Procurist - Privacy Policy

1. Who We Are

Procurist is operated by Procurist OÜ, registered in Estonia with registration number 17865527.

For questions about this policy or your data, contact us at: privacy@procurist.io

2. What This Policy Covers

This policy explains how we collect, use, and protect personal data when you use the Procurist platform as a vendor (supplier/brand). A separate policy applies to interior designers using our platform.

3. What Data We Collect

When you register and use the Procurist vendor portal, we collect:

Account & Company Information:

• Contact person name, email address, phone number
• Company name, trading name, registered address
• VAT number, EORI number, company registration number
• Bank/payment details (processed by our payment provider Stripe)

Product Information:

• Product catalogue data including descriptions, images, pricing, dimensions
• Inventory and lead time information

Usage Information:

• Login times and dates
• Actions taken in the platform
• IP address and browser information when you accept our terms

4. Why We Collect It (Legal Basis)

We process your data based on:

• Contract performance: To provide the Procurist marketplace service to you
• Legal obligation: To comply with tax, VAT, and customs requirements
• Legitimate interest: To improve our service, prevent fraud, and communicate with you about your account

5. Who We Share Data With

We share data with:

• Verified interior design professionals using Procurist: Your brand name, product catalogue, and company contact details are only visible to logged-in, trade-verified users (so they can place orders)
• Payment processors: Stripe, for processing payouts to you
• Hosting providers: Vercel, Supabase (data processors who store data on our behalf)
• Legal/regulatory authorities: If required by law

We do NOT sell your personal data to third parties. Your products, pricing, and company information are never displayed publicly — they are only accessible to authenticated trade users.

6. Where Data Is Stored

Your data is stored on servers in the European Union (Germany/Ireland) via our hosting providers. If any data is transferred outside the EU, we ensure appropriate safeguards are in place.

7. How Long We Keep Data

• Active vendor data: For the duration of your relationship with us, plus 2 years
• Financial/VAT records: 10 years (legal requirement)
• Terms acceptance records: 10 years (for legal compliance)

You can request deletion of non-essential data at any time.

8. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data (with some exceptions for legal requirements)
• Restrict processing in certain circumstances
• Data portability — receive your data in a structured format
• Object to processing based on legitimate interest
• Withdraw consent where processing is based on consent

To exercise these rights, contact: privacy@procurist.io

9. Data Security

We protect your data using:

• HTTPS encryption for all data transmission
• Secure cloud infrastructure with access controls
• Regular security reviews
• Access restrictions — your products, pricing, and company information are never publicly visible; they are only shown to verified, logged-in trade professionals

10. Cookies

Our vendor portal uses essential cookies only for authentication and session management. These are necessary for the platform to function and do not require consent.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email to your registered address. Continued use of the platform after changes constitutes acceptance.

12. Complaints

If you're unhappy with how we handle your data, you can complain to:

• Us first: privacy@procurist.io
• Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon): www.aki.ee
• Or your local EU data protection authority