Privacy policy
Last updated: 15 October 2026
This privacy policy explains how TresBizz collects, uses, shares and protects personal data when you visit tresbizz.com, buy software licences or subscriptions, request a quote, order custom software or a website, subscribe to our newsletter or otherwise contact us. We wrote it to be clear and complete. If anything is unclear, please ask us.
Summary
| Question | Short answer |
|---|---|
| Who is responsible? | The TresBizz company named at checkout and on your VAT invoice. The website is operated by TresBizz BV. |
| What do we collect? | Business contact details, order and licence data, payment status, messages you send us and technical website data. |
| Why? | To deliver and support your software and services, to invoice, to keep our website secure and, with your consent, to improve it and send offers. |
| Do we sell your data? | No. Never. |
| Who receives it? | Software publishers for licence registration, payment providers, hosting and email providers and, where required, authorities. |
| How long do we keep it? | Only as long as needed. Invoices as long as tax law requires. |
| What are your rights? | Access, correction, deletion, portability, objection and more, depending on your country. |
| How to contact us? | info@tresbizz.com |
Contents
- Who we are
- Scope of this policy
- Global standard and local rules
- Key terms
- Data we collect and when
- Where your data comes from
- Why we use your data
- Data you must provide
- Who we share data with
- International transfers
- How long we keep data
- Your rights
- Marketing and business communication
- Automated decisions and fraud checks
- Cookies and analytics
- Social media and external links
- Job applicants
- Suppliers resellers and partners
- Children
- Security
- Changes to this policy
- Contact and complaints
Who we are
TresBizz is an international supplier of software licences, subscriptions, custom software development and websites for businesses. The website tresbizz.com is operated by TresBizz BV, Avenue Louise 231, 1050 Brussels, Belgium (VAT BE1033718409, BCE/KBO 1033718409).
Orders may be fulfilled by a TresBizz group company in or near your region. Every order comes with an official VAT invoice from the TresBizz company named at checkout and on your order confirmation. That company decides why and how your personal data is used for that order and is therefore the controller of your personal data. In this policy "TresBizz", "we", "us" and "our" refer to that company.
For all privacy questions and requests you can contact us at info@tresbizz.com. We forward your message internally to the person responsible for data protection.
Scope of this policy
This policy applies to personal data of:
- visitors of tresbizz.com and our other websites that link to this policy;
- contact persons of business customers, prospects, resellers and partners;
- individual buyers, where we sell to individuals;
- newsletter subscribers and people who request quotes, advice or project proposals;
- job applicants;
- contact persons of suppliers and service providers.
It does not apply to the websites of software publishers, payment providers or other third parties that we link to. They have their own privacy policies. When we build or maintain software or websites for a customer and process personal data on that customer's behalf, the customer is the controller and our data processing agreement with that customer applies instead.
Global standard and local rules
We serve business customers worldwide. We apply one high privacy standard to everyone, and on top of that we follow the specific data protection law of the country or region where you are located.
| Region | Main laws we follow |
|---|---|
| European Union and EEA | General Data Protection Regulation (GDPR) |
| United Kingdom | UK GDPR and Data Protection Act 2018 |
| Switzerland | Federal Act on Data Protection (FADP) |
| GCC region | UAE: Personal Data Protection Law (Federal Decree-Law 45 of 2021), plus the DIFC and ADGM data protection rules in those free zones. Saudi Arabia: Personal Data Protection Law (PDPL). Qatar: Law 13 of 2016. Bahrain: Law 30 of 2018. Oman: Royal Decree 6 of 2022. Kuwait: CITRA Data Privacy Protection Regulation |
| North America | United States: state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA). Canada: PIPEDA and provincial privacy laws |
| Central and South America | Brazil: LGPD. Mexico: Federal Law on the Protection of Personal Data Held by Private Parties. Argentina: Law 25,326. Chile: Law 19,628 and its 2024 reform. Colombia: Law 1581 of 2012. Peru: Law 29733. Other countries: national law |
| Asia | India: Digital Personal Data Protection Act 2023. China: Personal Information Protection Law (PIPL). Japan: Act on the Protection of Personal Information (APPI). South Korea: Personal Information Protection Act (PIPA). Singapore: PDPA 2012. Hong Kong: Personal Data (Privacy) Ordinance. Malaysia: PDPA 2010. Thailand: PDPA 2019. Indonesia: Law 27 of 2022. Philippines: Data Privacy Act 2012. Vietnam: Personal Data Protection Law |
| Australia and New Zealand | Australia: Privacy Act 1988 and the Australian Privacy Principles. New Zealand: Privacy Act 2020 |
| CIS and neighbouring countries | Kazakhstan: Law on Personal Data and their Protection. Ukraine: Law on Personal Data Protection. Uzbekistan: Law on Personal Data. Belarus, Armenia, Azerbaijan, Georgia and other countries: national data protection law |
| All other countries | The applicable national data protection law |
Where a local law gives you more rights or stricter protection than this policy, the local law applies. Where several laws apply, we follow the one that gives you the most protection. Where the law requires us to appoint a local representative or a data protection officer, for example in the EU or the UK, their contact details are available on request at info@tresbizz.com.
Key terms
| Term | Meaning in this policy |
|---|---|
| Personal data | Any information that identifies you or can be linked to you, such as your name, business email address, phone number or IP address. Some laws call this personal information. |
| Processing | Anything we do with personal data, such as collecting, storing, using, sharing or deleting it. |
| Controller | The company that decides why and how personal data is processed. |
| Processor | A company that processes personal data on behalf of a controller and only on its instructions. |
| Data subject | The person the personal data is about. |
Data we collect and when
When you visit our website
Our web server automatically records technical data that your browser sends, such as your IP address, date and time of the visit, the pages you open, the referring website, browser type and version, operating system and language settings. We need this data to show the website, to keep it secure and to find and fix errors. Server logs are deleted or anonymised after a short period, usually within 30 days, unless we need them longer to investigate an attack or misuse.
When you contact us or ask for a quote
When you use our contact or quote form, send an email, call us or chat with us, we process your name, company, job title, email address, phone number, country, the products, quantities or project scope you mention, and the content of your message. Our contact form also asks for the type of request and your preferred contact method. We use this information to answer you and, where relevant, to prepare a quote or proposal.
When you place an order
For an order we process your name, company name, billing address, email address, phone number, VAT or tax number, the products and quantities you order, licence terms, prices, discounts, payment status, delivery details and your order history. For subscriptions that are registered in your own name, we also process the email address or account that the subscription must be linked to.
When you create a customer account
If you create an account we store your login name, email address and a securely hashed version of your password. We never store your password in readable form. In your account you can see orders, invoices and licence keys and change your details.
When you pay
Card and wallet payments are processed by Stripe and the other payment providers shown at checkout. You enter your card details directly with the payment provider. We receive only the payment method, the last digits of the card or a payment token, the amount, the currency and the payment status. If you choose to save a payment method for later purchases, the payment provider stores it, not us. For bank transfers we process the name of the account holder, the bank reference and the amount paid.
When we validate your VAT number
For business customers in the EU we check VAT numbers in the official VIES database of the European Commission, and in other countries we may check equivalent public business registers. This tells us whether VAT must be charged and helps prevent fraud.
When we deliver licences and subscriptions
To deliver your software we process licence keys, subscription identifiers, download links, activation data you share with our help desk, and the name and email address needed to register a licence or subscription with the software publisher or distributor.
When you order custom software or a website
For development projects we process the names and contact details of your project team, meeting notes, requirements, specifications, access details to systems you share with us, test feedback and project correspondence. If the project involves personal data of your customers or staff, we process that data only as your processor under a data processing agreement.
When you subscribe to our newsletter
We process your email address and, if you provide them, your name, company and interests. We send our newsletter through Intuit Mailchimp. To improve our mailings we may see whether an email was opened and which links were clicked. You can unsubscribe at any time with the link in every email.
When you leave a review
After a purchase we may invite you to rate us on an independent review platform such as eKomi or Google. If you accept, the platform processes your review under its own privacy policy. We may publish your review on our website with your first name or company name and country.
When you call or meet us online
We do not record phone or video calls unless we tell you in advance and, where required, ask for your consent.
Where your data comes from
Most data comes directly from you. In addition we may receive data from:
- your employer or colleague, when they name you as a contact person, licence user or project contact;
- software publishers and distributors, for example confirmation that a licence or subscription has been registered;
- payment providers, about the status of a payment or a possible fraud signal;
- public sources such as company registers, VAT databases and professional networks, for business contact data;
- resellers and partners who refer you to us, with your knowledge.
Why we use your data
We only use personal data for clear purposes and only when we have a legal basis. Under the GDPR and similar laws the most common legal bases are contract, legal obligation, legitimate interest and consent. Other countries use comparable grounds.
| Purpose | Legal basis |
|---|---|
| Showing and securing the website | Legitimate interest in a working and safe website |
| Answering questions and preparing quotes or project proposals | Steps at your request before a contract, or legitimate interest |
| Processing orders, delivering licence keys and registering subscriptions | Performance of a contract |
| Managing your customer account | Performance of a contract |
| Payments, invoicing, VAT checks and bookkeeping | Performance of a contract and legal obligation |
| Customer support, activation help and our activation guarantee | Performance of a contract |
| Delivering custom software and website projects | Performance of a contract |
| Fraud prevention, export control and sanctions screening | Legal obligation and legitimate interest in preventing fraud and misuse |
| Newsletter and offers | Consent, or legitimate interest for existing business customers where the law allows this |
| Customer satisfaction surveys and review invitations | Legitimate interest in improving our service, or consent where required |
| Website statistics and heatmaps | Consent where required by law |
| Recruitment | Steps before an employment contract, or consent for keeping your data longer |
| Establishing, exercising or defending legal claims | Legitimate interest and legal obligation |
When we rely on legitimate interest, we balance our interest against your rights and interests. You can ask us for more information about this balance and you can object at any time.
Data you must provide
Fields marked as required in our forms are needed to answer you or to complete your order. Without them we cannot deliver the service, for example we cannot issue a correct invoice without a billing address or register a subscription without an email address. All other information is voluntary.
Who we share data with
We only share personal data when this is needed for the purposes above, and we never sell your personal data.
| Recipient | Why |
|---|---|
| TresBizz group companies | To process orders, provide support and manage the customer relationship across regions |
| Software publishers and authorised distributors (for example Microsoft, Autodesk and Adobe) | To issue, register and support your licence or subscription |
| Stripe and the other payment providers shown at checkout | To process payments and detect fraud |
| Hostinger | Hosting of our website and related systems |
| Google (Analytics and Tag Manager) | Website statistics, with consent where required |
| Crazy Egg | Usage heatmaps, with consent where required |
| Intuit Mailchimp | Sending our newsletter and service emails |
| hCaptcha | Protecting forms against spam and bots |
| Email, office and cloud software providers | Communication and document storage |
| Review platforms such as eKomi and Google | Review invitations, only if you take part |
| Accountants, auditors, banks and legal advisers | Bookkeeping, audits, payments and legal advice |
| Tax authorities, courts, regulators and police | Where we are legally required to share data |
| A buyer or successor of our business | In case of a merger, acquisition or sale of assets, under the same protection |
Service providers that process data on our behalf act as our processors. They may only use the data on our instructions, must keep it confidential and secure, and are bound by a data processing agreement. Software publishers, payment providers and authorities usually act as independent controllers and are responsible for their own processing.
International transfers
Because we work internationally, your data may be processed in countries other than your own, including within the TresBizz group and by service providers in the United States and other countries. Some of these countries may not offer the same level of protection as your home country.
We only transfer personal data with the safeguards your local law requires, for example:
- an adequacy decision of the competent authority;
- the EU-US Data Privacy Framework and its UK and Swiss extensions, where the recipient is certified;
- Standard Contractual Clauses approved by the European Commission, the UK International Data Transfer Addendum or equivalent clauses in other regions;
- your explicit consent or the need to perform a contract with you, where the law allows this.
You can ask us for more information about the safeguards for a specific transfer.
How long we keep data
We keep personal data only as long as needed for the purpose for which it was collected, or as long as the law requires.
| Data | Retention |
|---|---|
| Orders, invoices and accounting records | As long as tax and accounting law in the relevant country requires, usually 5 to 10 years |
| Licence keys and subscription records | For the life of the licence or subscription plus the period needed for support and warranty claims |
| Customer account | As long as the account is active. Inactive accounts are deleted or anonymised within 24 months of the last activity |
| Quote and contact requests without an order | Up to 24 months |
| Project files for custom software and websites | For the duration of the project and maintenance contract, then up to 5 years unless agreed otherwise |
| Newsletter subscription | Until you unsubscribe, plus a suppression record so we do not email you again |
| Website server logs | Usually up to 30 days |
| Analytics data | Up to 14 months |
| Job applications | Up to 6 months after the procedure, or longer with your consent |
When the retention period ends, we delete or anonymise the data. If we need data longer to defend a legal claim, we keep it until the claim is resolved.
Your rights
Depending on where you live, you can ask us to access, correct, delete or export your data, to restrict or object to its use, and to withdraw consent at any time. Residents of US states such as California may also ask what personal information we hold, request deletion, appeal a decision and opt out of any sale or sharing. We do not sell personal data, and we will not treat you differently for using your rights.
See data protection and your rights for an explanation of each right, the deadlines per region and how to make a request. Email info@tresbizz.com. We reply within the deadline set by your local law and may ask you to confirm your identity.
Marketing and business communication
We send newsletters and offers only to people who signed up or, where the law allows this, to contact persons of existing business customers about similar products and services. Every message contains an unsubscribe link and you can also email us to stop receiving offers. Unsubscribing does not affect service messages about your orders, licences, renewals or account, which we need to send to perform our contract.
We may contact business prospects by email or phone where local law allows business-to-business marketing based on legitimate interest. You can object to this at any time.
Automated decisions and fraud checks
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects, except where this is needed for payment security. Our payment providers use automated fraud detection that may block a payment that looks suspicious. If a payment is refused, you can contact us and we will review the order manually.
Cookies and analytics
We use cookies and similar technologies to run the shop, to keep it secure and, with your consent where required, to measure and improve our website. Details, durations and how to manage your choices are in our cookie policy.
Social media and external links
Our website contains links to our pages on LinkedIn, Facebook and YouTube. These are simple links: no data is sent to these platforms until you click them. When you visit our social media pages, the platform processes your data under its own privacy policy. For page statistics the platform and we may be joint controllers, and the platform is the main contact for your rights. Our website may also link to websites of software publishers and other third parties. We are not responsible for their content or privacy practices.
Job applicants
When you apply for a job, we process your CV, cover letter, contact details and any information you share during interviews, only for the recruitment procedure. Access is limited to the people involved in the hiring decision. If you are not hired, we delete your data within 6 months after the procedure, unless you agree that we keep it longer for future vacancies.
Suppliers resellers and partners
We process the names, business contact details and roles of contact persons at suppliers, distributors, resellers and partners to manage our business relationship, place and receive orders, make payments and comply with legal obligations. Our legal basis is the performance of the contract with your company and our legitimate interest in managing the relationship.
Children
Our services are intended for businesses and adults. We do not knowingly collect personal data from children under 16, or the higher age set by local law. If you believe a child has given us personal data, please contact us and we will delete it.
Security
We protect personal data with appropriate technical and organisational measures, including encrypted connections, access controls, regular updates, backups and careful selection of service providers. No system is completely secure, but we work continuously to protect your data. Read more on our security page. If a data breach occurs that puts your rights at risk, we inform you and the competent authorities as required by law.
Changes to this policy
We may update this policy when our services, our service providers or the law change. The date at the top shows the latest version. Important changes will be announced on this page and, where appropriate, by email.
Contact and complaints
For questions, requests or complaints about privacy, email info@tresbizz.com with the subject "Privacy". Please contact us first so we can help.
You also have the right to complain to the data protection authority in the country where you live or work, or where you believe a problem occurred. Examples are the national data protection authorities in the EU, the Information Commissioner's Office in the UK and the UAE Data Office.
See also: Cookie policy · Data protection and your rights · Security