Legal

Privacy Policy

How we handle the information and files you submit through the sourcing request form.

In Short

The short version

This policy in three lines before the detail — the same three lines that matter most.

01

What we collect

Your company name and work email, the product details and quantity you submit, any file you upload, and a reference number for the request.

02

What we do not collect

No raw IP address stored against your request, no full browser user-agent string, no analytics profiles from form submissions, no payment information.

03

Your control

Files are private and deleted on request. Nothing is sold, rented or added to a marketing list. Supplier sharing happens only inside an agreed engagement, with your knowledge.

Status: structural draft. The final published version is completed before public launch, once the operating entity details are confirmed. The principles below reflect our actual technical setup and will not change.

What we collect

  • Company name and work email address
  • The product description and approximate quantity you provide
  • Any photo, drawing, PDF or specification file you upload
  • A reference number assigned to your request

What we do not collect

  • No raw IP address is stored against your request
  • No full browser user-agent string is stored
  • No analytics profiles are built from form submissions
  • No payment or financial information

How we use it

  • To assess the sourcing feasibility of the product you submitted
  • To reply to you with an initial assessment
  • To manage the request if it becomes an engagement

We do not sell, rent or trade your information. We do not add you to marketing lists.

Files you upload

  • Stored in a private, access-controlled cloud bucket
  • Not publicly accessible or enumerable by URL
  • Accessible only to team members working on your request
  • Deletable on request at any time

Third-party services

  • Cloud infrastructure (hosting, database and file storage) provided by Cloudflare
  • Transactional email delivery provided by Resend
  • Both are used only to operate this service — nothing else

Where your data is processed

Our infrastructure runs on Cloudflare's global network. Cloud platform region selectors — such as the location hints available for databases and object storage — are preferences, not guarantees: data may be stored or processed in more than one region.

We do not claim that your information is stored exclusively in Canada. Where jurisdictional controls are available and appropriate, we apply them; otherwise data may be processed outside Canada, including in the United States.

If your organisation requires data to remain in a specific jurisdiction, tell us before submitting and we will confirm what can actually be guaranteed in your case.

Retention

  • Requests that do not proceed to an engagement are deleted after a reasonable period
  • Anti-abuse counters are hashed and expire within hours
  • You can ask us to delete your request and files at any time

Your rights

  • Access the information we hold about you
  • Correct inaccurate information
  • Request deletion of your request and files
  • Withdraw consent for future contact

Requests are handled by email and answered within 30 days.

Contact

Operating entity name, registered address and the person responsible for privacy protection are added here before public launch.