Privacy statement
Version: September 2026
The Retail Media Hub builds and runs retail media for retailers and sells that reach to advertisers and agencies. Along the way we handle personal data: of people who visit this website, of people who contact us, and of the people we work with at clients, partners and suppliers. This statement explains what we do with that data and why. It applies to retailmediahub.com and to our business contacts. It does not cover the data we process for retailers when we operate their retail media; see section 3 for how that works.
1. Who is responsible
The Retail Media Hub B.V.
Molenpad 5-7
1016 GL Amsterdam, the Netherlands
privacy@retailmediahub.com
We are the controller for the processing described in this statement. Privacy questions and requests go to privacy@retailmediahub.com. Our data protection contact is reachable at dpo@retailmediahub.com.
2. What we process, why, and on what basis
Visiting the website
When you visit retailmediahub.com, our hosting provider (Cloudflare) processes technical data such as your IP address, browser type, the pages you request and the time of the request. This happens in server logs and is needed to serve the site, keep it available and block abuse. Basis: our legitimate interest in running a secure website. Logs are kept for a short period and are not used to build profiles. The website does not use tracking or advertising cookies. If we add visitor statistics, we use a cookieless tool that only produces aggregated numbers; see the cookie statement.
Contacting us
If you use the contact form, mail us or call us, we process the details you provide: name, e-mail address, company, telephone number if given, and the content of your message. We use this to answer you and, if it comes to that, to prepare a proposal. Basis: steps prior to a contract at your request, or our legitimate interest in responding to enquiries. The contact form is protected against spam by Cloudflare Turnstile, which analyses technical signals from your browser to tell people from bots; it does not identify you. Submissions are delivered to our mailbox through Resend, a transactional e-mail service. We keep enquiries for as long as the conversation runs and up to two years after our last contact, unless a business relationship follows.
Working with us
If you work at a retailer, advertiser, agency, partner or supplier we do business with, we process your business contact details (name, role, employer, e-mail address, telephone number), our correspondence, and the contract, booking and invoicing data connected to your organisation. Basis: performance of the agreement with your organisation, our legal obligations (for example tax law, which requires us to keep financial records for seven years), and our legitimate interest in maintaining business relationships. We keep this data for the duration of the relationship and afterwards as long as the law or a possible dispute requires.
Marketing
We do not send newsletters. If we ever start one, you will only receive it after opting in, and every issue will contain an unsubscribe link. We may contact existing business relations about our services on the basis of our legitimate interest; you can object at any time.
Job applications
If you apply for a position with us, we process your application data to run the procedure. We delete it within four weeks after the procedure ends, unless you agree that we keep it for up to one year.
This website links to our LinkedIn page and to the LinkedIn profiles of our founders. Those links take you to LinkedIn, where LinkedIn's privacy policy applies. We do not embed LinkedIn trackers or buttons on this website.
3. Data we handle for retailers
When we operate retail media for a retailer, campaign data and, in some cases, data about the retailer's shoppers pass through systems we run. In that situation the retailer is the controller and we act as processor under a data processing agreement with that retailer. What happens with that data is governed by the retailer's own privacy statement, not by this one.
Our setup is deliberately privacy-first. We do not build our own profiles of individual shoppers and we do not resell shopper data. Where data from a retailer and an advertiser is combined, this is done through privacy-safe data collaboration (data clean rooms), where neither party sees the other's individual-level data. Reporting to advertisers is aggregated.
4. Who receives your data
We do not sell personal data and we do not share it with third parties for their own purposes. We do use service providers who process data on our instructions:
- Cloudflare (hosting, security and spam protection for the website)
- Resend (delivery of contact form submissions)
- Google Workspace (e-mail, documents and calendar)
- Our accounting and administration tools
Where partners are involved in delivering our services (for example ad serving, measurement or activation partners), they only receive the data needed for their part of the work, under written agreements. We disclose data to authorities where the law requires it.
5. Data outside the EEA
We store and process data within the European Economic Area wherever possible. Some of our providers are based in the United States or operate global networks. In those cases the transfer rests on the EU-US Data Privacy Framework and/or the European Commission's standard contractual clauses, plus additional measures where needed.
6. Security
The website is served over TLS. Access to systems that hold personal data is limited to people who need it for their work, protected by multi-factor authentication. Should a breach nonetheless occur that puts your rights at risk, we will report it to the Dutch Data Protection Authority and, where required, to you.
7. Your rights
You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw any consent you gave. To exercise these rights, mail privacy@retailmediahub.com. We may ask you to verify your identity. We respond within one month; for complex requests this can be extended by two months, in which case we let you know.
If you think we handle your data incorrectly, we would like to hear it first. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
8. Automated decision-making
We do not make decisions about you based solely on automated processing.
9. Minors
This website and our services are aimed at businesses. We do not knowingly collect data from people under 16.
10. Changes
We update this statement when our services or the law change. The version date at the top tells you which version you are reading. For substantial changes we will point it out on the website.
11. Questions
Questions about this statement or about your data: privacy@retailmediahub.com, or by post to the address in section 1.