Built on trust
SpotShelf operates transparently, securely, and fully in line with Dutch and European law. Here we explain how we protect you — from first contact to regulation.
PCI DSS L1
Payment security
AVG/GDPR
Compliant data storage
PSD2
Certified payment service
DAC7
Income reporting
Our six pillars
How we protect you as a user
Verified identities
Every user registers with a valid email address. Brands confirm their KvK number no later than their first booking. Store owners complete Stripe identity checks (KYC) before receiving payouts.
Secure payments via Stripe
All payments go through Stripe — PCI DSS Level 1 certified. Your bank details are never visible to us or the other party.
Bilateral review system
After a booking ends, both the tenant and store owner review each other. Reviews can only be placed via verified bookings — no fake reviews.
GDPR-compliant data storage
Your data is stored on European servers and never sold. We share only what is necessary with our processors (such as Stripe for payments and Resend for email) — see the privacy statement for the full list. You can have your account and data deleted at any time.
Rental agreement with every booking
When a booking is activated, a digital rental agreement is generated that is binding on both parties.
Documented communication
All communication goes through the built-in messaging system — traceable and documented in case of a dispute.
Legislation & regulation
Legal & regulatory compliance
Our role as intermediary
SpotShelf B.V. is a mediation platform. We bring landlords and tenants together, but are not a party to individual rental agreements. The rental agreement exists directly between landlord and tenant.
SpotShelf
- • Platform & technology
- • Payment processing
- • Contract documentation
- • DAC7 reporting
Landlord
- • Listing accuracy
- • VAT declaration on rent
- • Compliance with tenancy law
- • Safety of premises
Tenant
- • Product information accuracy
- • Own tax declaration
- • Product liability
- • Compliance with law
Payments & PSD2
All payments are processed by Stripe Payments Europe, Ltd., a recognised payment service provider under the European Payment Services Directive 2 (PSD2) — implemented in the Netherlands via the Financial Supervision Act (Wft). SpotShelf never holds customer funds at any time.
Data protection & GDPR
We process personal data in accordance with the General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act (UAVG). The supervisory authority is the Dutch Data Protection Authority (AP). See our full privacy policy for details.
Tax & DAC7 reporting
SpotShelf is VAT-registered with the Dutch Tax Authority. Platform services are taxed at the standard VAT rate of 21%. All invoices comply with the requirements of Article 35 of the VAT Act 1968.
DAC7: Under EU Directive 2021/514, we are required to report the rental income of all landlords annually to the Dutch Tax Authority. This is a statutory obligation for all platform operators facilitating rental income.
Consumer protection
Our platform primarily serves businesses (B2B). The extensive consumer rights for private individuals (such as the 14-day rule for distance selling) do not in principle apply to rental agreements on our platform. Disputes can be submitted to the Geschillencommissie (Dispute Resolution Committee).
Foreign businesses
Do you want to operate in the Netherlands via our platform as a foreign company? The same rules apply as for Dutch businesses. Key points to note:
Government bodies
Regulators & authorities
Dutch Data Protection Authority (AP)
GDPR supervisor
Netherlands Authority for the Financial Markets (AFM)
Financial services
De Nederlandsche Bank (DNB)
Payment services & PSD2
Authority for Consumers & Markets (ACM)
Consumer protection
Dutch Tax Authority (Belastingdienst)
Taxes, VAT & DAC7
Chamber of Commerce (KvK)
Trade Register
Problems & disputes
What if something goes wrong?
What if a store owner doesn't honour a booking?
Contact us via the messaging platform and report the incident to trust@spotshelf.com. We investigate every case and can suspend accounts.
Can I get a payment refunded?
Refunds are assessed on a case-by-case basis. In the case of demonstrable misconduct, we work with Stripe to facilitate a refund.
Are my payment details safe?
Yes. We never store payment details. All transactions are processed by Stripe, PCI DSS Level 1 certified.
How do I report a problem?
Email trust@spotshelf.com with your booking number. We respond within 2 business days. You can also submit disputes to the Geschillencommissie (Dispute Resolution Committee).
Still have a question?
Questions about compliance, legal matters, or your rights? Our team responds within 2 business days.