Privacy policy
Telling us about your car means trusting us with your details. This page sets out what we receive, what we do with it, and what we never do with it.
Last updated: 30 October 2026
Who is responsible
This policy applies to webuycar.nl. We are the party responsible for the personal data described below, and we process it in line with the General Data Protection Regulation (GDPR) and Dutch law.
If you have a question about your data, or want to use one of your rights, reach us through WhatsApp or +31 6 12 40 80 16. A real person reads it and replies in English.
What we collect
Requesting a price means sending us information yourself, typed in or uploaded:
- Contact information: your name, email address and phone number.
- Car details: the number plate, plus the make, model, year, fuel type and colour we look up for that plate in the public RDW register. Describe the car yourself instead, and we receive whatever you type in.
- Condition details you give us: mileage, whether it still drives, any damage, your own notes and, where you name one, a price you have in mind.
- Any photos of the car you choose to add.
- How you respond to our price: acceptance or decline, an amount or reason you add, and your preferred time for the handover.
- Confirmation that your offer page was opened, when, and the kind of browser and device used, so we can tell the price reached you.
- How you arrived at the site: your first landing page, the website that sent you, campaign tags in the link and whether an advert sent you. For adverts we keep only the fact of a click, never the click code itself.
Requesting a callback gives us your name, phone number and the part of the day that suits you, used only to make that call.
Your IP address passes through briefly to stop the form being flooded with requests, and it is never stored alongside your submission.
Why we use it
- To assess your request and put a price on your car.
- To reach you about that request, whether by email, phone or WhatsApp.
- To email your price, with a personal link you use to accept or decline it.
- To organise the sale and handover with you once you have accepted.
- To understand which channels actually generate requests. We look at sources, not at you as a person.
We never sell personal data, send newsletters or run advertising with it, and we do not use your details for anything beyond what is listed here.
Our legal basis
Processing your details rests on the fact that you asked us for a price, and we need them to produce one and, if you accept, to carry out the sale. In GDPR terms that is taking steps at your request before a contract, then performing it.
Keeping the form free of abuse and learning which channels work rest on our legitimate interest, which we keep as narrow as we can.
Some records we keep purely because the law requires it, for instance the records of a completed purchase that Dutch tax law obliges a business to retain.
Who helps us process it
A small number of providers assist us. Each one handles data only on our instructions and only for this service:
- Storage: your request and any photos you upload sit in secure storage.
- Email: an email service sends out your confirmation and your offer.
- Internal alert: a private message notifies our team the moment a request or a callback comes in, so someone picks it up quickly. Only our own team can read it.
- Vehicle register: looking up the car means sending the plate to the open data service of the RDW, the Dutch vehicle authority. Nothing beyond the plate goes across, never your name or contact details.
- Statistics: a cookieless, privacy-friendly statistics tool counts visits and tracks progress through the sell form. It never receives your name, email address or phone number, and nothing at all is measured on your personal offer page.
Outside of that, data is shared only where the law obliges us to. If one of these providers processes data outside the European Economic Area, we rely on the safeguards the GDPR requires for such transfers.
How long we keep it
Your details stay with us only as long as the purposes on this page require, and no longer.
Not selling your car to us means the request stays on file for a limited time, long enough for us to answer if you come back to it, and we delete it sooner on request. Selling it to us means we keep what the law requires about the purchase for however long the law sets, which in the Netherlands is usually seven years for financial records.
The note about how you found us, kept in your own browser, stops being used after 30 days. The cookies page has the full detail.
Security
Protection is matched to the data: encrypted connections, access to requests limited to the people who handle them, and a personal offer link long enough to be very hard to guess.
No system is ever completely safe. Were something to go wrong with your data, we would tell you and, where the law requires it, the Dutch Data Protection Authority.
Your rights
The GDPR gives you the right to:
- find out which personal data we hold on you;
- have inaccurate data put right;
- have your data removed;
- object to how we process it, or ask us to limit it;
- get your data in a common format, so you can take it elsewhere.
Reach us through WhatsApp or +31 6 12 40 80 16 with your name and number plate, so we can trace your request. We reply within one month, as the GDPR requires, and may ask you to confirm who you are before releasing or deleting anything.
Complaints
Unhappy with how we have handled your data? Tell us first, and we will try to put it right.
A complaint can also go to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the data protection authority in the EU country where you live.
Changes to this policy
This policy gets updated whenever the way we work changes. The date at the top of the page shows when that last happened.