Privacy Policy
Last updated: 29 June 2026
The short version: We collect as little data as possible. Visitors who just browse the map are anonymous. When you create an account we collect your name, date of birth, address, and email, and payments are handled securely by Stripe. We never sell your data or use it for advertising.
Who we are
Farmsy (“we”, “us”, “our”) operates the website farmsy.app. We are a platform that helps consumers discover local farms and direct-to-consumer food producers in the Netherlands and Belgium.
For any questions about this policy or your personal data, reach us through our contact page.
What data we collect
1. Farm listing data (not personal)
The farm information shown on our map comes from publicly available sources. This is not personal data — it is publicly listed business information:
- OpenStreetMap — locations, names, addresses, and opening hours (licensed under ODbL)
- Foursquare — contact details and photos to enrich listings
- Overture Maps — verified location and business data
- Traces — supplementary contact information for farm listings
- Farmer submissions — information provided directly by farm owners who have claimed their listing
2. Account data
When you create an account we collect your name, date of birth, address, and email address. This is stored securely via Supabase (EU region) and used to administer your account, personalise the service, and manage billing. To find your address quickly, our sign-up form offers address suggestions powered by Photon (an open geocoder by Komoot built on OpenStreetMap); only the text you type into that field is sent to look up matches.
If you subscribe, payments are processed by Stripe. We do not see or store your full card details — Stripe holds those as our payment processor. We never sell your data or share it with third parties for their own marketing.
3. What we do NOT collect
- No tracking pixels or advertising cookies
- No third-party analytics (e.g. Google Analytics)
- No IP address logging for ordinary visitors
- No behavioural profiling
Business information
We collect farm business information from publicly available sources including government agricultural directories, open data platforms, and voluntary business listings. This information includes business names, addresses, and contact details that farms have made publicly available for promotional purposes.
Farms listed in our directory have the right to:
- Claim and update their listing
- Request removal of their information
- Correct inaccurate information
To exercise any of these rights, reach us through our contact page.
How we use your data
We use the data we hold only for the following purposes:
- Displaying farm listings on the map
- Logging you into your account (if you have one)
- Sending account-related emails — no marketing emails without your consent
- Improving the platform based on aggregate, anonymous usage patterns
We do not use your data for advertising and we do not sell it — ever.
Cookies
We use one type of cookie: an authentication session cookie set only when you sign in to your account. It keeps you logged in between visits.
If you never sign in, no cookies are set. There are no tracking, advertising, or analytics cookies on this site.
Data retention
Account data is kept for as long as your account is active. If you ask us to delete your account, your email address is erased within 30 days.
Farm listing data is drawn from public datasets and reviewed regularly. We remove listings when we become aware they are no longer active.
Your rights under GDPR
If you are in the EU or UK, you have the following rights over any personal data we hold about you:
Access
Request a copy of your data
Rectification
Ask us to correct inaccurate data
Erasure
Ask us to delete your data
Portability
Receive your data in a common format
Objection
Object to how we use your data
Restriction
Limit how we process your data
To exercise any right, reach us through our contact page. We will respond within 30 days. You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
Third-party services we use
We rely on the following services to run the platform:
Supabase — Database & authentication
Stores farm listings and account emails. Hosted in the EU.
Stripe — Payment processing
Handles subscription payments. Subject to Stripe's privacy policy.
Photon / Komoot — Address lookup
Suggests addresses as you type during sign-up. Only the text you enter is sent. Built on OpenStreetMap.
OpenStreetMap / CARTO — Map tiles
Renders the background map. No personal data is sent.
Changes to this policy
We may update this policy when the platform changes. The “Last updated” date at the top of this page will always reflect the most recent revision. We will not make changes that significantly reduce your rights without giving you notice.
Questions about your data?
We're happy to help. Data requests are handled within 30 days.