Privacy policy

Mint B.V. (“Mint”, “we”, or “us”) respects your privacy. This policy explains which personal data we collect through this website, why we collect it, how long we keep it, and what your rights are. We follow the General Data Protection Regulation (GDPR) and Dutch privacy law.

Investing through Mint is not open yet. Before it opens, we will update this policy to cover investor accounts, identity checks, and payouts.

The organisation responsible for your personal data (the “controller”) is:

Mint B.V.
Address: Kernreactorstraat 24a, 3903LG Veenendaal, Netherlands
Chamber of Commerce (KvK): [KvK number]
Email: [email protected]

When you send us a message through the contact form, we collect:

• Your name and email address
• The topic and the message you write
• Your IP address and browser details (the “user agent”), stored with your message

When you visit the website, our web server automatically records technical data: your IP address, browser details, the page you asked for, and the time.

To see how the website is used, we run our own analytics on our own servers. It records which pages you visit, what you click, your device and browser, and your approximate location, and it can record how a page is used, with everything you type hidden. This data stays with us: no other company receives it.

We don’t use advertising or tracking tools from other companies, and we don’t sell visitor data.

• To answer your message and follow up on your question.
• To prevent misuse, such as spam or attacks on the contact form and the website.
• To keep the website secure and working, for example to find and fix errors.
• To improve the website, by seeing which pages help visitors and where they get stuck.
• To meet legal obligations, where the law requires us to keep or share data.

• Steps before a contract (Art. 6(1)(b) GDPR): when you ask about investing or raising capital with Mint.
• Legitimate interest (Art. 6(1)(f) GDPR): answering other questions, preventing misuse, keeping the website secure, and understanding how the website is used. We only do this where your interests don’t outweigh ours.
• Legal obligation (Art. 6(1)(c) GDPR): where a law requires us to process your data.

We only use three cookies, all needed for the website to work or to remember a choice you made. That’s why we don’t ask for your consent.

• mint-bv-session: keeps your visit working from page to page. Deleted after two hours without activity.
• XSRF-TOKEN: protects forms, such as the contact form, against misuse by other websites. Deleted after two hours.
• mint-language: remembers the language you chose with the language switcher (EN or NL), so the website opens in that language next time. Deleted after one year.

Our analytics also keeps a visitor ID in your browser’s local storage (mint-analytics-visitor-id, not a cookie), so it can recognise a returning visit. It stays with us and has little impact on your privacy. You can remove it at any time by clearing your browser data.

The fonts and videos on this website come from our own server, so your browser doesn’t contact other companies such as Google when you visit.

We never sell your data. We only share it when that is necessary:

• With our hosting and email providers, who run the website and deliver your message to us. They may only use your data on our instructions.
• With our legal and financial advisers, who are bound to confidentiality.
• With authorities, when the law or a court requires it.

If any of these providers processes data outside the European Economic Area, we make sure appropriate safeguards are in place, such as the European Commission’s standard contractual clauses.

• Contact messages (including your IP address and browser details): deleted automatically 12 months after you sent them, unless we need them longer to meet a legal obligation.
• Analytics data: deleted after [retention period].
• Web server records: deleted automatically after at most 90 days.

• All traffic to this website is encrypted with modern TLS, including protection against future quantum computers.
• Strict security settings limit what can run on our pages.
• Only authorised Mint staff can access the data you send us.

No system is completely secure, but we take security seriously and keep our measures up to date. You can report a security issue through our security.txt.

Under the GDPR, you have the right to:

• See the personal data we hold about you
• Have incorrect data corrected
• Have your data deleted, unless we must keep it by law
• Limit how we use your data
• Receive your data in a common, machine-readable format
• Object to how we use your data when we rely on legitimate interest

To use any of these rights, email us at [email protected]. We reply within one month.

If you think we handle your data incorrectly, please tell us first, so we can put it right. You also have the right to complain to the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
Postbus 93374, 2509 AJ Den Haag
autoriteitpersoonsgegevens.nl

We update this policy when our website or the law changes, for example before investing opens. The date at the top shows when we last changed it.

Questions about this policy or your data? We’re happy to help.

Mint B.V.
Address: Kernreactorstraat 24a, 3903LG Veenendaal, Netherlands
Chamber of Commerce (KvK): [KvK number]
Email: [email protected]

Or use the contact form.