Privacy statement
This statement explains which personal data Holstr. collects, why, how long we keep it and which rights you have. It applies to every use of the platform: as a sport shooter, hunter, collector, dealer or club.
Who is responsible for processing your data?
The data controller is Holstr. Maatschap, registered office at Sparrendreef 4, 8020 Hertsberge, Belgium. For any question about this statement or about your data, contact us at privacy@holstr.be.
Which data do we collect, and why?
We only collect data needed to operate the platform: • Account data: name, email address, password (stored encrypted), phone number, address, language preference, profile picture — to create and manage an account. • Armory: brand, model, calibre, serial number, category, photos, shot counter, purchase details — to enable your personal firearm records. By default this data is visible only to you. • Permit wallet: document type, document number, validity dates, and the scan or photo of the document itself — to keep your permits and certificates in one place. • Shooting sessions and licence progress: date, location, club or competition, firearms used — to track your shooting activity, among other things with a view to maintaining your sport shooter's licence. • Dealer and club data: company name, address, company number, contact details, opening hours, recognition details — to build verified profiles other users can consult. • Marketplace data: listings, bids, messages between buyers and sellers — to enable the marketplace function. • Payment data: processed by our payment partner Stripe; Holstr. itself never stores full card details. • Technical data: IP address, device type, cookies — for security, fraud prevention and the functioning of the website.
Special categories of data
Some documents you voluntarily upload to your permit wallet — in particular a medical certificate or psychological certificate — may contain health data within the meaning of Article 9 GDPR. We process this data solely on the basis of your explicit consent, given at the moment you upload the document yourself. These documents are never visible to other users, are kept in secure private storage, and only you have access to them.
4. On which legal basis do we process your data?
• Performance of the contract: to create and manage your account and to use the features you actively choose (Art. 6.1.b GDPR). • Legal obligation: where firearms legislation imposes specific registration or retention duties on recognised dealers or intermediaries (Art. 6.1.c GDPR). • Legitimate interest: for fraud prevention, platform security and the verification of dealers and clubs, always balanced against your interests and rights (Art. 6.1.f GDPR). • Consent: for sensitive documents such as medical or psychological certificates, and for non-essential cookies (Art. 6.1.a and Art. 9.2.a GDPR).
5. How long do we keep your data?
We keep your data no longer than necessary for the purposes for which it was collected. Active account data is kept for as long as your account exists. Records of disposed firearms and completed transfers are kept as an archive because of the traceability firearms legislation requires. If you delete your account, we delete or anonymise your personal data within a reasonable period, except what we are legally required to keep longer (for example data relevant to an ongoing recognition of a dealer or club).
6. Who do we share your data with?
We never sell your data to third parties. We only share data where necessary: • With other users: only what you choose to show yourself (for example on a listing or a club page). • With processors providing services on our behalf: hosting and database (Supabase), payments (Stripe), email and push notifications. With every processor there is a data processing agreement obliging them to use your data only on our behalf and according to our instructions. • With public authorities: only where we are legally required to do so, for example under firearms legislation or a court order.
7. Transfers of data outside the European Economic Area
Some of our processors may process data outside the EEA. In that case we provide appropriate safeguards, such as standard contractual clauses approved by the European Commission, in line with the GDPR.
8. How do we secure your data?
We apply technical and organisational measures matched to the sensitivity of your data: access to your armory and permit wallet is limited to you through row-level access control in our database, sensitive documents are kept in private, non-publicly accessible storage, and access to your Armory requires mandatory two-factor authentication on top of your regular password. Internal access by Holstr. staff is limited to what is needed for moderation, support or verification.
9. Your rights
You have the right of access, rectification, erasure, restriction of processing, portability of your data, and to object to certain processing. You can exercise these rights via your profile settings, or by contacting us at privacy@holstr.be. We respond within the legal period of one month. You also always have the right to lodge a complaint with the Belgian Data Protection Authority (GBA), Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be.
10. Cookies
We use necessary cookies to keep Holstr. secure and working, and — with your consent — analytical cookies to understand how the site is used. You can adjust your cookie preferences at any time via the cookie banner. Refusing non-essential cookies has no effect on the core functionality of the platform.
11. Minors
Holstr. is not intended for persons under 18 years of age. When registering you expressly confirm that you are at least 18 years old.
12. Changes to this statement
We may amend this statement as the platform evolves or regulations change. For significant changes we will inform you by email or a notice on the platform. The date of the last update is always shown at the bottom of this page.
13. Contact
For any question about this privacy statement or about how we process your data, contact us at privacy@holstr.be.
Last updated: August 2026