Privacy Statement & Cookies

1. Introduction

This Privacy & Cookie Policy explains how Unicorn Portfolio Management B.V. (“Unicorn.pm”, “we”, “us”, or “our”) processes personal data when you visit our website, use our services, or interact with us. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable laws.

This policy covers:


2. Our Information

Unicorn Portfolio Management B.V. Snoekbaarsstraat 35, 1432PE Aalsmeer, the Netherlands Chamber of Commerce (KvK) number: 42140884 Email: privacy@unicorn.pm

3. Purposes of Processing

We process personal data for the following purposes:

  • Product demonstration & information: responding to demo requests, handling inquiries, and providing initial access to our platform.
  • Delivery of services: processing personal data in the context of providing and maintaining our services
  • Service support: handling service & support requests
  • CRM & Marketing: managing customer accounts, sending service-related communications and sending promotional or tailored communications via MailerLite, only with your consent.
  • Analytics & optimization: tracking website and platform usage with Google Analytics to improve performance and user experience.
  • Legal compliance: fulfilling statutory obligations.

4. Categories of Data Processed

By using our website:

  • Identity data: name, company, job title
  • Contact data: email address, phone number
  • Usage data: pages visited, time spent, clicks, interactions
  • Technical data: IP address, browser type, device information
  • Communication data: messages sent via forms or email
  • Marketing data: newsletter subscriptions, preferences

By using our services:

  • Login data: name and email address of the users of our services
  • Billing contact data: name, email address, phone number
  • Information about your software: portfolio managers, contract owners, support contacts and software license holders & software users (name and email address)

Our legal basis for collecting and using the personal data described above will depend on the personal data concerned and the specific context in which we collect it.

Our processing activities are based on:

  • Contractual necessity (Art. 6(1)(b) GDPR)
  • Legal obligation (Art. 6(1)(c) GDPR)
  • Legitimate interest (Art. 6(1)(f) GDPR)
  • Consent (Art. 6(1)(a) GDPR)

Consent can be withdrawn at any time without affecting prior lawful processing.

6. Data Sharing & Third Parties

We share data only with trusted providers:

  • MailerLite (CRM & email marketing)
  • Google Analytics (website analytics)
  • Hetzner Online (hosting provider)
  • Legal/regulatory authorities if required

7. Data Retention

  • CRM & contact data: retained until you unsubscribe or request deletion.
  • Analytics data: retained up to 26 months.
  • Legal records: retained as required by law.
  • Platform data: retained for 6 months after termination of the agreement, unless otherwise agreed with the customer.

8. Cookies & Tracking

We only use cookies and similar technologies that are not strictly necessary after you have given your consent. You make that choice in the cookie bar that appears on your first visit.

Necessary (always active)

  • Your cookie choice and your language preference are stored in your browser’s local storage, so we don’t need to ask again. They are not shared with anyone and are not used to track you.

Analytics (only with your consent)

  • Google Analytics shows us how our website is used, such as which pages are visited and which device or browser is used, so we can improve it. It sets the cookies _ga and _ga_<ID>, which are kept for up to 2 years. Google may process this data outside the European Union. We have switched off Google’s advertising features and do not use this data for advertising.

We do not use marketing or advertising cookies. When you submit a form on our website, your details go through our own server to MailerLite, our CRM; MailerLite places no cookies on this website. Emails we send you may measure whether they are opened and which links are clicked.

You can change or withdraw your consent at any time via Cookie settings, which is also in the footer of every page. Withdrawing your consent removes the Google Analytics cookies from your browser.

9. Security Measures

We implement technical and organizational measures including:

  • SSL encryption
  • Strong password policies
  • Multifactor authentication (MFA) support
  • Single Sign-On (SSO) support
  • Role-based access controls
  • Incident response protocols
  • Cloudflare protection
  • Regular backups

10. Your Rights

You have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request deletion (“right to be forgotten”)
  • Restrict or object to processing
  • Withdraw consent at any time

Requests can be submitted to privacy@unicorn.pm. We may verify your identity before processing. You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens.

11. Changes to This Policy

We may update this policy to reflect changes in our services or legal requirements. Updates will be posted on this page with a revised date.


Last updated on 1 October 2026