We've updated our Privacy Policy. Please take a look before the changes take effect on August 4th, 2025.

This page is the updated Privacy Policy; for the version effective until August 4th, 2025, click here.

Privacy Policy

Effective Date: August 4th, 2025 Last updated: July 1st, 2025

At Planet VG, we’re committed to building a more vegan-friendly world—while keeping your data safe and secure. This privacy policy explains how we handle your data, whether you’re a user or one of our valued partners using Planet VG to connect with customers.

This policy applies to your use of the Planet VG apps and websites. So, grab a cup of oat latte, and let’s dive in.

Important: You must be at least 16 years old to use our services. We do not knowingly collect or maintain personal data about any person under the age of 16.

1. Who are we?

Planet VG is a trade name owned by Almost Level 5 B.V., based in The Hague. We’re responsible for processing your data in compliance with the GDPR and Dutch data protection laws.

Contact us anytime:

Email: privacy@almostlevel5.com
Address: Jan Pieterz. Coenstraat 7, 2595WP The Hague (the Netherlands)
Chamber of Commerce No.: 93949138

2. How do we use your data, and why?

In short, we use your data to:

  • Create and manage your Planet VG account with your (personal or business) details.
  • Provide personalized rewards like birthday, veguation and veganniversary vouchers.
  • Offer location-based promotions and relevant rewards when you're near a partner’s location.
  • Improve the app experience through user and partner feedback.
  • Send newsletters and marketing messages.
  • Allow partners to optimize their vegan-friendly offerings through analytical tools.
  • Keep accounts secure.
  • Communicate with you about our services or promotions.
  • Process payments via Stripe (we only receive confirmation of payment success or failure and the last 4 digits of your card).

For users

  • Name: So, we can personalize emails and messages.
  • Email: For account creation, verification, and (marketing) communication.
  • Birthday: To let partners send you a birthday reward and to ensure you are eligible to create an account.
  • Veganniversary: Celebrate your vegan journey with special rewards.
  • Veguation: Celebrate your vegetarian journey with special rewards.
  • Gender: So, partners can send tailored offers (e.g., ladies-only events).
  • Location data: For location-based promotions and offers.
  • Dietary preferences: Vegan, vegetarian, flexitarian, or others.
  • Username and password.
  • Any additional information you share with Planet VG.

For partners

  • Business information and contact details (personal or business).
  • Username and password.
  • Payment and billing details.
  • Any additional information you share with Planet VG.

3. What’s the legal basis for all of this?

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

1. Performance of a contract

  • To create and manage your account.
  • To provide the services you’ve requested, such as subscriptions.
  • To process payments securely via Stripe.

Consent

  • To send newsletters.
  • To use your location data for personalized rewards.

Legimate interests

  • To improve our apps, websites and services by analyzing feedback and usage data.
  • To ensure account security and prevent fraudulent activity.

Compliance with legal obligations

  • To comply with laws requiring us to retain payment information for financial record-keeping.
  • To respond to lawful requests from public authorities or law enforcement.

4. Do we share your data with third-party providers?

We value your privacy and never sell your data. However, we do share just what’s needed to make your Planet VG experience awesome and secure. Here’s who we might share your data with and why:

Third-party providers

To keep things running smoothly, we use trusted third parties to help us with specific tasks. Here’s the breakdown:

  • Google Firebase (Google LLC): For push notifications to your device.
  • Google Cloud Platform (Google Cloud EMEA Limited): For data storage and warehousing.
  • Piwik Pro (Piwik PRO SA): For app performance and usage insights.
  • HubSpot (Hubspot, inc.): For customer service and marketing communications.
  • Stripe (Stripe Payment Europe, Limited): For payment processing and securely storing payment data.
  • Scaleway (Scaleway SAS) & NetCup (NetCup GmbH): For secure data storage and processing.
  • NetCup (to ensure your plant-based journey doesn’t add more CO2 to the atmosphere, we’ve partnered with NetCup to host our servers using 100% renewable green energy. How cool is that?).
  • MailTrap (Railsware Products Studio LLC): For sending emails without a hitch.
  • Accountants and accounting software (e-boekhouden - SkillSource B.V.): For legal compliance.

5. How do we keep your data safe?

We take your data security seriously and protect it with:

  • Encrypted servers to safeguard your information.
  • Two-factor authentication (2FA) for an extra layer of security.
  • Regular security updates to stay ahead of potential threats.
  • HTTPS to ensure secure communication between your browser and our servers.
  • OAuth2 for secure and trusted login processes.
  • Code reviews and analysis: We check our source code against the OWASP Top 10 vulnerabilities and use tools like SonarCloud to detect and fix potential security issues.

While we do everything we can to protect your data, no system is entirely foolproof. For your part, always use strong, unique passwords and keep them safe. If you ever notice anything suspicious, let us know immediately!

6. Would you like a vegan (chocolate chip) cookie?

We use cookies to make Planet VG work better for everyone.

First party cookies

NameProviderPurposeDuration
auth_session_id_legacyAlmost Level 5AuthenticationSession
auth_session_idAlmost Level 5AuthenticationSession
kc_restartAlmost Level 5AuthenticationSession
keycloak_identity_legacyAlmost Level 5AuthenticationSession
keycloak_identityAlmost Level 5AuthenticationSession
keycloak_session_legacyAlmost Level 5Authentication2 weeks
keycloak_sessionAlmost Level 5Authentication2 weeks

Third party cookies (partner.planet.vg only)

NameProviderPurposeDuration
__stripe_midStripe Payments Europe, LimitedPaymentsDay
__stripe_sidStripe Payments Europe, LimitedPaymentsDay
stripe.customerportal.csrfStripe Payments Europe, LimitedPaymentsSession

You can delete or block cookies via your browser settings but note that some features might not work without them.

7. How long do we store data?

We store your data for as long as necessary to properly execute and maintain our services and agreements. After that your personal data will be deleted.

For users, this means that your account and user data is immediately deleted or anonymized after you delete your account.

For partners, this means that as soon as your subscription is canceled, all associated data will be anonymized.

We can keep personal data longer if we are legally obliged to do so and taking into account any limitation periods. We are, for example, bound by the Dutch fiscal retention obligation of 7 years for data regarding any payments you have made.

After you have unsubscribed from our newsletter, your email address may be stored by us or the newsletter service provider Hubspot in a blocklist, if such action is necessary to prevent future mailings.

If we decide to close your account due to misconduct, we may keep your information for a period of one year after closure, due to queries and / or in case of a legal claim. In any case, we may keep (some of) your personal information for (evidence due to) legal claims.

8. What are your privacy rights?

The right to take your data with you
You can ask for a copy of your personal data in a structured, easy-to-read format. This means you can share it with someone else, if it’s technically possible.

The right to access your data
Want to know what personal data we have about you? You can request a copy to check how we’re using it and ensure it’s all lawful.

The right to change or delete your data
If your data isn’t accurate or you simply want us to delete it, you can ask us to correct or delete your data.

DIY
You can delete your user or partner account directly in your account settings, or at https://account.planet.vg/privacy page. Keep in mind, if you delete your account, all related data will be erased or anonymized—except for data that we’re required to keep. Collected stamps, vouchers, your subscriptions and other activities that you have performed will be deleted as well.

The right to restrict your data
In some cases, you have the right to limit the processing of your personal data.

The right to object to processing
Don’t want us using your data anymore? You can ask us to stop, especially for things like marketing.

The right to change your mind
If you gave us permission to process your data (like signing up for a newsletter), you can change your mind anytime.

  • Unsubscribe from our newsletter: Click the link at the bottom of any newsletter.
  • Update Cookie preferences: Adjust them on our cookie banner or the Privacy Settings below.

You can contact us at privacy@almostlevel5.com to exercise your rights.

9. How do we update this policy?

We may update this policy to reflect changes in our services or regulations. You’ll always be notified via email or app notifications for major updates.

10. Questions?

Got questions or concerns? We’re here to help.

Email: privacy@almostlevel5.com