Privacy statement
We are careful with your data. This statement explains which personal data XLV processes when you visit xlv.nl or contact us, and why.
Last updated: 12 November 2026
1. Who we are
XLV is part of RPSales Inc. and is responsible for the processing of personal data through this website.
- Name: XLV, part of RPSales Inc.
- Address: Olgerweg 2-19, 9723 ED Groningen, the Netherlands
- Email: [email protected]
2. No cookies, no tracking
This website does not set any cookies and does not use analytics services, tracking pixels or advertising networks. All files, including the fonts, are served from our own server. The pages load nothing from other parties. Traffic to our server does pass through Cloudflare (see section 6).
The interactive parts, such as the website configurator, the price calculator and the animations, run entirely in your own browser. Whatever you select or enter there is not stored or sent.
3. The contact form
When you fill in the contact form, we process the data you provide. Our server sends your message directly as an email to [email protected]. The message is not stored in a database on the web server.
| Data | Name, email address, subject, message and the language of the page |
|---|---|
| Purpose | Answering your question and, if you wish, preparing a quote or agreement |
| Legal basis | Your request to be contacted (Art. 6(1)(b) GDPR) and our legitimate interest in answering questions (Art. 6(1)(f) GDPR) |
| Retention | As long as needed to handle your question. If you become a customer, we keep data for the duration of the agreement and as long as the law requires, for example 7 years for accounting records. |
4. Customers and invoices
If you are a customer, we keep your name, company name, address, email address and the services you use (such as domains, hosting and mailboxes), so we can send you an invoice once a year. Your invoice is on its own link on xlv.nl that cannot be guessed. That page uses no cookies and does not track you either.
If you pay online, you go to Stripe, our payment processor. Stripe processes your payment details under its own privacy policy. We only see whether and when the invoice was paid, not your card or bank details.
| Data | Name, company name, address, email address, services used, invoices and whether they have been paid |
|---|---|
| Purpose | Creating and sending invoices and processing payments |
| Legal basis | Performance of the contract (Art. 6(1)(b) GDPR) and our legal retention obligation (Art. 6(1)(c) GDPR) |
| Retention | As long as you are a customer, and invoices for 7 years after that for our accounts |
5. Spam protection
To prevent abuse of the form, our server briefly keeps your IP address in memory. This lets us limit the number of messages per sender. The IP address is not emailed to us, not written to disk and automatically forgotten after one hour at most.
The form also contains an invisible field that only spam bots fill in. No additional data about you is collected for this.
6. Technical data
With every visit, technically necessary data is processed, such as your IP address, the time and the page requested. For security and troubleshooting, the server may keep this data in log files. We keep these for 14 days at most. We do not use them to track visitors or build profiles.
7. Sharing with others
We never sell your data. We only share it with parties we need to run this website and our email, such as our hosting provider, our email provider, Cloudflare and (if you pay online) our payment processor Stripe. Cloudflare provides the secure connection (HTTPS) and protects the site against attacks; to do so, all traffic to xlv.nl passes through Cloudflare, which sees your IP address among other things. These parties may only process your data on our behalf and not for their own purposes. Beyond that, we only share data when required by law.
8. Security
The website only works over an encrypted connection (HTTPS). We collect no more data than necessary and do not store form messages on the web server.
9. Your rights
You have the right to access, correct or delete your data, to restrict its processing, to object to processing and to data portability. Send your request to [email protected]. We will respond within one month.
Not happy with how we handle your data? You can lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens. Of course, we would appreciate hearing from you first.
10. Changes
We may update this privacy statement, for example when the website changes. The date at the top shows when it was last updated.