External services
VAT & Company Autofill checks numbers and addresses with the public services below. It sends only the number or the address being checked: no customer name, no e-mail address, no IP address of your customer, no cookies.
From where:
- Plugins on your own server (Shopware, WooCommerce, Magento, PrestaShop): every call goes from your shop’s server to the service. Nothing passes through us.
- Hosted apps (Shopify, Lightspeed): the call goes from our server (lookup-api, in the EU) to the service, on your shop’s instruction. We are your processor: see the data processing agreement and the sub-processors. These public registers are recipients, not our sub-processors.
A call happens only when a customer enters or changes a number or address, when an order or account is saved and checked again on the server, or when you click a “Test” button in your admin.
VIES (European Commission)
Section titled “VIES (European Commission)”Checks whether an EU VAT number is registered and returns the registered company name and address.
- Sent: the VAT number (country code + number).
- Service: VIES on the European Commission website
- Terms: European Commission legal notice
- Privacy: Privacy policy for websites managed by the European Commission
PDOK Locatieserver (Kadaster, Netherlands)
Section titled “PDOK Locatieserver (Kadaster, Netherlands)”Finds the street and city of a Dutch address.
- Sent: postcode and house number (and addition).
- Service: PDOK
- Terms: PDOK copyright and terms of use
- Privacy: Kadaster privacy statement
BeST address service (BOSA, Belgium)
Section titled “BeST address service (BOSA, Belgium)”Suggests Belgian streets for a postcode and checks a Belgian address.
- Sent: postcode, the typed part of the street name, house number and box.
- Service: BeST-Address at FPS BOSA
- Terms and privacy: FPS BOSA privacy statement
KvK API (Dutch Chamber of Commerce)
Section titled “KvK API (Dutch Chamber of Commerce)”Only when you switch on the KvK lookup, and always with your own KvK API key (the KvK does not allow a shared key).
- Sent: the KvK number (with “Fetch the full address” also the request for the company’s base profile).
- Service: KVK Developer Portal and ordering the KVK API
- Terms: KVK API terms of use
- Privacy: KVK privacy statement
What is kept
Section titled “What is kept”The lookup log in your admin stores the input masked and deletes it after 30 days (configurable, at most 180 days). Results are cached for a short time to spare the services; KvK results are cached only for your own shop. More in the privacy policy.