Privacy policy
Version 1.0, 9 September 2026.
Who we are
Ripbase is a trade name of MoeskerGroup, Carstensdijk 77, 7916 RA Elim, the Netherlands, Chamber of Commerce number 97344567. For questions about your data, mail us at the address at the bottom of this page.
Two roles
Ripbase handles personal data in two roles, and this policy covers both:
- As controller, for the data of visitors to this site and of shop owners who have an account with us. That is what most of this page is about.
- As processor, for the data of buyers in the shops that run on Ripbase. There, the shop owner decides what happens with the data and is your first point of contact. What we do with that data is agreed with the shop owner in the data processing annex of our terms of service, summarised below.
Visitors of this site
When you visit ripbase.com we process:
- Server logs: your IP address, the time, the page you asked for, the response and your browser type. We keep these for ninety days at most, to keep the site secure and to fix faults.
- A session cookie and a security cookie, needed for forms and logging in. See the cookie page.
- What you send through the contact form: your name, e-mail address, the message, and the shop or channel you mention. We keep it for twelve months so we can follow up, then delete it, unless it became part of a shop account.
We use no analytics, advertising or tracking services on this site. The fonts on this site are loaded from Google Fonts; that request shares your IP address with Google, who use it only to serve the font.
The legal basis is our legitimate interest in running and securing a website, and for the contact form, taking steps at your request before a contract.
Shop owners
If you open a shop on Ripbase we process:
- Account details: your name, e-mail address, password (hashed), the people you invite, and your login history.
- Company details: trade name, address, Chamber of Commerce and VAT numbers, the contact details you show in your shop.
- Billing: the plan you are on, invoices, and the status of your payments to us. The payment itself is handled by the payment provider named on the invoice; we do not see your card or bank details.
- Usage: what happens in your admin, in logs we use for security, support and to fix faults. Ninety days at most, except audit trails that are part of your shop's own records.
- Support: what you write to us by e-mail, for as long as needed to help you and to see what was agreed.
The legal bases are the contract we have with you, our legal duties (invoicing, tax records) and our legitimate interest in keeping the platform secure and improving it.
We send you e-mail about your shop: invoices, security notices, changes to the service and these terms. We do not send marketing mail unless you asked for it, and you can opt out of that at any time.
Buyers in a shop
If you buy in a shop that runs on Ripbase, the shop owner is the controller of your data. They decide what is collected and why, and their privacy policy applies. Ripbase hosts and processes that data on their behalf: your name, address, e-mail, phone number, orders, payment status, what you keep in storage, and the account you may create.
We use it only to run the shop for its owner: showing your orders, sending the shop's order mails, producing shipping labels and invoices, and supporting the shop owner. We do not use buyer data for our own purposes and never for advertising.
For questions or requests about your data, contact the shop. If you cannot reach them, mail us and we will help.
Who receives data
We share data only with parties we need to run the service, under a contract that binds them to confidentiality and security:
- Hosting and backups: servers in the European Union.
- E-mail delivery: the provider that sends our mail and the mail the shops send.
- Payment providers: for shop owners' subscription payments; and, for shops, the provider connected to the shop (such as Mollie or Stripe) under the shop owner's own contract.
- Shipping: MyParcel and the carriers behind it, for the labels a shop creates.
- Sign-in providers: Google and Twitch, only if a buyer chooses to sign in with them, and only the name and e-mail address they share.
We do not sell data and do not share it for third-party marketing. We disclose data to authorities only when the law obliges us to.
Transfers outside the EU
Data is stored in the European Union. Where a provider we use processes data outside the EU, we rely on an adequacy decision or on standard contractual clauses, and on additional measures where needed.
How long we keep data
| Data | Kept for |
|---|---|
| Server and security logs | 90 days |
| Contact form messages | 12 months |
| Shop owner account | until 30 days after the shop ends |
| Invoices and tax records | 7 years (legal requirement) |
| Shop data (buyers, orders) | until 30 days after the shop ends, then deleted |
| Backups | overwritten within the normal backup cycle, at most 35 days |
Security
Connections are encrypted (TLS), passwords are hashed, secrets such as payment keys are stored encrypted, access is limited to people who need it, and we apply security updates promptly. No system is perfect; if a breach affects you, we tell you and, where required, the data protection authority.
Your rights
You can ask us for access to your data, to correct it, to delete it, to limit its use, to receive it in a usable format, and to object to processing based on our legitimate interest. Mail us and we respond within a month. Shop owners can see and change most of their data in the admin themselves.
If you are unhappy with how we handle your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in your own country.
Children
Ripbase is for businesses. Shops on Ripbase decide their own age policy; some products they sell may not be suitable for minors, and the shop owner is responsible for that.
Changes
We update this policy when the service or the law changes. The version and date at the top tell you which one applies. A material change is announced to shop owners by e-mail.