Privacy
Who we are
Supplier Brief is run by BOTSIS KOSMAS E.E. (trading as KB Analytics), a limited partnership in Greece, VAT EL801829229, General Commercial Registry (GEMI) 164122303000. We are the controller of the personal data described here. Contact: hello@supplierbrief.com.
What we keep, and why
- When you visit. We count page views and a few actions (opening the sample record, joining the waitlist, starting a checkout) ourselves, without cookies and without keeping your IP address: a visitor is a code made from the IP address, the browser and a random value we replace every day, so one person's visits on different days cannot be linked. We store which kind of page was viewed (never which firm), where the visit came from (the referring site or campaign tag), and phone or computer. Kept 180 days. This is our legitimate interest in knowing whether the site is useful.
- When you search. What you type is used to answer the search. Like every website, our hosting provider logs each request (address of the page, including what was searched, your IP address and browser) for security and fault-finding, for a limited period.
- When you check a supplier list. The list is processed in memory to give you the results and is not stored, neither the list nor the results.
- When you buy a record. The firm, what you searched for, your email address, your billing country, the amounts and Stripe's references for the payment. We need them to deliver the record, to refund it, and to keep the accounts Greek tax law requires, for as long as that law requires. Stripe also holds your name, billing address and card under its own privacy policy.
- When you ask to hear when search opens. Your email address, used once to tell you, and deleted after that email is sent.
- When you report something wrong. Your name, email, how you are connected to the firm and your message, to look into it and reply. Kept until it is handled and then for one year, as the record of why a link changed.
- Emails you send us are kept as long as needed to answer them.
The legal bases are: performing our contract with you (a purchase), our legal obligations (accounts), and our legitimate interest in running and securing the service and answering you.
Cookies and Google Analytics
We use Google Analytics to see which pages are useful. On your first visit we ask. If you accept, Google Analytics sets cookies that tell repeat visits apart; if you decline, it sets none, but your browser still sends Google an anonymous count of the visit, without an identifier, which includes your IP address as any request does. We never send Google what you search for or the names of firms you look at, and we run no advertising cookies. You can change your answer at any time with "Cookie choices" at the foot of every page. Other cookies: one that protects forms against forgery, and one that remembers your cookie answer.
Records about firms
Firm pages show records FDA has published about businesses. Some businesses trade under a person's name, so a record can name an individual as a business. We publish these records under our legitimate interest, and the public's, in helping importers check their suppliers, which U.S. law requires them to do. We do not keep the names of people to whom FDA addressed warning letters. If you object to how a record about you is shown, write to hello@supplierbrief.com or use the "Tell us" link on the page.
Who processes data for us
- Railway hosts the site and its database (United States).
- Stripe takes payments and issues invoices.
- Squarespace manages our domain, and Google our email (Google Workspace).
- Google provides Google Analytics.
Where data leaves the European Economic Area, it is protected by the European Commission's standard contractual clauses or the EU-U.S. Data Privacy Framework. We do not sell personal data.
Your rights
You may ask for access to, correction of or deletion of your personal data, object to its use or ask us to restrict it, and receive a copy of what you gave us. Write to hello@supplierbrief.com. You may also complain to the Hellenic Data Protection Authority (dpa.gr) or the authority where you live.
Changes
If this policy changes, the new version is published here with its date.