Privacy Policy

Last updated: August 20, 2025

Introduction

We are GoldRepublic, an online platform for the purchase, sale, and storage of physically allocated precious metals. When you visit one of our websites (including www.goldrepublic.com, www.goldrepublic.nl, www.goldrepublic.de and www.goldrepublic.es), use our platform, or subscribe to our newsletters or commercial mailings, we collect and store certain personal data. We highly value the protection of your personal data and respect your privacy. This privacy statement explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).

‍

Data Controller

In this privacy statement, “we” refers to GoldRepublic B.V., the data controller of your personal data:

GoldRepublic B.V.

Brouwersgracht 77

1015 GC Amsterdam

The Netherlands

Chamber of Commerce no.: 50172247

Telephone: +31 (0) 20 794 6021

For questions or comments regarding this privacy statement or your personal data, please contact: support@goldrepublic.com

‍

Data We Collect

We collect personal data from visitors to our website via cookies, users of the GoldRepublic app, and individuals who subscribe to our newsletters or commercial mailings. We also collect personal data when you create an account via our website or app and use our platform to buy, sell, or have physical precious metals delivered to you.

We may collect the following data, among others:

Website visitors (via cookies or similar technologies):

• IP address
• Browser type and version
• Operating system
• Pages viewed
• Time spent on pages
• Clicked links
• Other cookie-provided data

Newsletter subscribers:

• Name
• Email address
• Click, open, and reading behavior
• Consent records
• Commercial mailing subscribers:

When creating an account via our website or app:

• Name
• Username
• Email address
• Password
• Consent records for newsletters and mailings

When buying, selling, or storing physical precious metals through your account:

• Name
• Username
• Password
• Address
• Email address
• Phone number
• Gender
• Date of birth
• Copy of ID, ID type, and expiration date
• Billing information
• Contract details
• Transaction history (purchases, sales, shipping and delivery data)
• Identification of metals linked to your account
• Payment information
• Bank account details (IBAN, BIC, account holder)
• Communication with our sales department

When ordering via our webshop:

• Name
• Address
• Email address
• Billing details
• Orders placed
• Delivery information
• Payment details
• Bank account details
• Communication with our sales department

‍

User Data

For the purpose of promoting the use of the website and the services offered thereon, GoldRepublic stores data relating to users and their browsing behaviour on the website in files, with the aim of analysing such data in order to improve the design of the website so that GoldRepublic may further optimise its services. GoldRepublic also uses the relevant information to keep users informed of interesting offers relating to products and services, news, information about and advertising for the products and services of other departments of GoldRepublic, as well as products and services of business partners, or to analyse such information for marketing purposes and to link such information to your profile.

‍

Disclosure of Data

GoldRepublic is entitled to disclose your email address and other information collected about you, as well as the information you have registered yourself, to the following third parties:

• organisations and companies that form part of the group of companies to which GoldRepublic belongs, whether at the time the information is obtained or in the future;
• organisations and companies that process, or cause to be processed, the database or parts thereof, for example for the purpose of analysing such database or sending information or direct mail;
• organisations and companies that declare compliance with applicable statutory regulations relating to spam and the sending of advertising, and that send information to you exclusively by email only after having obtained permission from GoldRepublic to send such specific advertising or information.

‍

Purposes and Legal Grounds for Processing

We process your personal data for the following purposes:

• Analyzing and improving our website and services (legitimate interest)
• Personalizing content and advertising (consent)
• Direct marketing of similar GoldRepublic products/services, including Google Customer Match (legitimate interest)
• Ensuring the security of our website and systems (legitimate interest)
• Sending newsletters and commercial mailings to non-customers (consent)
• Managing your account and transaction data (contract performance)
• Registering ownership of purchased precious metals (contract performance)
• Collecting and managing payments (contract performance)
• Financial administration and accounting (legal obligation)
• Establishing, exercising, or defending legal claims (legitimate interest)
• Complying with legal obligations (legal obligation)

If you do not provide certain personal data required for contract execution, we may be unable to deliver specific services.

‍

Withdrawal of Consent

When data processing is based on your consent (e.g., newsletter or mailings), you may withdraw this consent at any time. For newsletters and mailings, this can be done via the unsubscribe link at the bottom of each message. Alternatively, send an email to support@goldrepublic.com.

‍

Cookies

We use cookies to collect standard internet log data and visitor behavior information. This helps us analyze website usage and compile statistics. We also use cookies to remember your preferences, optimize the website, and show personalized offers based on your activity across websites.

Types of cookies we use:

• Essential cookies: Required for core functionality such as login and fraud prevention
• Analytical cookies: Help analyze site usage and improve performance
• Marketing cookies: With your consent, track visits and behavior to serve personalized or non-personalized ads

For more information or to manage your preferences, refer to our cookie page.

‍

Data Sharing and Transfers

We do not sell your personal data to third parties unless you have given explicit consent. Data is only shared when necessary for our services, to comply with legal obligations, or to protect our rights.

Recipients may include:

• IT providers (e.g., hosting, email marketing, Google Analytics)
• GoldRepublic group companies processing data on our behalf
• Third-party services for client identification
• CRM and accounting services
• Logistics partners (for storage/delivery of webshop orders)
• Payment processors
• Marketing partners (mailing and email remarketing services)
• Regulatory authorities, if legally required

Your personal data is stored within the European Economic Area (EEA). If processed outside the EEA in countries not deemed adequate by the European Commission under Article 45 GDPR, we implement appropriate safeguards such as EU Standard Contractual Clauses. Contact us at support@goldrepublic.com for more details.

‍

Retention Period

We do not retain your personal data longer than necessary for the purposes for which it was collected, including legal compliance.

‍

Your Rights

Under the GDPR, you have the following rights:

• Right of access: to view and obtain a copy of your data (Art. 15 GDPR)
• Right to rectification: to correct inaccurate data (Art. 16 GDPR)
• Right to erasure: to delete your data if no longer lawfully processed (Art. 17 GDPR)
• Right to restriction of processing: to temporarily limit data use (Art. 18 GDPR)
• Right to data portability: to transfer your data to another controller (Art. 20 GDPR)
• Right to object: to processing based on legitimate interests (Art. 21 GDPR)
• Right to withdraw consent: if processing is based on consent (Art. 7 GDPR)

To exercise your rights, please contact us at support@goldrepublic.com.

If you believe we are violating data protection law, you may file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

‍

Security

We prioritize the protection of your data against unauthorized access, loss, misuse, or alteration. We implement high-level technical and organizational security measures, including multi-layered defenses. All user communication occurs over secure connections. Access to systems is limited to authorized staff and protected by additional verification methods. We also conduct periodic independent audits to assess and improve system resilience.

‍

Changes to This Privacy Statement

We may amend this privacy statement from time to time. The latest version will always be published on our website. We recommend reviewing it regularly.

By using our website, subscribing to newsletters or commercial mailings, placing webshop orders, creating an account, or using our services, you confirm that you have read and understood this privacy statement.