Legal

Privacy Policy

Offura handles your personal data with care. This policy explains what data we collect, how we use it and what rights you have.

Version: 1.0 • Effective date: 14 June 2026

1. Controller

The controller for the processing of your personal data is:

Offura (part of ICT for ALL / HFA)
Email: support@offura.cloud
Website: www.offura.cloud

2. What data we process

We process the following categories of personal data:

  • Account data: name, email address, password (encrypted), company name and company registration details.
  • Client data: name, contact details and company registration details of the clients you enter into Offura. You are the controller for this data; Offura acts as the processor.
  • Transaction data: information about your subscription and payments, including amount, date and payment method.
  • Usage data: IP address, browser type, page views and other technical data required for the operation and security of the platform.
  • Communication data: messages you send via the contact form or by email.

3. Legal basis for processing

We process personal data on the following legal bases:

  • Performance of a contract: delivering the Offura service after your registration.
  • Legal obligation: retaining financial data in accordance with statutory retention periods.
  • Legitimate interest: platform security, fraud prevention and customer service.
  • Consent: for analytical cookies and session insights (see article 8).

4. Purpose of processing

We use your data solely for the following purposes:

  • Creating and managing your account.
  • Providing the Offura platform services.
  • Billing your subscription.
  • Support via email and the contact form.
  • Security and fraud prevention.
  • Complying with legal obligations.

5. Retention periods

We do not retain your personal data longer than necessary:

  • Account data: as long as your account is active, plus a maximum of 30 days after a deletion request.
  • Financial data: 7 years based on statutory retention periods.
  • Support communications: maximum 2 years after closing the correspondence.
  • Log data: maximum 90 days.

6. Sharing with third parties

We never sell your personal data to third parties. We may share data with:

  • Processors: external parties we engage for hosting the application, sending email and processing payments. Data processing agreements compliant with GDPR have been concluded with all these parties.
  • Payment service providers: for processing your subscription payment (via iDEAL or credit card). The payment provider receives only the data necessary for payment processing.
  • Legal obligations: when required by law to provide data to competent authorities.

7. Transfers outside the EU

All personal data is stored on servers located within the European Union. We do not transfer your data to countries outside the EU/EEA, unless legally required or you have explicitly consented.

8. Cookies

Offura uses necessary functional storage for basic functionality, such as remembering your language preference and cookie preference. In addition, Google Analytics and Microsoft Clarity may be used to measure visitor statistics, click behaviour and session information. These scripts are only loaded after you consent.

Google Analytics is used with consent settings, where analytical storage is denied by default until consent is given. Microsoft Clarity is only loaded after consent. You can change your choice later via the Cookie choice button at the bottom of the website.

Examples of cookies and storage:

  • Session cookies: to keep you logged in during your session.
  • Preference cookies: to store your language preference (NL/EN) and cookie notice response.
  • Analytical cookies: to measure website visits and usage patterns after your consent.

9. Your rights

Under the GDPR you have the following rights:

  • Right of access: you can request what data we process about you.
  • Right to rectification: you can ask us to correct inaccurate data.
  • Right to erasure ("right to be forgotten"): you can ask us to delete your data, unless legal retention obligations apply.
  • Right to restriction: you can have the processing of your data restricted in certain situations.
  • Right to data portability: you can request your data in a machine-readable format.
  • Right to object: you can object to processing based on legitimate interest.

You can exercise your rights by emailing support@offura.cloud. We respond to your request within 4 weeks.

10. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. This includes password encryption, HTTPS connections for all pages, access controls and regular backups.

11. Complaints

If you have a complaint about how we handle your personal data, you can contact us at support@offura.cloud. You also have the right to lodge a complaint with the supervisory authority. For the Netherlands:

Autoriteit Persoonsgegevens (Dutch Data Protection Authority)
Website: www.autoriteitpersoonsgegevens.nl

12. Changes to this policy

We may update this privacy policy from time to time. For material changes we will inform you by email or a notice within the application. The effective date at the top of this document shows when the policy was last updated.

13. Contact

For questions about this privacy policy or your personal data, please contact us at:
Email: support@offura.cloud
Or via the contact form on our website.