Privacy Policy

Dutch Ruling ("we", "us", "our") operates the website dutchruling.com and provides an eligibility-checking tool and related advisory services for the Dutch 30% ruling. This Privacy Policy explains what personal data we collect, why, and what rights you have. We are the data controller. For privacy questions or to exercise your rights, contact help@dutchruling.com.

What we collect

Eligibility checker answers: the responses you give in the quiz, saved anonymously with a random session identifier. Contact details: if you submit a request, we collect your name, email, phone number, and the situation details you provide. Feedback: thumbs up or down and any comment you submit. Result email requests: your email address if you ask us to email your result. Employer enquiries: company name, contact name, email, phone, and enquiry details if you use the employer form. Technical data: a random session identifier stored in your browser, and basic information your browser sends automatically.

Why we collect it and our legal basis

To provide the eligibility result and our services: performance of a contract or steps prior to a contract. To respond to your enquiries: legitimate interest and, where relevant, contract. To improve the tool through anonymous completion data: legitimate interest. To send emails you request: consent.

Who we share it with

We do not sell your data. We share it only with service providers who help us operate: Supabase (database hosting), Resend (email delivery), and our payment provider (added when paid services go live, for payment processing). These providers process data on our behalf under data processing agreements. Some may process data outside the EU, and where they do, appropriate safeguards such as Standard Contractual Clauses apply.

How long we keep it

Anonymous eligibility completions are kept for product analytics and reviewed periodically. Contact and enquiry data is kept as long as needed to handle your request and to meet our legal and accounting obligations. You can ask us to delete your data at any time.

Your rights

Under the GDPR you have the right to access, correct, delete, restrict, or object to the processing of your data, and the right to data portability. Where processing is based on consent, you can withdraw consent at any time. To exercise any right, email help@dutchruling.com. We respond within one month.

Cookies and local storage

We use minimal cookies and browser local storage. See our Cookie Policy for details.

Data security

We use reputable providers and reasonable technical measures to protect your data. No system is completely secure, but we take protection seriously.

Changes

We may update this policy. The "last updated" date shows the latest version.

Complaints

If you believe we have mishandled your data, please contact us first at help@dutchruling.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).