Last updated 29 August 2026. Applies to conversation24.com and our own business relationships.
Conversation24 is a trade name used by Conversion24 B.V. for its conversational technology services.
This Privacy Policy explains how Conversation24 processes Personal Data when acting as a controller, including through its website and in connection with prospects, clients, suppliers, business contacts, account users and other business relationships.
When Conversation24 processes customer data on behalf of a client through its services, Conversation24 generally acts as processor. That processing is governed by the client's instructions and the Data Processing Agreement, not by this policy.
Depending on our relationship with you, we may process:
We process Personal Data to operate and secure our website and services; communicate with prospects, clients and suppliers; enter into and administer agreements; provide support; manage accounts and business relationships; invoice and collect payments; comply with legal obligations; prevent misuse and security incidents; improve our business and services; and conduct appropriate business-to-business marketing.
Depending on the processing activity, we rely on performance of a contract or steps taken before entering into a contract, compliance with legal obligations, our legitimate interests or those of a third party, or consent where required.
We may share Personal Data with service providers that support our business, professional advisers, financial and payment service providers, authorities where legally required, and parties involved in a merger, financing, acquisition, restructuring or similar corporate transaction. Where service providers process Personal Data for us, we use appropriate contractual and security arrangements.
Personal Data processed in connection with our services is processed within the European Economic Area. Where Personal Data is nevertheless transferred to or accessed from outside the EEA, we use an appropriate transfer mechanism where required by applicable Data Protection Laws, such as an adequacy decision or the applicable Standard Contractual Clauses.
We retain Personal Data only for as long as reasonably necessary for the purpose for which it was collected, to perform or administer agreements, comply with legal obligations, resolve disputes and establish, exercise or defend legal claims. Retention periods vary depending on the relevant record and legal requirements.
We maintain technical and organisational measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. The platform is subject to annual penetration testing.
Subject to applicable law, you may have rights to access, correct or delete Personal Data, restrict or object to processing, receive certain Personal Data in portable form, and withdraw consent where processing is based on consent.
Requests may be sent to info@conversation24.com. You may also lodge a complaint with the competent data protection supervisory authority; in the Netherlands this is the Autoriteit Persoonsgegevens.
Where permitted by law, we may use business contact information to communicate about our products and services. You can object to direct marketing at any time by using the unsubscribe option provided or by contacting us.
Our website uses necessary cookies and, where enabled, analytics or other optional technologies. Where consent is legally required for optional cookies or similar technologies, they are only activated after you have given that consent.
We may update this Privacy Policy from time to time. The current version is always published at conversation24.com/legal/privacy.
See also the current Subprocessor List referenced in the Data Processing Agreement.