Privacy Policy

Last updated: [TODO: publish date]. This policy describes how RPS Legal B.V., trading as Basecamp Europe ("Basecamp Europe", "we", "us"), processes personal data when you use our relocation and compliance-tracking platform.

Who we are

Basecamp Europe is a registered trading name of RPS Legal B.V.

Summary

We process personal data to help you plan a move to the Netherlands, track document requirements, and monitor Schengen, tax-residency, and Dutch naturalization compliance for you and your household. You have rights under the GDPR including access, correction, erasure, and complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

1. Who we are

Basecamp Europe is a Netherlands-based product of RPS Legal B.V., providing software to help individuals and families relocating to the Netherlands manage their documents and ongoing residency/tax compliance. We act as data controller for account, household, and platform data. Legal entity: RPS Legal B.V.. Privacy inbox: info@rpsgr.com. Basecamp Europe is a registered trading name of RPS Legal B.V.

2. Data we collect

Identity & contact: name, email, citizenship
Household & immigration data: household member details, permit type (DAFT/HSM/Blue Card/Orientation Year/family reunification), permit issue dates, self-reported BRP registration status
Travel data: trip entry/exit dates and countries, used to calculate Schengen, tax-residency, and naturalization-absence status
Documents: uploaded files, which may include passport scans, birth/marriage certificates, and other identity documents — treated as sensitive by design
Payment data: handled directly by Stripe; we store subscription status, not card details
Technical data: IP address, device/browser, session logs

3. Legal basis

Contract — providing the checklist, document vault, and compliance tracking you sign up for
Legitimate interests — platform security, abuse prevention, service improvement
Consent — optional marketing communications, non-essential cookies
Legal obligation — responding to lawful requests from authorities

4. How we use data

We use household and travel data solely to calculate and display your compliance status against the rules you're tracking (Schengen 90/180, Dutch naturalization absence rules, generic tax-residency thresholds). All outputs are guidance, not legal or immigration advice — you or a qualified advisor remain responsible for verifying anything before relying on it for an official application or filing. Where a status crosses into risk, we surface an option to contact a human advisor; we do not make immigration decisions on your behalf.

5. Third parties / sub-processors

Supabase — database, authentication, and document storage
Stripe — payment processing
Google — optional sign-in (only if you choose this method)
[TODO: confirm transactional email provider once enabled] — transactional email

We require sub-processors to meet appropriate data protection standards. A current list is available on request.

6. International transfers

Where we or our sub-processors transfer personal data outside the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses. We aim to keep hosting EU-based where feasible — confirm and update this section once your Supabase project's actual region is provisioned.

7. Retention

Active account and household data: for the duration of your account plus a short wind-down period
Uploaded documents: until you delete them or close your account, subject to any legal hold
Security/access logs: 12–24 months
Backups: overlapping backup cycles per our hosting provider's defaults

8. Your rights

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent — contact info@rpsgr.com to exercise any of these. We will respond within one month in most cases. You may also complain to the Autoriteit Persoonsgegevens (the Dutch supervisory authority) at autoriteitpersoonsgegevens.nl.

9. Security

Data encrypted in transit and at rest, row-level access controls so users only ever see their own household's data, and role-based access to production systems. No system is perfectly secure; we will follow applicable legal requirements if we become aware of a breach requiring notification.

10. Cookies

See our separate Cookie Policy.

11. Children

Basecamp Europe is intended for adults managing their own or their family's relocation. We do not knowingly collect data directly from children; household members who are minors are added by a parent or guardian acting as the account holder.

12. Changes

We may update this policy; material changes will be flagged with a new "last updated" date and, where significant, an in-product notice.

13. Contact & complaints

info@rpsgr.com. Dutch supervisory authority: Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl.