Privacy Policy

1 Introduction

Trevand ("we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website at trevand.com, interact with us via Discord, or use any of our Services.

Trevand is a sole proprietorship (eenmanszaak) registered in the Netherlands (KVK: 96652101) and acts as the data controller for personal data processed in connection with our Services. This policy is compliant with the General Data Protection Regulation (GDPR / AVG) and applicable Dutch data protection law.

2 Data We Collect

2.1 Data You Provide Directly

We may collect the following personal data when you contact us or use our Services:

• Name and/or business name
• Email address
• Discord username and/or user ID
• Payment information (processed via third-party payment providers; we do not store card details)
• Project details, messages, and communications you send us

2.2 Data Collected Automatically

When you visit trevand.com, we may automatically collect:

• IP address
• Browser type and version
• Pages visited and time spent
• Referring URL

This data is collected via server logs and, where applicable, cookies or analytics tools. Please refer to our Cookie Policy for more detail.

2.3 Discord Data

When you interact with us via Discord (e.g., placing a service request, using our bots, or logging in via Discord OAuth), we may process your Discord username, user ID, and message content to the extent necessary to fulfil your request. Please note that Discord also processes your data in accordance with their own Privacy Policy.

3 Legal Basis for Processing

We process your personal data on the following legal bases under GDPR Article 6:

• Contract (Art. 6(1)(b)): Processing is necessary to perform a contract with you or to take steps at your request before entering into a contract (e.g., delivering hosting services).
• Legitimate Interests (Art. 6(1)(f)): Processing is necessary for our legitimate business interests, such as improving our Services and maintaining security, where these interests are not overridden by your rights.
• Legal Obligation (Art. 6(1)(c)): Processing is necessary to comply with applicable law (e.g., tax record-keeping obligations under Dutch law).
• Consent (Art. 6(1)(a)): Where we rely on your consent (e.g., for non-essential cookies or marketing communications), you may withdraw your consent at any time.

4 How We Use Your Data

We use your personal data for the following purposes:

• Providing and managing the Services you have requested
• Communicating with you about your project or enquiry
• Processing payments and maintaining financial records
• Improving and securing our website and Services
• Complying with legal obligations (e.g., tax administration)
• Handling complaints or disputes

5 Data Sharing

We may share your personal data with the following categories of third parties, only to the extent necessary:

• Payment processors: To process transactions securely (e.g., Stripe, PayPal, or similar providers with their own privacy policies and GDPR compliance).
• Hosting infrastructure providers: Our servers may be hosted with third-party providers (e.g., VPS or cloud providers) who process data on our behalf under data processing agreements.
• Legal authorities: If required by law or to protect our rights (e.g., in response to a court order or regulatory request).

We do not share your data with advertisers or marketing platforms.

6 International Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place in accordance with GDPR Chapter V (e.g., Standard Contractual Clauses or adequacy decisions). Please contact us if you require further information about specific transfers.

7 Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy, or as required by law. Specifically:

• Client and project data: retained for 7 years after the end of the business relationship (in line with Dutch tax record-keeping obligations under Art. 52 AWR).
• Communication records (email, Discord): retained for up to 2 years after the last interaction, unless longer retention is required for a contractual or legal reason.
• Website log data: retained for a maximum of 12 months.

After the applicable retention period, data is securely deleted or anonymised.

8 Your Rights

Under the GDPR, you have the following rights with respect to your personal data. To exercise any of these rights, contact us using the details in Section 11. We will respond within one month of receiving your request.

9 Cookies

Our website may use cookies and similar tracking technologies. Functional cookies (necessary for the website to operate) are placed without consent. Non-functional cookies (e.g., analytics) are only placed with your prior consent via our cookie banner.

You can manage or disable cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the website. For full details, see our Cookie Policy.

10 Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include access controls, secure communication protocols (HTTPS), and regular review of our security practices.

Despite our efforts, no method of transmission over the internet is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) within 72 hours and, where required, notify affected individuals without undue delay.

11 Contact & Complaints

If you have questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data, please contact us:

You also have the right to lodge a complaint with the Dutch supervisory authority:

12 Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated policy will be published on trevand.com with a revised effective date. We encourage you to review this page periodically. For significant changes, we will make reasonable efforts to inform active clients directly.