Privacy Policy
Version: 1 June 2026
1. Privacy Policy — Webshopmarket.com
This privacy policy explains how AK OPERATIONS B.V. processes personal data in connection with Webshopmarket.com and its associated domains, subdomains, web applications, accounts, listings, data rooms, communication, bidding, payment and verification functions. This privacy policy applies to visitors, users, buyers, sellers, contact persons, representatives, advisers and other persons whose personal data is processed via or in connection with the Platform.
1.1 Data Controller
The data controller for the processing of personal data via the Platform is:
AK OPERATIONS B.V. Address: Herenweg 64, unit 43, 3602 AR, Maarssen, the Netherlands Chamber of Commerce number: 42034947 Privacy email address: support@webshopmarket.com Website: Webshopmarket.com
Where buyers and sellers exchange personal data with each other outside the Platform's own functionalities, for example in the context of due diligence, sales documentation or transfer of a webshop, they may be independent data controllers in that regard. AK OPERATIONS is not responsible for processing carried out independently by a user outside AK OPERATIONS's own services.
1.2 Core of the service
AK OPERATIONS operates a digital and facilitating platform on which sellers can present webshops and on which buyers can view and request information, communicate with sellers, make bids and prepare a possible transaction. AK OPERATIONS is in principle not a party to the ultimate purchase agreement between buyer and seller and gives no warranty regarding the content, accuracy, completeness, value, transferability or suitability of webshops offered via the Platform.
Personal data is processed to the extent necessary for the operation, security, management, improvement and enforcement of the Platform, for communication with users, for verification, for payment and subscription settlement, for fraud prevention and for compliance with statutory obligations.
1.3 Which personal data do we process?
Account and registration data: name, company name, position, email address, telephone number, password and authentication data, account type, user ID, preferences and account settings.
Company and verification data: Chamber of Commerce number, VAT number, registered address, invoice address, legal form, representatives, UBO information, authority information, payment and onboarding status.
Listing and sales process data: information provided by sellers about webshops, contact persons, sales documentation, screenshots, explanations, status data, Sale Confirmations, bids, messages and Data Room activities.
Buyer data: search behaviour within the Platform, viewed listings, information requests, bids, expressions of interest, Data Room requests, financing or suitability information where requested.
Communication data: messages via the Platform, emails, support requests, notifications, complaints, appeals and enforcement correspondence.
Payment and transaction data: subscriptions, payment status, invoice data, payment method information, Stripe Connect data, platform commission data, chargebacks, refunds and payout information. Full payment card details are in principle processed by the payment service provider and not stored by AK OPERATIONS.
Technical data: IP address, browser, device, operating system, log files, session data, error messages, security logs, cookie IDs, consent status and usage statistics.
Special or sensitive information: AK OPERATIONS does not routinely request special categories of personal data. Users may not upload or share such data unless this is strictly necessary, lawful, proportionate and agreed in advance.
1.4 Purposes and legal bases
Visiting and technical operation of the Platform: legal basis: legitimate interest; performance of contract. Making available, securing, testing, maintaining and improving the website, accounts, listings, search functions, communications and other platform functionalities.
Account registration and user management: legal basis: performance of contract; legitimate interest. Creating, managing, securing, supporting and where applicable blocking or terminating accounts.
Verification, admission and risk assessment: legal basis: legitimate interest; statutory obligation; performance of contract. Assessing identity, authority, business capacity, reliability, fraud, payment, integrity and security risks.
Listings and sales process: legal basis: performance of contract; legitimate interest. Placing, moderating, structuring, displaying, categorising, promoting and managing listings and sales information.
Communication between users: legal basis: performance of contract; legitimate interest. Facilitating, retaining, moderating and enforcing communications for sales processes, support, evidence gathering and fraud prevention.
Bids, Sale Confirmations and transaction status: legal basis: performance of contract; legitimate interest. Administering bids, Sale Confirmations, transaction data, platform commissions and disputes.
Payments, subscriptions and payouts: legal basis: performance of contract; statutory obligation; legitimate interest. Processing payment flows, invoices, platform commissions, Stripe Connect onboarding, chargebacks, refunds and payouts.
Fraud prevention, security and enforcement: legal basis: legitimate interest; statutory obligation. Preventing, detecting and investigating misuse, fraud, circumvention, unlawful content, data breaches, security incidents and breaches of conditions.
Statutory administration and tax obligations: legal basis: statutory obligation. Complying with administrative, tax, accounting and other statutory retention obligations.
Marketing and service messages: legal basis: legitimate interest or consent. Sending functional messages, service updates and, where required, commercial communications based on consent or opt-out.
Analytics and improvement: legal basis: legitimate interest or consent. Analysing use of the Platform. For analytical cookies or tracking requiring consent, consent is requested in advance.
1.5 Listings, data rooms and information provided by users
Information about a webshop originates in principle from the seller. The seller is responsible for the accuracy, completeness, currency, lawfulness and substantiation of the information provided by them. Even where AK OPERATIONS technically publishes, structures, categorises, edits, summarises, labels, moderates or displays information, this does not mean that AK OPERATIONS has verified, approved or accepted responsibility for the content.
Sellers may not include personal data of customers, suppliers, employees, freelancers or other third parties in public listings, unless this is lawful and expressly permitted in writing by AK OPERATIONS in advance. In sales documentation and data rooms, personal data must be anonymised, aggregated or pseudonymised wherever possible. Sensitive or non-essential personal data must be removed or redacted in advance.
Buyers may use personal data or confidential information received via the Platform only for the assessment, negotiation and possible execution of a potential purchase of the relevant webshop. Use for marketing, approaching customers or suppliers, profiling, data enrichment, scraping, competitive analysis without genuine purchase intent or other purposes outside the sales process is not permitted.
1.6 Recipients and third parties
AK OPERATIONS may share personal data with third parties to the extent necessary for service delivery, security, payment, verification, hosting, communication, analytics, administration, legal enforcement or statutory compliance. Examples include:
hosting, cloud and IT service providers;
email, support, CRM and communication service providers;
Stripe or other payment service providers for payments, subscriptions, payouts, verification, KYC, sanctions checks, chargebacks and refunds;
analytics, cookie and consent management service providers, where used;
accountants, lawyers, collection parties, insurers and other professional advisers;
government authorities, supervisory authorities, law enforcement agencies or courts where AK OPERATIONS is obliged to share or has a legitimate interest.
Third parties process personal data only on the basis of an appropriate data processing agreement or their own statutory responsibility. External payment service providers may apply their own conditions, privacy statements, verification procedures and compliance obligations.
1.7 Transfers outside the European Economic Area
AK OPERATIONS may use service providers that process personal data outside the European Economic Area. In such cases, AK OPERATIONS takes appropriate safeguards, such as adequacy decisions, EU standard contractual clauses, additional security measures or other legally permitted transfer mechanisms.
1.8 Retention periods
AK OPERATIONS does not retain personal data for longer than necessary for the purposes for which it was collected, unless a longer retention period is necessary for statutory obligations, evidence gathering, dispute resolution, fraud prevention, payment settlement or protection of the rights of AK OPERATIONS, users or third parties.
Account data: for as long as the account is active and thereafter for a reasonable period for administration, evidence gathering and dispute resolution.
Invoice and administration data: at least the statutory tax retention period.
Communication and transaction data: for as long as necessary for performance, enforcement, evidence gathering, disputes, fraud prevention and statutory obligations.
Listing and sales process data: for as long as the listing or sales process is active and thereafter for as long as necessary for administration, evidence gathering, platform commission, disputes and statutory obligations.
Security logs: for as long as necessary for security, investigation, fraud prevention and incident handling.
Cookie and consent data: in accordance with the cookie information overview and for as long as necessary to demonstrate consent or preferences.
1.9 Security
AK OPERATIONS takes appropriate technical and organisational measures to protect personal data against loss, unauthorised access, misuse, alteration, disclosure and destruction. Examples include access management, logging, secure connections, hosting security, back-ups, authorisation management, monitoring and restricting access to personal data to persons who need it for their work.
Users remain themselves responsible for secure passwords, their own devices, their own connections, correct authorisations within their organisation and careful use of information received via the Platform.
1.10 Rights of data subjects
Data subjects have, to the extent the statutory conditions are met, the right to access, rectification, erasure, restriction of processing, data portability, objection to processing and withdrawal of consent. A request may be sent to support@webshopmarket.com. AK OPERATIONS may request additional information to verify the identity of the requester.
Where a request relates to personal data processed independently by a buyer or seller, AK OPERATIONS may refer the requester to the relevant user.
1.11 Data breaches and incidents
Users must immediately notify AK OPERATIONS of any data breach, security incident or unlawful processing related to the Platform or personal data obtained via the Platform. AK OPERATIONS will assess incidents and will, where necessary, notify the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and/or data subjects.
1.12 Complaints
Questions or complaints about privacy may be sent to support@webshopmarket.com. Data subjects also have the right to lodge a complaint with the Dutch Data Protection Authority.
1.13 Changes
AK OPERATIONS may amend this privacy policy. The current version is published on the Platform. In the case of material changes, AK OPERATIONS may notify users additionally, for example by email or via a notification in the account.