Goods on Demand B.V., trading as OnDemand International (KvK 70188939, Herengracht 584, 1017 CJ Amsterdam), is the controller of personal data processed through the Footprint service and alalem.ai. This policy is written to meet the EU General Data Protection Regulation (GDPR) and applies wherever you are in the world.
1. What we collect
- Account data — name, email, phone, company name and role, billing address, and your login credentials.
- Verification (KYC/AML) data — copies of government-issued ID, proof of address, company documents, beneficial-owner details, selfies or liveness checks where used, and the results of checks run by our verification providers.
- Mail data — photographs of the exterior of items received for you, scans of contents you ask us to open, forwarding addresses, and the log of instructions you give.
- Payment data — handled by our payment processor; we hold only the last four digits, card type and transaction records, never full card numbers.
- Usage data — IP address, device and browser information, pages viewed, and cookies as described in section 8.
- Communications — emails, WhatsApp messages and support requests you send us.
2. Why we use it and our legal basis
- To provide the Service you have bought, including receiving and handling your mail — performance of a contract.
- To verify your identity and screen for money-laundering, sanctions and fraud risk — legal obligation under Dutch and local AML law, and our legitimate interest in preventing misuse.
- To take payment, issue invoices and keep accounting records — contract and legal obligation.
- To send service messages about your account, mail and renewals — contract.
- To send marketing about OnDemand International services you may find useful — consent, or legitimate interest for existing customers, with an unsubscribe in every message.
- To run, secure and improve the website and dashboard — legitimate interest.
- To respond to lawful requests from authorities — legal obligation.
3. Who we share it with
- Operating partners at each address location, to the extent needed to receive and handle your mail: your name, company name and box number, and forwarding addresses you give.
- Verification providers who run identity, document and sanctions checks on our behalf.
- Service providers for payments, cloud hosting, email and messaging delivery, and customer support tools, under data processing agreements.
- Carriers when you ask us to forward an item.
- Authorities — postal authorities, customs, regulators, courts and law enforcement, where required by law.
- Group companies of OnDemand International, for the purposes above and to provide incorporation or mobility services you ask about.
We do not sell personal data.
4. International transfers
Addresses are located in the United Kingdom, the EU, North America and Asia-Pacific, so your data is necessarily processed in those countries by our operating partners. Transfers outside the EEA are made under the European Commission's Standard Contractual Clauses, an adequacy decision, or another lawful mechanism. Details are available on request.
5. How long we keep it
- KYC and AML records: five years after your account closes, as required by Dutch AML law (Wwft).
- Mail photographs and scans: 12 months after your account closes, or earlier on request.
- Accounting and invoice records: seven years, as required by Dutch tax law.
- Account and usage data: until account closure plus 12 months.
- Marketing preferences: until you unsubscribe.
6. Your rights
You may ask to access, correct, delete or receive a copy of your data, to restrict or object to processing, and to withdraw consent at any time. We may be prevented from deleting data we are legally required to keep, and will tell you if so. Write to hello@alalem.ai. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or to your local supervisory authority.
7. Security
Data is encrypted in transit and at rest, access is limited to staff and partners who need it, physical mail is held in locked areas, and verification documents are stored separately from other account data with additional access controls. No system is completely secure; if a breach affects you we will tell you and the authorities as the law requires.
8. Cookies and analytics
We use strictly necessary cookies to run the site and dashboard, and, with your consent, analytics and advertising cookies (including Google Analytics and Google Ads conversion tracking) to understand how the site is used and to measure our advertising. You can change your choice at any time through the cookie settings link in the footer. Rejecting non-essential cookies does not affect the Service.
9. Children
The Service is for businesses and is not offered to anyone under 18.
10. Changes
We will post any changes here and, where they are material, notify you by email.
11. Contact
Data protection queries: hello@alalem.ai, or by post to the registered office above, marked "Data protection".