Privacy policy
How Bolmaster handles your data and your bol connection.
Bolmaster is a service of Pecu Nino BV, Gustaaf Baertstraat 42, 8200 Bruges, Belgium (enterprise number 0830.320.097). Questions about this policy or your data: support@bolmaster.com.
Two roles
For your account data — your name, email address, billing details and how you use the service — we are the controller.
For the marketplace data we retrieve on your behalf — your catalogue, offers, orders, invoices and returns at bol — we are the processor. You decide what that data is used for; we process it to deliver the service you signed up for. A data processing agreement is available on request through support.
What we hold
- Account and billing — name, email, company details, VAT number, subscription and payment status.
- Bol API credentials — client id, client secret and access tokens. These are stored encrypted and never kept or displayed in readable form.
- Catalogue and order data — products, prices, stock, orders, returns and invoices retrieved through the official Bol Retailer API.
- Market observations — publicly visible offers from other sellers on products you sell, and who held the buy box.
- Usage and technical — sign-ins, actions in the platform, and technical logs for troubleshooting.
Why, and on what basis
- Performance of the contract — delivering analysis, repricing and reporting.
- Legal obligation — invoicing and accounting.
- Legitimate interest — security, abuse prevention, and finding and fixing faults.
We do not sell your data, do not use it for advertising, and never use one customer's data to give another customer an advantage.
Who we use
- Hosting — our production environment runs inside the EU.
- bol.com — source of your catalogue, order and market data, through the official Retailer API.
- Mollie — payments and subscriptions.
- MailerSend — delivery of transactional email.
How long we keep it
| Data | Retention |
|---|---|
| Repricing calculations | 30 days |
| Scheduled task runs | 30 days |
| Competitor and buy-box observations | 90 days |
| System logs | 90 days |
| Price history | 365 days |
| Audit logs | 730 days |
| Invoices | Statutory retention (7 years) |
After you cancel, we delete your account and its marketplace data within 30 days, except what we are legally required to keep. You can remove your Bol API credentials from your account at any time; that immediately ends all access to your bol account.
Security
- API credentials encrypted at rest; we hold no passwords in readable form.
- Traffic over TLS only.
- Strict separation between customer accounts: every query is bound to a single customer.
- Every price change sent to bol is recorded with its timestamp, old and new price, and the reason.
Your rights
You have the right of access, rectification, erasure, restriction, portability and objection. Send your request to support@bolmaster.com; we answer within 30 days. If you disagree with how we handle it, you can complain to the Belgian Data Protection Authority (gegevensbeschermingsautoriteit.be).
Changes
We tell you about any change by email or in the platform. The date at the top shows the most recent revision.