Privacy policy

Rewoon (rewoon.com) is a marketplace for second-hand furniture and household goods in the Netherlands. It is run by ReHome BV. In this policy, "we" and "us" mean ReHome BV. We are the controller of the personal data described here, which means we decide why and how it is used.

For anything about your data, email [email protected]. We do not have a data protection officer because the law does not require one for us; the same address reaches the people responsible.

The law requires a reason (a "legal basis") for every use of personal data. The table shows what we collect, what we use it for and which basis applies.

You do not have to give us your data, but without an account you cannot sell, message or reserve. We never sell your data, and we do not use it to show you advertising.

• Everyone can see your listings, including the photos, the city and the price. Do not put your address, phone number or other people in your photos or description.
• Your display name appears with your public questions, your "looking for" posts and the reviews you write, and on reviews written about you as a seller.
• Messages are visible only to you, the person you are talking to, and our moderators when a conversation is reported or needed to handle a dispute.
• Your email address is never shown to other users.

When you share contact details in a message, or contact a seller or shop on WhatsApp or by phone, they receive what you share and use it under their own responsibility.

We use a small number of service providers ("processors"). They may use your data only to provide their service to us, under a data processing agreement.

We also share data in these cases:

• ReHome, for delivery. When you book delivery or a move, ReHome receives the addresses and details needed to plan it. ReHome is part of the same company and handles that data under its own privacy policy.
• Partner shops receive the messages and questions you send them.
• Authorities, such as the police or a court, when the law requires us to.

We store your data in the EU. Resend, which sends our emails, is based in the United States, and Cloudflare runs a worldwide network. For these transfers we rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the standard contractual clauses approved by the European Commission. You can ask us for a copy of the safeguards that apply.

• Your account and what you added to it: for as long as your account is open. When you ask us to delete your account, we delete or anonymise it within 30 days.
• Listings by private sellers go offline automatically 40 days after they are published. You can put them back online yourself.
• Messages stay available to both people in the conversation. If you delete your account, your messages are anonymised so the other person keeps the conversation but not your details.
• Reports, suspensions and moderation decisions: up to 2 years after the decision, so we can handle repeat abuse and answer questions about our decisions.
• Sales of items sold by Rewoon: 7 years, because Dutch tax law requires us to keep business records that long.
• Analytics: session recordings are deleted after at most 90 days, other analytics data after at most 24 months.
• Technical logs: a few weeks at most, unless we need them to investigate an attack.

Cookies are small files a website stores in your browser. We use a few that the site needs to work, and analytics cookies only if you agree.

Our visit statistics from bradi.tech do not use cookies or store anything on your device. You can change your choice for analytics at any time: Cookie settings

Under the GDPR you have the right to:

• See the personal data we hold about you and get a copy
• Correct data that is wrong or incomplete
• Delete your data and your account
• Limit how we use your data while a question or complaint is being handled
• Take your data with you in a common, machine-readable format
• Object to uses based on our legitimate interest
• Withdraw your consent for analytics at any time, without affecting what happened before

Email [email protected] from the address linked to your account, so we know the request is yours. We answer within one month. It is free, unless a request is clearly unfounded or excessive.

If you are not happy with how we handle your data, tell us first so we can fix it. You also have the right to complain to the Dutch data protection authority, Autoriteit Persoonsgegevens, or to the authority in the EU country where you live.

Connections to Rewoon are encrypted. Passwords are stored only as a secure hash. Access to personal data is limited to the staff who need it for their work, and staff actions are logged. If a breach puts your data at risk, we report it to the Autoriteit Persoonsgegevens within 72 hours and tell you when the risk to you is high.

We never ask for your password, and we never ask you to pay through a link in a chat message. If someone does, report it from the listing page.

We do not make decisions about you by computer alone that have legal or similarly significant effects. Two automatic checks help keep the marketplace safe and fair:

• Messages are scanned for payment requests, such as payment links or bank account numbers, so we can warn the buyer. The message is still delivered.
• Listings by private sellers go offline after 40 days so the marketplace shows items that are still available.

The order of listings on the browse page is explained in our terms.

Rewoon is not meant for people under 16. We do not knowingly collect data from children. If you believe a child has created an account, email us and we will delete it.

When we change this policy, we update the date at the top. If a change affects how we use data you already gave us, we tell you by email or on the site before it takes effect.