Privacy Policy

We may collect information including:

• Name, email address, telephone number and account information.
• Organisation, company and department information.
• Supplier registration and business information.
• Tax, licensing, insurance and compliance information.
• Tender applications and procurement-related submissions.
• Supplier performance and due diligence information.
• IP address, browser, device and website usage information.
• Location information where location-enabled functionality is used.
• Communications sent to or through the Platform.
• Documents and files voluntarily uploaded by users.

We may process information to:

• Create and administer user accounts.
• Operate the supplier registration and management process.
• Publish and manage procurement opportunities.
• Facilitate supplier participation in procurement processes.
• Perform supplier due diligence and verification.
• Produce supplier performance and risk assessments.
• Provide market intelligence and procurement analytics.
• Send account, security, tender and supplier notifications.
• Prevent fraud, abuse and unauthorized access.
• Improve the performance and functionality of the Platform.
• Comply with legal, regulatory, audit and contractual obligations.

Depending on the circumstances and applicable data protection law, information may be processed because it is necessary to provide requested services, perform a contract, comply with a legal obligation, protect legitimate interests, establish or defend legal claims, or because you have provided consent.

Where processing is based on consent, you may withdraw that consent subject to applicable law and any continuing lawful basis for processing.

When you register, we may collect your name, email address, password credentials, role, organisation and related account information.

Passwords should be stored using secure one-way hashing. We do not intend to store users' passwords in readable plain text.

Users are responsible for maintaining the confidentiality of their login credentials and notifying us where unauthorized access is suspected.

Suppliers may provide business information such as company names, registration numbers, tax details, addresses, categories, contact information, qualifications and supporting documentation.

Certain supplier information may be visible to registered buyers or other authorized Platform users where this is necessary to provide supplier directory, sourcing or procurement functionality.

Information classified as confidential will not intentionally be made publicly available unless disclosure is authorized, required to provide the service, or required by law.

We do not sell personal information. Information may be shared with authorized organisations, service providers and technology partners where necessary to operate the Platform.

• Organizations participating in procurement activities.
• Technology and cloud infrastructure providers.
• Email and communication providers.
• Mapping and geolocation providers.
• Analytics and security service providers.
• AI and data-processing providers where relevant functionality is enabled.
• Professional advisers, auditors or regulators where required.
• Law enforcement or government authorities where legally required.

Service providers are expected to process information only for legitimate purposes and subject to appropriate safeguards.

We use reasonable technical and organisational measures intended to protect information against unauthorized access, loss, alteration, misuse or disclosure.

• Authentication and access controls.
• Role-based permissions.
• Password hashing.
• Encrypted network connections where supported.
• Administrative access restrictions.
• Audit logging.
• Database and infrastructure security controls.
• Security monitoring and maintenance.

No electronic system can guarantee absolute security. Users should therefore also take appropriate measures to secure their accounts and devices.

We retain information for as long as reasonably necessary to provide Platform services and satisfy procurement, contractual, legal, regulatory, security, accounting and audit requirements.

Different information may be subject to different retention periods. Information may be deleted, anonymised or securely archived when it is no longer reasonably required, subject to applicable legal requirements.

Depending on applicable law and your circumstances, you may have rights concerning your personal information, including rights to:

• Request access to personal information held about you.
• Request correction of inaccurate or incomplete information.
• Request deletion where legally applicable.
• Object to or request restriction of certain processing.
• Withdraw consent where processing depends on consent.
• Request portability where applicable.
• Raise a complaint regarding the handling of personal information.

Some requests may be restricted where retaining or processing information is required for legal, regulatory, procurement, contractual, security or audit purposes.

The Platform may use cookies, session technologies and similar mechanisms to maintain authentication, remember preferences, secure user sessions and understand website usage.

Website analytics may include page visits, visitor identifiers, referral information, approximate geographic information, browser information, user-agent information and timestamps.

We may send service-related communications including account verification messages, password reset emails, security alerts, tender notifications, document expiry reminders and important administrative notices.

Certain operational or security communications may be necessary for providing the service and may not be treated as optional marketing communications.

Consequently, information may be processed or stored outside the country in which it was originally collected. Where required, reasonable contractual, organisational or technical safeguards will be used for international transfers.

Tender notices, job advertisements and other Platform content may contain links to third-party websites. We do not control those websites and are not responsible for their privacy practices.

Users should review the privacy policies of external websites before providing personal information to them.

The Platform is intended for organisations, suppliers, procurement professionals and other users participating in legitimate business and professional activities. It is not designed for use by children.

We may update this Privacy Policy periodically to reflect changes to the Platform, applicable laws, technology or our information-handling practices.

The effective or last-updated date displayed at the top of this page will be updated when material changes are made.

The Platform may process market assessment information, including product or service descriptions, supplier names, supplier types, geographic markets, prices, currencies, exchange rates, assessment dates and market events.

This information may be used to generate market averages, pricing trends, supplier comparisons, abnormal-price indicators and procurement intelligence.

Market intelligence should be treated as decision-support information rather than a guarantee of future pricing, supplier performance or market conditions.

AI functionality may assist with:

• Supplier risk assessments.
• Due diligence report generation.
• Supplier performance summaries.
• Market intelligence analysis.
• Procurement recommendations.
• Document summarisation.
• Identification of potential risks or unusual information.
• Supplier comparison and benchmarking.

AI-generated results are intended to support rather than replace professional judgement. Users should independently review material AI-generated findings before relying upon them.

We do not intend to make solely automated decisions producing legal or similarly significant effects on suppliers or individuals without appropriate human review where such review is required.

AI systems may occasionally produce inaccurate, incomplete or misleading results. Users responsible for procurement, compliance or supplier decisions remain responsible for validating relevant information.

Location information may include:

• Supplier addresses.
• Countries, cities and regions.
• Latitude and longitude coordinates.
• Pinned supplier locations.
• Due diligence visit coordinates.
• Site visit addresses.

Location information may be used for supplier verification, geographic supplier analysis, site visits, procurement planning, mapping and due diligence.

Device-based precise location will only be collected where the functionality requires it and the relevant browser or device permissions have been granted.

Documents may include:

• Business registration documents.
• Tax clearance certificates.
• Licences and permits.
• Insurance certificates.
• Bank details or confirmation documents.
• Manufacturer or distributor authorisations.
• Quality and compliance certificates.
• Other procurement qualification documentation.

Authorized users may review documents, record verification status, monitor expiry dates and use the information for supplier qualification and due diligence.

Verification performed through the Platform does not necessarily constitute an independent guarantee that a document is genuine unless the document has been separately confirmed with the issuing authority or another authoritative source.

Audit records may contain:

• User or administrator responsible for an action.
• Action performed.
• Affected record or entity.
• Date and time.
• Previous and updated values.
• IP address.
• Browser or user-agent information.

Audit logs may be used for security investigations, fraud prevention, internal audits, procurement accountability, troubleshooting and regulatory compliance.

Access to audit information is restricted to users with appropriate authorization.

The Platform may communicate with external technology providers to deliver certain functionality.

Mapping Services

Mapping APIs may process addresses or coordinates to display supplier locations and due diligence sites.

Exchange Rate Services

External exchange-rate services may be used to standardise and compare procurement prices denominated in different currencies.

Artificial Intelligence Services

Where AI functionality is enabled, information required for an AI task may be processed by an external AI provider. We seek to limit information transmitted to what is reasonably necessary for the relevant functionality.

Email Services

Email providers may process email addresses and message content to deliver verification emails, password recovery messages, alerts and Platform notifications.

Third-party providers may process information under their own terms and privacy requirements where applicable.

Tender submissions, supplier assessments, due diligence findings, supplier performance reviews and other restricted procurement information are intended to be accessible only to users with appropriate authorization.

Role-based access controls and audit records may be used to restrict and monitor access to sensitive procurement information.

Users must not access, copy, disclose or use confidential procurement information except for authorized purposes. Unauthorized activity may result in account restrictions and, where appropriate, further legal or administrative action.

If you have questions about this Privacy Policy, wish to exercise an applicable privacy right, or wish to report a privacy concern, please contact the Platform administrator.