Privacy Policy

Last reviewed: May 2026

This policy applies to the Lyvup website (lyvup.com). For data processing within Lyvup's clinical and platform programmes, a separate programme-specific privacy notice applies.

1. Who we are

The data controller for personal data collected through this website is Lyvup B.V., registered in the Netherlands with Chamber of Commerce number 80366708. Registered address: Herengracht 59, 1015 BC Amsterdam, The Netherlands. Contact: info@lyvup.com.

2. What data we collect and why

Contact form submissions

When you submit the contact form, we collect your name, organisation, email address, and the content of your message. This data is used solely for the purpose of responding to your enquiry.

Legal basis: Legitimate interests (Article 6(1)(f) GDPR) — responding to business enquiries. Retention: 2 years from last contact, or upon request for deletion.

Analytics (with consent)

With your consent, we use HubSpot Analytics to collect anonymised and aggregated data about how visitors use this website — including pages visited, time spent, and referral source. No individual is identified through this data.

Legal basis: Consent (Article 6(1)(a) GDPR). You may withdraw consent at any time via Cookie Settings in the footer.

Server logs

Our hosting provider (HubSpot) automatically collects standard server log data including IP addresses, browser type, and pages requested. This data is used exclusively for security and operational purposes.

Legal basis: Legitimate interests (Article 6(1)(f) GDPR) — website security. Retention: 90 days.

3. Health data

This website does not collect health data. If you participate in one of Lyvup's clinical research programmes or use a Lyvup platform, health data processing is governed by a separate, programme-specific privacy notice that you will receive before any health data is collected. Health data is classified as special category data under Article 9 GDPR and is subject to enhanced legal protections.

4. Data storage and security

Personal data collected through this website is stored on servers located within the European Economic Area. We do not transfer personal data to third countries. Lyvup implements appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, or misuse. We are actively implementing ISO 27001 and NEN 7510 information security standards.

5. Sharing of personal data

We do not sell personal data. Personal data may be shared with:

HubSpot — our website hosting and CRM platform, acting as a data processor under a Data Processing Agreement
Legal or regulatory authorities — where required by applicable law

No other third parties receive personal data collected through this website.

6. Your rights

Under the GDPR, you have the right to:

Access — request a copy of the personal data we hold about you
Rectification — correct inaccurate or incomplete data
Erasure — request deletion of your data where no legal basis for continued processing applies
Restriction — limit processing in certain circumstances
Data portability — receive your data in a structured, machine-readable format
Object — to processing based on legitimate interests
Withdraw consent — at any time for consent-based processing, without affecting the lawfulness of prior processing

To exercise any of these rights, please contact info@lyvup.com. We will respond within one month in accordance with GDPR requirements.

7. Cookies

This website uses cookies. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy. You can manage your cookie preferences at any time via Cookie Settings.

8. Complaints

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): www.autoriteitpersoonsgegevens.nl. We encourage you to contact us first at info@lyvup.com so we can address your concern directly.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on the website. The date of the most recent revision is shown at the top of this page.