Privacy Policy

Last Updated: January 20, 2025

At SupplyBridge, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

Information We Collect

1. Personal Information

We collect information that you provide directly to us, including:

  • Name and contact information (email address, phone number)
  • Company name and business information
  • Job title and role
  • Account credentials (username, password)
  • Business requirements and purchasing categories

2. Usage Information

We automatically collect certain information when you use our platform:

  • Device information (IP address, browser type, operating system)
  • Usage data (pages visited, time spent, features used)
  • Cookies and similar tracking technologies
  • Analytics data (user behavior, conversion tracking)

3. Business Information

For suppliers and buyers using our platform:

  • Certifications and quality standards (ISO, IATF, etc.)
  • Manufacturing capabilities and capacity
  • Business documents (certificates, compliance records)
  • Transaction history and RFQ data

How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, maintain, and improve our platform services
  • To match buyers with qualified suppliers using AI algorithms
  • To communicate with you about your account and service updates
  • To verify supplier credentials and ensure quality standards
  • To analyze usage patterns and optimize user experience
  • To detect, prevent, and address security issues and fraud
  • To comply with legal obligations and enforce our terms
  • To send you marketing communications (with your consent)

GDPR Compliance & Your Rights

If you are a resident of the European Economic Area (EEA), you have certain data protection rights under GDPR:

  • Right to Access: You can request a copy of your personal data we hold
  • Right to Rectification: You can request correction of inaccurate data
  • Right to Erasure: You can request deletion of your personal data
  • Right to Restriction: You can request limitation of data processing
  • Right to Data Portability: You can request transfer of your data to another service
  • Right to Object: You can object to processing of your data
  • Right to Withdraw Consent: You can withdraw consent at any time

To exercise these rights, please contact us at [email protected]

Data Security

We implement appropriate technical and organizational measures to protect your personal data:

  • SSL/TLS encryption for data transmission
  • Encrypted data storage and secure databases
  • Restricted access to personal data (need-to-know basis)
  • Regular security audits and vulnerability assessments
  • Secure backup and disaster recovery procedures
  • Compliance with industry-standard security frameworks

While we strive to protect your personal data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience on our platform:

Essential Cookies

Required for the platform to function properly (authentication, security, preferences).

Analytics Cookies

Help us understand how users interact with our platform (Google Analytics, Microsoft Clarity).

Marketing Cookies

Used to deliver relevant advertisements and track campaign effectiveness.

You can control cookies through your browser settings. Note that disabling certain cookies may affect platform functionality.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

  • Active accounts: Data retained while your account is active
  • Inactive accounts: Data deleted after 3 years of inactivity
  • Legal requirements: Data retained as required by law (tax records, etc.)
  • Analytics data: Aggregated data may be retained indefinitely

Third-Party Services

We use trusted third-party services to operate our platform:

  • Cloud hosting providers (AWS, Google Cloud)
  • Analytics services (Google Analytics, Microsoft Clarity)
  • Email service providers (SendGrid)
  • Payment processors (Stripe)
  • Mapping services (Google Maps)

These third parties have their own privacy policies. We are not responsible for their practices.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable laws, including GDPR Standard Contractual Clauses for transfers outside the EEA.

Children's Privacy

Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last Updated" date. You are advised to review this privacy policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: [email protected]

Data Protection Officer: [email protected]

Address: SupplyBridge GmbH, Munich, Germany