Privacy Policy

Last updated: 20 February 2026

This Privacy Policy explains how Maes BV ("we", "us", "our"), operating MatchKit.io, collects, uses, and protects your personal data. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Belgian data protection legislation.

1. Data Controller

The data controller responsible for your personal data is:

Maes BV
Oudesteenweg 33
2060 Antwerpen, Belgium
VAT: BE0805796422
Email: hello@matchkit.io

2. Personal Data We Collect

We collect the following categories of personal data:

Account data: Email address, name (if provided), and account credentials when you create an account.
Payment data: Payment information is processed securely by our payment processor, Stripe. We do not store your full credit card number. We receive and store transaction identifiers, payment status, billing address, and the last four digits of your card for reference.
Uploaded content: Logo files (PNG, SVG, JPG) that you upload to our service. These files may contain metadata (e.g. EXIF data).
Usage data: When you consent to analytics cookies, we collect anonymised browsing data such as pages visited, time on site, device type, browser, and approximate geographic location via Google Analytics.
Technical data: IP address, browser type, operating system, and device information collected automatically when you visit our website.
Communication data: Any information you provide when you contact us via email or other channels.

3. Purposes and Legal Bases

We process your personal data for the following purposes, each with a corresponding legal basis under GDPR Article 6:

Purpose	Data	Legal Basis
Provide and operate the service (account creation, component generation, downloads)	Account data, uploaded content	Performance of contract (Art. 6(1)(b))
Process payments	Payment data	Performance of contract (Art. 6(1)(b))
Respond to your enquiries and provide support	Communication data, account data	Performance of contract (Art. 6(1)(b))
Website analytics and performance monitoring	Usage data (via cookies)	Consent (Art. 6(1)(a))
Comply with legal and tax obligations (e.g. invoicing, accounting records)	Payment data, account data	Legal obligation (Art. 6(1)(c))
Protect against fraud and ensure security of our service	Technical data, account data	Legitimate interest (Art. 6(1)(f))
Improve and develop our service	Usage data, technical data	Legitimate interest (Art. 6(1)(f))

4. Recipients and Third Parties

We share your personal data with the following third-party service providers, acting as data processors on our behalf:

Stripe, Inc. (United States) — Payment processing. Stripe processes your payment data on our behalf. Stripe is certified under the EU-US Data Privacy Framework. Stripe Privacy Policy
Google LLC (United States) — Website analytics via Google Analytics (only when you consent to analytics cookies). Google is certified under the EU-US Data Privacy Framework. Google Privacy Policy
Vercel Inc. (United States) — Website hosting and content delivery. Vercel processes technical data (IP addresses, request logs) as part of hosting our service. Data transfers are covered by Standard Contractual Clauses. Vercel Privacy Policy

We do not sell, rent, or trade your personal data to any third party. We only share data as described above, or when required by law.

5. International Data Transfers

Some of our service providers are located in the United States. We ensure adequate protection for any transfer of personal data outside the European Economic Area through the following mechanisms:

The EU-US Data Privacy Framework (for providers certified under the framework, such as Stripe and Google)
Standard Contractual Clauses (SCCs) approved by the European Commission

You may request a copy of the relevant safeguards by contacting us at hello@matchkit.io.

6. Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this policy:

Account data: Retained for the duration of your account. Deleted within 30 days of account deletion request.
Payment and invoicing records: Retained for 7 years to comply with Belgian accounting and tax obligations (Article 60 of the Belgian VAT Code).
Uploaded logos: Retained for the duration of your account or until you delete them. Permanently deleted within 30 days of deletion request or account closure.
Analytics data: Retained in accordance with Google Analytics data retention settings (default: 14 months). We have configured Google Analytics to anonymise IP addresses.
Communication data: Retained for up to 2 years after resolution of the enquiry, unless a longer retention period is required by law.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15) — You have the right to obtain confirmation of whether we process your personal data, and to receive a copy of that data.
Right to rectification (Art. 16) — You have the right to have inaccurate personal data corrected without undue delay.
Right to erasure (Art. 17) — You have the right to request deletion of your personal data, subject to legal retention obligations.
Right to restriction of processing (Art. 18) — You have the right to request that we restrict the processing of your data in certain circumstances.
Right to data portability (Art. 20) — You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to object (Art. 21) — You have the right to object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds.
Right to withdraw consent (Art. 7(3)) — Where processing is based on consent (e.g. analytics cookies), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal. You can withdraw cookie consent via the cookie settings on our website.

To exercise any of these rights, please contact us at hello@matchkit.io. We will respond to your request within one month, as required by the GDPR. In complex cases, this period may be extended by two additional months, in which case we will inform you.

8. Right to Lodge a Complaint

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Belgian supervisory authority:

Gegevensbeschermingsautoriteit (GBA)
Drukpersstraat 35, 1000 Brussel
Phone: +32 2 274 48 00
Email: contact@apd-gba.be
Website: www.gegevensbeschermingsautoriteit.be

9. Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects you, as described in GDPR Article 22.

10. Children

Our service is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at hello@matchkit.io and we will promptly delete such data.

11. Cookies

We use cookies on our website. For full details about which cookies we use and how to manage your preferences, please see our Cookie Policy.

12. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), secure hosting infrastructure, access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on our website or by sending you an email. The "Last updated" date at the top of this policy indicates when it was last revised. We encourage you to review this page periodically.

14. Contact

For any questions about this Privacy Policy or our data processing practices, please contact us:

Maes BV
Oudesteenweg 33, 2060 Antwerpen, Belgium
Email: hello@matchkit.io
VAT: BE0805796422

Terms Cookies