1. Who we are
BVform is a trading name of DT Global Ventures Ltd, registered in England & Wales, company no. 16042336. Registered office: 3rd Floor, 86-90 Paul Street, London EC2A 4NE, United Kingdom. We are the controller of the personal data described in this policy. You can contact us about privacy at privacy@bvform.nl.
2. What personal data we collect
- Contact details: your name, email address, phone number and the country you're applying from.
- Identity and supporting documents: your passport or other identity document and proof of address, or, for a corporate shareholder, a registry extract, articles of association, a register of shareholders, a structure chart and identity documents for every beneficial owner.
- Company information: your proposed company name, a description of your business activity, and share details.
- Communications: emails, form submissions and messages you send us, and notes of calls with us, and records of the scheduling of your call with the notary.
- Application progress: the status of your incorporation, VAT registration and any Article 23 application, tracked in your client portal.
- Payment details when you pay for our service. Card and bank payments are handled by our payment provider; we don't store full card numbers.
3. Why we process your data
We rely on the following legal bases under the UK GDPR and, where it applies to you, the EU GDPR:
- Contract: to assess and carry out your application, including our own due diligence, coordinating with the notary, collecting and forwarding your documents, and supporting your VAT and, if you take the add-on, Article 23 application.
- Legal obligation: to meet UK anti-money-laundering and client due-diligence requirements.
- Legitimate interests: to keep our service secure, prevent fraud, and improve how we explain the process, balanced against your rights.
- Consent: for anything we can't rely on another basis for, such as marketing email. You can withdraw consent at any time.
4. Who we share your data with
We share your data only with the people who need it to form your BV or support your application, and with our own service providers:
- The independent Dutch civil-law notary, who runs its own due diligence, drafts and executes the deed, and registers your BV with the KVK and files its UBO details.
- Translators and interpreters, where your documents or your call with the notary need one.
- Providers of qualified electronic signature (QES) and identity-verification services, to complete the power-of-attorney signing and our own checks.
- Our IT, hosting, email and payment providers, who process data on our instructions.
- The Belastingdienst and other Dutch or UK authorities, where the law requires it, for example as part of your VAT or Article 23 application.
We don't sell your data, and we don't share it with anyone for their own marketing purposes.
5. International transfers
Because our clients, the notary and our service providers are based in different countries, some of your data crosses borders:
- Transfers between the UK and the EU/EEA, for example to the notary in the Netherlands, are covered by adequacy arrangements recognised by both the UK and the EU, so they can take place without extra safeguards.
- If you're applying from outside the UK or the EU/EEA, for instance from China, Hong Kong or Turkey, you send us personal data as part of your application. Where we then need to transfer data onward to a country the UK doesn't recognise as offering an adequate level of protection, we put appropriate contractual safeguards in place first, such as the UK's International Data Transfer Addendum to the EU Standard Contractual Clauses.
6. If you're applying from mainland China or Turkey
If you're applying from mainland China, China's Personal Information Protection Law (PIPL) may also apply to how your data is handled and transferred out of China. If you're applying from Turkey, its data protection law (KVKK) may also apply. Where either law requires a specific form of consent, or another safeguard, before we can receive or transfer your data, we'll ask you for it as part of your application. This section is general information, not legal advice on your own position.
7. How long we keep your data
How long we keep your data depends on why we hold it:
- Client due-diligence records, including identity documents and the checks we run on you, for five years after our relationship with you ends, as UK anti-money-laundering rules require.
- If you enquire or start an application that doesn't go ahead, we delete your details after 24 months.
- We keep other records, such as our communications with you, for as long as we reasonably need them to run our business and meet our legal obligations. Where we haven't yet set an exact period for a category of data, we keep it only for as long as we need it, and we review our retention periods regularly.
8. Your rights
Under the UK GDPR and, where it applies, the EU GDPR, you can ask us to give you access to your personal data, correct it, delete it, restrict how we use it, or give you a copy in a portable format. You can also object to processing based on our legitimate interests, and withdraw consent at any time where we rely on it. To use any of these rights, email privacy@bvform.nl. If you're not satisfied with our response, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk. If you're in the EU, you may also be able to complain to your own country's data protection authority.
9. Cookies
We cover the cookies and analytics we use, and how to manage them, in our cookies policy.
10. Contact us
We haven't appointed a statutory data protection officer. For any privacy question or request, email privacy@bvform.nl; we aim to respond within one month. For a plain-English rundown of what we do, what we don't do, and what's still on you before you apply, see Before you start.