable format
- Right to object — you can object to processing based on legitimate interests
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, email support@tapzecard.com with the subject line "Data Request". We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at www.autoriteitpersoonsgegevens.nl.
8. Cookies
We use cookies to operate the website and remember your session. For full details on the cookies we use and how to manage them, see our Cookie Policy.
9. Security
We implement appropriate technical and organisational measures to protect your personal data, including encrypted storage, HTTPS, secure password hashing, and access controls. No transmission over the internet is completely secure, and we cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated date. For material changes, we will notify users via email or a prominent notice on the website.
11. Contact and Data Deletion Requests
To request access to, correction of, or deletion of your personal data, please email us at support@tapzecard.com with the subject line "Data Request" or "Data Deletion Request". We aim to respond within 30 days.
You can also visit our Contact page to submit a request directly.