This policy outlines how Classitter collects, processes, and protects your personal data in compliance with the GDPR and other relevant laws.
1. About Classitter
Classitter is an online platform based in the Netherlands that facilitates the organisation and booking of playdates among mothers. The platform enables users to create profiles and connect for casual playdates, activity-based sessions, or structured classes.
Classitter is operated as a sole proprietorship (eenmanszaak) by Heewon Kim, with its business address at Herengracht 320, 1016 CE Amsterdam, and registered with the Dutch Chamber of Commerce (KvK) under number 95198687.
2. Key Definitions
- Account: Credentials assigned to a user to access and use the Platform.
- Controller: Classitter, operated as a sole proprietorship (eenmanszaak),as the entity determining how and why personal data is processed.
- Processor: Any entity processing personal data on behalf of Classitter.
- Data Subject: An individual whose personal data is collected and processed.
- Personal Data: Information relating to an identified or identifiable person.
- Processing: Any operation performed on personal data, such as collection, storage, use, or transfer.
- User: Individuals using the Platform, including Hostmoms and Guestmoms.
- User Content: Information or materials (e.g., messages, photos, videos) shared or uploaded by Users.
- GDPR: The General Data Protection Regulation (EU Regulation 2016/679).
3. Data Controller
Classitter, operated as a sole proprietorship (eenmanszaak) by Heewon Kim, is the Data Controller responsible for processing your personal data. For questions about this Privacy Policy, contact us at: support@classitter.com.
4. Data We Collect
To create or participate in playdates, Users must create a personal profile. Data collected includes:
Required Data for User Profiles: First name, Email address, Postcode, Phone number, Role (Hostmom, Guestmom, or both), Languages spoken, Children’s approximate birthday (month and year only), Playdate interests.
Additional Data for Hostmoms: Playdate rate, Playdate description and title, Maximum number of participants, Playdate schedule, Environmental details (e.g., smoking, pets).
Optional Data: Profile photo.
Automatically Collected Data: Classitter only automatically collects limited technical information strictly necessary for the operation and security of the Platform, such as anonymised IP addresses, device type, and basic usage logs. No tracking, analytics, or marketing technologies are used beyond what is essential for service functionality.
Payment Information: When processing payments, certain payment-related data (such as transaction IDs, payment status, and last four digits of card numbers) are processed by our payment provider, Stripe. Classitter does not store full payment card details.
User-Generated Content: Content shared (profiles, reviews, messages) is stored and may be visible to other Users.
Photo & Video Consent: Users may not photograph or record other Users or their children during Playdates without the explicit permission of the relevant parent or guardian. Any unauthorised capturing, storing, or sharing of such content is strictly prohibited.
Consent Process: Consent is obtained during registration by checking the box agreeing to our Terms and Privacy Policy. Consent is timestamped in our database and may be withdrawn at any time by contacting us. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
5. Purpose of Data Collection
We collect and process personal data to:
- Enable playdate organisation and Platform functionality
- Facilitate communication and customer support
- Send promotional materials (with explicit consent)
- Ensure safety, monitor performance, and improve services
- Process payments securely
- Comply with legal obligations and enforce Terms of Service
- Analyse user behaviour to tailor and improve services
We will never sell your data. Data may be shared only with trusted third parties for operational or legal purposes.
Hostmom Access to Attendee Information: Hostmoms receive limited attendee information solely for the purpose of organising and managing their Playdates. Hostmoms are not permitted to store, share, or use attendee data for any other purpose, including marketing, external communication, or personal use outside the Platform.
6. Legal Basis for Processing
Processing is based on:
- Consent (Art. 6(1)(a) GDPR) – e.g., for marketing communications
- Contractual Necessity (Art. 6(1)(b) GDPR) – e.g., for playdate bookings and payments
- Legitimate Interests (Art. 6(1)(f) GDPR) – e.g., for platform improvements and fraud prevention
Certain safety-related processing (such as age-based filtering or location-based proximity matching) is carried out under Classitter’s legitimate interests pursuant to Article 6(1)(f) GDPR. Classitter does not use automated decision-making or profiling within the meaning of Article 22 GDPR.
7. Sharing Data with Third Parties
We may share personal data with:
- Payment processors (e.g., Stripe)
- Service providers supporting technical or promotional functions
- Legal authorities, if required by law
All third parties are bound by confidentiality and GDPR-compliant agreements.
8. Data Retention
- User profiles: Retained until Users delete their accounts.
- Communications & preferences: Retained until Users unsubscribe.
- Deleted accounts: Data retained up to 6 months for legal, accounting, or dispute-resolution purposes before deletion or anonymisation.
Financial transaction data and invoicing records may be retained for up to seven (7) years in accordance with Dutch tax law obligations.
9. Your Rights as a Data Subject
You may exercise the following rights under GDPR:
- Access, Correction, Erasure, Restriction of processing
- Data Portability
- Objection to certain processing
To exercise your rights, contact info@classitter.com. For verification, you may be asked to provide ID with sensitive information redacted. You also have the right to lodge a complaint with your local Data Protection Authority (Autoriteit Persoonsgegevens in the Netherlands).
10. Data Transfers Outside the EU
Classitter does not intentionally transfer personal data outside the EEA. Where limited transfers may occur (e.g., via third-party service providers), Classitter ensures appropriate safeguards are in place in accordance with GDPR.
11. Cookies and Tracking
Classitter currently uses only essential cookies or similar technologies strictly necessary for the operation and security of the Platform. No analytics, marketing, or tracking cookies are used. Should this change, Users will be notified and consent will be obtained where required under applicable law.
12. Security Measures
We use technical and organisational measures such as SSL encryption, access controls, and regular monitoring to protect your personal data.
13. Age Restrictions
Classitter is intended for users aged 18 and over. Parents/guardians must not create accounts on behalf of children.
14. Updates to This Policy
We may update this Privacy Policy from time to time. Updates will be published on our website and, if material, communicated directly to Users.
15. Future corporate conversion
Classitter may convert its legal form from a sole proprietorship (eenmanszaak) to a private limited company (besloten vennootschap, B.V.) in the future. In such case, personal data may be transferred to the successor legal entity for the continuation of the Platform, in accordance with GDPR. Users will be informed of such change where required by law.
16. Contact
For questions or requests:
📧 Email: support@classitter.com