Legal

Privacy Policy

Last updated: 29 June 2026

The short version: We collect as little data as possible. Visitors who just browse the map are anonymous. When you create an account we collect your name, date of birth, address, and email, and payments are handled securely by Stripe. We never sell your data or use it for advertising.

Who we are

Farmsy (“we”, “us”, “our”) operates the website farmsy.app. We are a platform that helps consumers discover local farms and direct-to-consumer food producers in the Netherlands and Belgium.

For any questions about this policy or your personal data, reach us through our contact page.

What data we collect

1. Farm listing data (not personal)

The farm information shown on our map comes from publicly available sources. This is not personal data — it is publicly listed business information:

  • OpenStreetMap — locations, names, addresses, and opening hours (licensed under ODbL)
  • Foursquare — contact details and photos to enrich listings
  • Overture Maps — verified location and business data
  • Traces — supplementary contact information for farm listings
  • Farmer submissions — information provided directly by farm owners who have claimed their listing

2. Account data

When you create an account we collect your name, date of birth, address, and email address. This is stored securely via Supabase (EU region) and used to administer your account, personalise the service, and manage billing. To find your address quickly, our sign-up form offers address suggestions powered by Photon (an open geocoder by Komoot built on OpenStreetMap); only the text you type into that field is sent to look up matches.

If you subscribe, payments are processed by Stripe. We do not see or store your full card details — Stripe holds those as our payment processor. We never sell your data or share it with third parties for their own marketing.

3. What we do NOT collect

  • No tracking pixels or advertising cookies
  • No third-party analytics (e.g. Google Analytics)
  • No IP address logging for ordinary visitors
  • No behavioural profiling

Business information

We collect farm business information from publicly available sources including government agricultural directories, open data platforms, and voluntary business listings. This information includes business names, addresses, and contact details that farms have made publicly available for promotional purposes.

Farms listed in our directory have the right to:

  • Claim and update their listing
  • Request removal of their information
  • Correct inaccurate information

To exercise any of these rights, reach us through our contact page.

How we use your data

We use the data we hold only for the following purposes:

  • Displaying farm listings on the map
  • Logging you into your account (if you have one)
  • Sending account-related emails — no marketing emails without your consent
  • Improving the platform based on aggregate, anonymous usage patterns

We do not use your data for advertising and we do not sell it — ever.

Cookies

We use one type of cookie: an authentication session cookie set only when you sign in to your account. It keeps you logged in between visits.

If you never sign in, no cookies are set. There are no tracking, advertising, or analytics cookies on this site.

Data retention

Account data is kept for as long as your account is active. If you ask us to delete your account, your email address is erased within 30 days.

Farm listing data is drawn from public datasets and reviewed regularly. We remove listings when we become aware they are no longer active.

Your rights under GDPR

If you are in the EU or UK, you have the following rights over any personal data we hold about you:

Access

Request a copy of your data

Rectification

Ask us to correct inaccurate data

Erasure

Ask us to delete your data

Portability

Receive your data in a common format

Objection

Object to how we use your data

Restriction

Limit how we process your data

To exercise any right, reach us through our contact page. We will respond within 30 days. You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Third-party services we use

We rely on the following services to run the platform:

Supabase Database & authentication

Stores farm listings and account emails. Hosted in the EU.

Stripe Payment processing

Handles subscription payments. Subject to Stripe's privacy policy.

Photon / Komoot Address lookup

Suggests addresses as you type during sign-up. Only the text you enter is sent. Built on OpenStreetMap.

OpenStreetMap / CARTO Map tiles

Renders the background map. No personal data is sent.

Changes to this policy

We may update this policy when the platform changes. The “Last updated” date at the top of this page will always reflect the most recent revision. We will not make changes that significantly reduce your rights without giving you notice.

Questions about your data?

We're happy to help. Data requests are handled within 30 days.

Contact us