Privacy Policy

1. Who we are

ISLA is operated from the Netherlands. We are the data controller for the personal data processed through the ISLA platform (“the Service”). You can reach us at guido@dig-isla.com.

2. What data we collect

We collect the following personal data:

• Account data: email address, username, display name, password (hashed)
• Profile data: bio, city, country, profile photo (optional)
• Collection data: records you add, shops you visit, dig posts and photos
• Usage data: pages visited, features used, search queries
• Waitlist data: email address submitted via the waitlist form
• Device data: browser type, operating system, IP address (for security)

3. Legal basis for processing (GDPR)

We process your data on the following legal grounds:

• Contract performance: to provide the Service (Article 6(1)(b) GDPR)
• Legitimate interest: to improve the Service, prevent fraud, ensure security (Article 6(1)(f) GDPR)
• Consent: for marketing communications and waitlist sign-ups (Article 6(1)(a) GDPR)

4. How we use your data

• To create and maintain your account
• To display your collection and activity to other users (based on your visibility settings)
• To provide personalized recommendations (taste matching, similar collectors)
• To send service-related notifications
• To improve and develop the Service
• To respond to support requests

5. Third-party services and data sharing

We do not sell your personal data. ISLA uses the following third-party processors and services. Each handles data only as necessary to provide its function and is bound by its own privacy policy and (where applicable) a data processing agreement.

We may also share data with:

• Other users: your public profile, collection, and posts are visible based on your privacy settings
• Legal obligations: when required by Dutch or EU law, regulation, or court order

6. International transfers

Your data may be processed outside the EEA (e.g., hosting providers in the US). Where this occurs, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses or adequacy decisions by the European Commission.

7. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it. Waitlist email addresses are retained until the Service launches or you request removal.

8. Your rights (GDPR)

Under the GDPR, you have the right to:

• Access: request a copy of your personal data
• Rectification: correct inaccurate data
• Erasure: request deletion of your data (“right to be forgotten”)
• Data portability: receive your data in a structured, machine-readable format
• Restriction: restrict processing of your data
• Object: object to processing based on legitimate interest
• Withdraw consent: where processing is based on consent, withdraw it at any time

To exercise these rights, contact guido@dig-isla.com. We will respond within 30 days.

9. Cookies

ISLA uses essential cookies for authentication and session management. We also load embedded content (Google Maps, YouTube) which may set their own cookies when you interact with them. For a full list of cookies and providers, see our Cookie Policy.

You can change your cookie preferences at any time via the cookie banner or the link in the footer.

10. Children

ISLA is not directed at children under 16. We do not knowingly collect personal data from children under 16. If we learn that we have collected data from a child under 16, we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or email. The “last updated” date at the top indicates the latest revision.

12. Supervisory authority

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

13. Contact

For questions about this Privacy Policy, contact us at guido@dig-isla.com.