Who is responsible
Gottmer Webshops · KVK 73444111 · btw-id NL002205179B50
Vogelzand 14, 3846 JM Harderwijk, Nederland
hello@firmtrove.com
Security and abuse prevention
We protect accounts and prevent bypassing usage limits based on our legitimate interest in keeping the service secure. We compare limited, pseudonymised signals: keyed hashes (HMAC) of IP addresses, normalised email addresses, business email domains and a card fingerprint verified by the payment provider. These checks do not store a full card number. The necessary security cookie ft_abuse_device contains a random, signed device key and is valid for at most 365 days (31,536,000 seconds). It is not used for analytics or advertising. Security incidents are cleaned up after 30 days. Exceeding rate limits first throttles requests. The third renewed violation locks the account until manual review; it does not unlock automatically. Email hello@firmtrove.com to request a review or object to this processing.
Website visits
firmtrove.com is hosted on Cloudflare Pages. Cloudflare receives your IP address, browser details and the requested address to deliver and protect the website. Google Analytics measures visits without analytics cookies before your choice and after Decline. After Allow, analytics cookies may be set. Advertising consent stays off. We remember your choice for 12 months; you can change it at the bottom of every page.
Microsoft Clarity measures visits, clicks and scrolling without analytics cookies until you allow them. After Allow, _clck and _clsk may be set. Advertising consent stays off. Text and forms are masked. On the app, operator console and links with personal details, Clarity runs only in an isolated frame at a fixed address. That frame receives no page content, title or address and cannot use cookies or browser storage. Decline removes analytics cookies; cookieless measurement continues. You can change your choice at the bottom of every page. For processing and retention, see the Microsoft Privacy Statement and Clarity retention information.
Your account
The explorer runs at app.firmtrove.nl, on our own equipment in the Netherlands behind a Cloudflare Tunnel. When you sign up we store your name, company, email address and a hashed derivative of your password, or the email address and name Google passes on when you log in with Google. We also keep your monthly search and export usage, your export files, your access keys (hashed), team invitations, invoices and messages you send through the contact form. Verification and recovery emails are sent through Google Workspace from hello@firmtrove.com. In the first weeks after you sign up we also send a few short mails explaining FirmTrove; you can unsubscribe with one click at the bottom of each mail. We use this data to deliver the service and prevent abuse, based on our agreement with you and our legitimate interest.
Company data from other sources
The explorer contains company information we observe ourselves on company websites and information from official registers, open data and commercial data suppliers. For sole traders and contact details, this information may concern a natural person. FirmTrove independently determines why and how this information is processed for the information service and is the controller for that processing. Whether a field is delivered depends on applicable use rights, privacy and objections, security, suppression, freshness and account rights; a broad source or privacy label does not decide this by itself. Where required, we provide attribution and other notices. We process the information on the basis of our legitimate interest in providing a business information service and use this statement to inform data subjects. You may object and request correction or removal through the correction page.
Retention: every item in the explorer has a shelf life. What we observe about a decision maker on a company website (name, role, email address) is shown for up to 180 days after that observation, other company information for 60 days to 2 years depending on the kind of item. After that we no longer show or deliver it until a source confirms it again. Contact persons and their email addresses are deleted no later than 24 months after a source last showed them. If you object, we delete your data straight away and do not collect it again.
Are you listed? Check it yourself and remove yourself in one click. Why we show these details is set out in our assessment.
When you email us
We use your email address, name and message to respond to your question. Our mailbox uses Google Workspace. Please send only information needed for your question. We review resolved conversations for continued necessity and delete them once there is no business or legal reason to keep them.
Providers and transfers
We work with these providers: Cloudflare (hosting and security), Google Workspace (email), Google Analytics (cookieless visitor statistics, cookies after Allow; Google Ireland) and Mollie (payments; the Netherlands). Cloudflare and Google may process information outside the European Economic Area. Their privacy information describes locations, retention and transfer safeguards: Cloudflare, Google Workspace, Google Analytics, Mollie.
Your rights
You can email us to request access, correction or deletion, restrict processing or object to it. Request deletion of your account from your account. We then close it within thirty days, remove your name, company and email address and confirm by email. We keep administrative evidence only while needed for security, accountability or a legal retention duty and remove or minimise it when that need ends. If an account record is actually deleted, its linked acceptance receipt is deleted too. Deleted information can remain in restricted backups until those copies are replaced through backup rotation. Before restored data becomes available, we reapply current deletions and suppression. We respond within 48 hours and complete a request within one month. You can also complain to the Autoriteit Persoonsgegevens.
Email a request