TRANSPARENCY & RESPONSIBILITY
Privacy policy
Draft policy · operator details must be confirmed before public launch.
What we collect and why
Depending on the form, we collect your name, business email, company, country or business location, and purchasing, sample or supply requirements. We use these details for manual review, replies and related business follow-up. Marketing subscriptions are not preselected.
Service providers & international processing
The site is designed to use Cloudflare Workers, D1 and Turnstile. Submitted information and security verification may be processed by Cloudflare outside your country. The operator must confirm storage locations and international transfer arrangements before public launch.
Security & abuse prevention
Cloudflare Turnstile provides security verification. The server uses temporary salted IP digests for rate limiting; full IP addresses are not persisted in D1. Rate and duplicate records expire after short windows and are cleaned up when subsequent requests occur. Unreviewed supplier applications are not published.
Retention & your rights
[OPERATOR CONFIRMATION REQUIRED] Lead retention, deletion schedule, processing basis, controller legal name, privacy email and applicable law are not finalized. Depending on applicable law, you may have access, correction, deletion and consent-withdrawal rights. A working rights-request channel must be provided before public launch.
Launch status
This is a draft dated 24 October 2026 and does not replace legal review. Public lead-generation promotion must wait until operator identity, contact, retention and transfer arrangements are confirmed.