Privacy Policy

1. Introduction

TANDOR ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect information when you use our EU-organic botanical sourcing broker platform at tandor.eu.

2. Data We Collect

Account Data: Name, email, company name, country, VAT number, phone number when you register.

Transaction Data: RFQ details, quotes, orders, invoices, and messaging content.

Usage Data: Pages visited, search queries, browser type, IP address (anonymized).

3. How We Use Your Data

We use your data to: operate the sourcing platform, facilitate transactions between buyers and suppliers, send notifications about RFQs and orders, improve our platform, and comply with legal obligations.

4. Data Sharing

We share limited data with: counterparties in transactions (buyer↔supplier company details), service providers (Supabase for hosting, Vercel for deployment, Resend for emails), and legal authorities when required by law.

4.2 B2B sourcing outreach (legitimate interest) Where we contact procurement professionals at organisations whose business activity matches the EU-organic botanical raw materials we broker, we rely on legitimate interest under GDPR Article 6(1)(f). The detailed Legitimate Interest Assessment (purpose, necessity, balancing test, jurisdiction safeguards, recipient rights) is published at /lia. Recipients can object at any time via the one-click List-Unsubscribe header, by replying 'unsubscribe', or by emailing info@tandor.eu — removal is permanent and applied within 24 hours.

5. Your Rights (GDPR)

Under GDPR, you have the right to: access your data, rectify inaccurate data, erase your data, restrict processing, data portability, and object to processing. Contact info@tandor.eu to exercise these rights.

6. Data Retention

We retain account data for as long as your account is active. Transaction data is retained for 7 years for tax and legal compliance. You can request account deletion at any time.

7. Cookies

We use essential cookies for authentication and session management. Analytics cookies (Google Analytics) are only set with your consent.

8. Contact

For privacy inquiries: info@tandor.eu

Data Controller: TANDOR, Romania, EU