Legal
How FLUX5 collects, uses and protects your personal data, in line with the GDPR. Last updated: May 2026.
This notice covers the FLUX5 website, contact forms and loan-service data. Last updated 16 August 2026.
Flux 5 B.V., Vlierweg 12, 1032 LG Amsterdam, is the controller for the processing described here. This notice applies when you visit the website, contact FLUX5 or use a FLUX5 loan service.
Depending on the service you use, this can include contact and account details, identification data when identification is actually required, IBAN and transaction references, loan terms and payment records, messages and contact-form submissions, and technical data such as browser, device, IP and security signals.
FLUX5 asks you not to submit more personal data than the relevant form or service requires.
FLUX5 processes data to answer requests, create and administer loan arrangements, provide account and support functions, secure the service, prevent misuse, meet applicable legal obligations and improve website reliability.
The legal basis depends on the activity: performance of a contract or steps requested before a contract, a legal obligation, a legitimate interest such as security and service improvement, or consent where FLUX5 specifically asks for it. You may withdraw consent without affecting earlier lawful processing.
When you subscribe, FLUX5 stores the email address you submit to manage and send the requested newsletter. The legal basis is your consent. The address is kept until you withdraw consent, the newsletter ends or retention is otherwise required by law. You can withdraw through the contact form; future newsletter emails should also provide an unsubscribe method.
The current website stack includes Vercel for hosting, media storage, Web Analytics and Speed Insights; Neon for the managed PostgreSQL database; Resend for transactional and contact email; and Google reCAPTCHA for contact-form spam protection. Each provider receives only the data needed for its role.
Resend receives email addresses and message content needed to deliver a message. Google receives the reCAPTCHA token and technical risk signals; FLUX5 removes the token before saving a contact submission. Provider locations and safeguards can change, so consult their current notices or ask FLUX5 about the transfer mechanism that applies to your data.
Vercel Web Analytics privacy and compliance
FLUX5 uses Vercel Web Analytics for aggregated page-use statistics and Vercel Speed Insights for anonymous performance measurements. According to Vercel, these products do not associate data with an individual or IP address, and Web Analytics does not use third-party cookies.
The website can store a functional language-preference cookie. When a protected contact form is used, Google reCAPTCHA performs risk analysis and may set the necessary _GRECAPTCHA cookie. FLUX5 does not use Google Tag Manager on the current website and does not use these tools to build advertising profiles.
FLUX5 keeps data only for the purpose and period that applies to its category. Contact requests are kept as long as needed to answer and follow up. Newsletter addresses are kept until consent is withdrawn or the newsletter ends. Account and loan records are kept while the service or arrangement is active and longer where needed for legal claims or a statutory administration duty. Dutch tax or accounting records may need to be retained for up to seven years where that duty applies; this does not mean every data item is automatically retained for seven years.
Provider logs, anonymous analytics and email-delivery records follow their own documented retention cycles. You can ask FLUX5 for the period or criteria that apply to a specific record.
FLUX5 uses technical and organizational measures intended to protect data against loss, misuse and unauthorized access or alteration. These include encrypted transport, access controls and managed infrastructure. No internet service can promise absolute security; suspected incidents are assessed and reported where the law requires it.
FLUX5 does not sell personal data. Data is shared with service providers for the purposes described above, with another party when you direct FLUX5 to do so, or with a competent authority when disclosure is legally required. Loan participants receive information needed for their own arrangement.
Subject to the conditions in the GDPR, you can request access, correction, deletion, restriction, portability or object to processing. You can withdraw consent where processing relies on consent. FLUX5 may need to verify your identity and may retain data where a legal duty or overriding ground applies.
You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Use the contact form or email contact[at]flux5.com and describe the request. FLUX5 may ask for information needed to verify your identity. Material changes to this notice will be published on this page with a new update date.