Privacy policy
Version dated 17 September 2026
This policy explains how Boothcore processes personal data. We are the controller for your account, our website and our own services. For data you enter about your rental customers, we act as processor on your behalf.
1. Who is responsible
Boothcore is operated by Sven Pelgrims, trading as Flitsbak, established at Oude Mechelbaan 59, 2220 Heist-op-den-Berg, Belgium, company number 0737.725.778. Questions about this policy or your data can be sent to ✉ E-mail.
2. Our two roles
We are the controller for your account, subscription and visits to boothcore.net. This policy covers that processing.
For anything you enter into Boothcore about your own customers, you are the controller and we are the processor. We use that data only to provide the platform to you, never for our own purposes, and we do not sell it. These terms are set out in the data processing agreement that forms part of your subscription.
If you arrived here through a quote, customer portal or photo gallery belonging to a rental business, that business is your point of contact, not Boothcore.
3. Data we process
| Type | Data | Purpose |
|---|---|---|
| Account | Name, email address, securely hashed password and language preference | To let you sign in with the right language and permissions |
| Business | Business name, address, VAT number, logo and branding | To give your documents and emails your own name and appearance |
| Your customer data | Information you enter or import: customers, events, quotes, invoices and photos | To provide the platform functions you use. Boothcore acts as processor here |
| Payments | Your subscription and, if enabled, payments made by your customers | For billing and payment processing. Card details never reach our servers |
| Technical data | IP address, request time and error reports | To diagnose faults and prevent misuse |
| Website visits | Pages visited and referral source | Only with your consent. If you decline, this processing does not take place |
| Early access | Name, business name, business email address, website and language preference | To assess your request and contact you personally |
4. Legal bases
- Performance of our contract — your account, the platform and our billing.
- Steps taken at your request before entering a contract — when you apply for early access and we contact you about it.
- Legitimate interests — security, preventing misuse and diagnosing faults.
- Consent — only for analytics on this website.
- Legal obligations — our accounting records.
We need fields marked as required to assess your request, create an account or perform the agreement. Without that information we cannot provide the relevant service; other fields are optional.
5. Service providers
A small number of suppliers are needed to operate the platform. They may use the data only to provide their service to us.
| Category | Purpose | Where |
|---|---|---|
| Application and database hosting | Running the application and database | European Union |
| Network and security | DNS, traffic delivery, security and spam protection | Global network, with transfer safeguards where required |
| File storage | Storing photos, logos, PDFs, audio and generated images | European storage region; account and support processing may occur elsewhere |
| Email delivery | Sending transactional email | Primarily the European Union; approved suppliers may process elsewhere |
| Payment processing | Online payments and payouts | European Union, with possible transfers outside the EEA |
| Routing and distance calculation | Geocoding, distance, travel time and route planning | Germany |
| Website analytics | Analytics on boothcore.net, after consent | European Union, with possible transfers outside the EEA |
If you use an AI feature, the relevant image is sent to the supplier running that model only when you deliberately use the feature. Processing may take place in the European Union or elsewhere under appropriate transfer safeguards.
Transfers outside the European Economic Area use a valid transfer mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses. You may ask ✉ E-mail for more information or a copy of the relevant safeguards. We do not sell data or use it for advertising.
6. Retention
- Your Boothcore account and business settings: while you are a customer and for 30 days afterwards.
- Our invoices to you: ten years, as required by law.
- Server logs containing IP addresses: 90 days.
- Early-access applications: twelve months after your last application, then deleted automatically.
- Your customers' data: while you need it to use Boothcore or for as long as a legal retention duty applies. You can delete much of it yourself; the data processing agreement governs complete return or deletion.
7. Cookies
We do not place analytics cookies on the public website without your consent. Necessary cookies may still be used to keep you signed in and secure the service.
- A sign-in cookie is placed when you log in. Without it, you cannot remain signed in.
- Your analytics preference is kept in your browser's local storage, not in a cookie.
- Analytics cookies are placed only after you consent. If you decline, no analytics request is sent.
8. Your rights
You may access, correct or erase your data, restrict its processing, object to processing, and receive it in a readable file. You can withdraw consent at any time.
Email ✉ E-mail. We will respond within one month.
If you are not satisfied with our response, you may lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels.
9. Security
Traffic between your browser and Boothcore is encrypted in transit. Passwords are securely hashed, access to business data is isolated by workspace, and repeated failed sign-in attempts are temporarily blocked. Please contact us if you notice anything unusual.
10. Changes
If we materially change how we use your data, we will update this document and tell you before the change takes effect.