EN
NederlandsNL EnglishEN DeutschDE
Sign up

Heads up: this sales page is in English, but the portal itself is still in Dutch.

What we keep, and why

There are two kinds of data in Ordly: yours as a customer, and your buyers'. For the second kind we are not in charge, and that changes everything.

This version applies from 21 augustus 2026.

This is a translation, provided so you can read what you are agreeing to. If the English and the Dutch text differ, the Dutch version is the one that counts. Ordly is a Dutch company and Dutch law applies.

The short answer. We keep what is needed to handle your orders and create your invoices. We do not sell anything on, we do not track you, and there is no analytics service of any kind on our site or in your portal. What is there is listed below, by kind.

Your data

For this we are the controller: we decide what we keep and why.

WhatWhyHow long
Your company detailsName, address, chamber of commerce number, VAT number, IBAN.For as long as you are a customer, and seven years after that because the Dutch tax authorities require it of us.
Your email address and loginThe address you sign up with and an encrypted password.For as long as you are a customer. Gone within thirty days of cancelling.
Your bol keysClient id and client secret, encrypted with a key kept outside the backup.For as long as you are a customer. Gone immediately when you cancel.
Your orders and invoicesWhat you sold, to whom, and the invoices that followed.Seven years, because that is the retention period for your records. You can export everything before you stop.
What the portal didA log of what was fetched and sent, without the contents of emails.Ninety days. Long enough to work out what went wrong, short enough not to become an archive.

Your buyers' data

For this you are the controller and we are the processor. Bol lends you that data to handle the order; it is not yours and it is not ours. What that means is set out in the data processing agreement.

  • Name and town. Readable in the database, because you need to be able to search on it and it goes on the invoice.
  • Address, postcode and email address. Encrypted with AES-256-GCM, using a key that is separate per customer.
  • What was ordered. Item, quantity, amount. Needed for the invoice and the review email.

It sits in a database that exists only for your environment. There is no screen on which we can browse through your buyers, and the key that opens the encrypted fields is kept outside the backup. A stolen backup gets you nothing from those fields.

Who else sees it

  • Hetzner, in Germany: that is where the server runs. They do not process anything, they rent out the machine.
  • Your own mail service: review emails and invoices go through the service you set up, with your key. We have no copy of those emails beyond your own send log.
  • Mollie, for collecting your subscription. They see your payment details, not your buyers'.
  • Google or Apple, if you switch on notifications on your phone. They carry the notification but cannot read it: the contents are encrypted and no buyer's name is in it.

Nobody else. No ad network, no analytics service, no chat widget.

What you can ask for

You may ask what we hold about you, have it corrected, or have it deleted. Email service@ordly.nl; we reply within a week. If you think we are not doing it properly, you can complain to the Dutch Data Protection Authority.

If it concerns a buyer's data, that request belongs with you and not with us; you are the controller there. We will help you get at it.

If something does leak

Then we tell you within 24 hours of finding out, with what happened, which data it concerns and what we are doing about it. Also when it is small, and also when it was our fault.

Sign up