PRIVACY POLICY

Supply4y | FMCG Experts

Last Updated: 20 October 2026

1. Introduction

At Supply4y, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, process, store and protect personal information when you visit our website, contact us or establish a business relationship with our company.

We process personal data in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679), Portuguese Law No. 58/2019 and other applicable data protection legislation.

Our commitment is to ensure transparency, confidentiality and responsible handling of personal information.

This Privacy Policy applies to personal data processed through our website and related business communications.

2. Who We Are — Data Controller

Supply4y operates in the international Fast-Moving Consumer Goods (FMCG) sector, connecting brands, manufacturers, suppliers, distributors, wholesalers and retailers with commercial opportunities.

For the purposes of applicable data protection legislation, the entity responsible for processing personal data is:

Company: SUPPLY4Y, Unip, Lda.
Trading Name: Supply4y
Registered Address: Porto, Portugal
Country: Portugal
Email: [email protected]

For questions concerning personal data protection or the exercise of GDPR rights, you may contact us using the email address indicated above.

3. Personal Data We Collect

Depending on your interaction with our website and services, we may collect the following categories of personal data.

3.1. Information Provided Voluntarily

When you contact Supply4y through our website or other communication channels, we may collect:

• Full name.
• Business email address.
• Company name.
• Country.
• Telephone number, where provided.
• Type of business enquiry.
• Information included in your message.
• Other information voluntarily provided during business communications.

3.2. Technical and Website Usage Information

When you visit our website, certain technical information may be collected, depending on the technologies implemented.

This may include:

• IP address.
• Browser type and version.
• Device and operating system information.
• Pages visited and navigation activity.
• Date and time of access.
• Cookie identifiers and related information, where applicable.

Some of this information may be collected automatically through website infrastructure, security systems or analytics tools.

3.3. Business Relationship Information

When establishing or maintaining commercial relationships, we may process information relating to professional contacts, including:

• Name and professional role.
• Company and business contact details.
• Commercial correspondence.
• Enquiries, quotations and business requests.
• Information necessary for managing commercial relationships.

We request only the information reasonably necessary for the relevant purpose.

4. Purposes of Personal Data Processing

Supply4y may process personal data for the following purposes:

Responding to Enquiries

To receive, assess and respond to requests submitted through our website or other communication channels.

Business Relationship Management

To establish, maintain and manage relationships with customers, suppliers, manufacturers, distributors and other business partners.

Commercial Opportunities

To identify relevant sourcing, trading and business opportunities based on enquiries and established commercial relationships.

Contractual Activities

To prepare quotations, negotiate commercial conditions, execute agreements and fulfil contractual obligations.

Website Operation and Security

To maintain the functionality, reliability and security of our website.

Website Improvement

To analyse website performance and improve the user experience, where the relevant technologies are implemented and a valid legal basis exists.

Legal and Regulatory Compliance

To comply with applicable legal, accounting, tax and regulatory obligations.

Marketing Communications

Where legally permitted, to provide information about products, services or commercial opportunities, respecting applicable consent and objection requirements.

Submitting a contact form does not automatically subscribe users to marketing communications.

5. Legal Basis for Processing Personal Data

Supply4y processes personal data only where a valid legal basis exists under Article 6 of the GDPR.

Depending on the specific circumstances, processing may be based on:

5.1. Consent

Where you have provided valid consent for a specific processing activity.

This may apply to certain marketing communications or non-essential cookies.

You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

5.2. Contractual Necessity

Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

5.3. Legitimate Interests

Where processing is necessary for Supply4y’s legitimate business interests, provided that these interests do not override your rights and freedoms.

Such interests may include responding to business enquiries, maintaining professional relationships, preventing fraud and ensuring website security.

5.4. Legal Obligations

Where processing is necessary to comply with applicable legal or regulatory requirements.

The applicable legal basis is determined according to the purpose and circumstances of each processing activity.

6. Contact Forms and Business Enquiries

When you submit an enquiry through our website, Supply4y processes the information provided to assess your request and respond appropriately.

The information may be used to:

• Identify the person and company making the enquiry.
• Understand the products or services requested.
• Evaluate potential commercial opportunities.
• Communicate regarding the enquiry.
• Maintain relevant business correspondence.

The legal basis will depend on the circumstances, including pre-contractual necessity or legitimate interests.

Information submitted through our contact forms will not automatically be used to subscribe you to newsletters or unrelated marketing communications.

Where separate consent is legally required, it will be requested independently.

7. Sharing Personal Data with Third Parties

Supply4y may share personal data with third parties where necessary for legitimate business operations or compliance with legal obligations.

These may include:

• Website hosting and infrastructure providers.
• Email and communication service providers.
• IT support and website maintenance providers.
• Professional advisers, where necessary.
• Commercial partners, where sharing is necessary for a specific business request and supported by an appropriate legal basis.
• Public authorities, where disclosure is legally required.

Where third parties process personal data on behalf of Supply4y, appropriate contractual arrangements and safeguards will be implemented as required by law.

Supply4y does not sell personal data to third parties.

Personal data will not be shared for unrelated third-party marketing purposes without an appropriate legal basis.

8. International Data Transfers

Supply4y operates in international markets and may communicate with business partners located outside the European Economic Area (EEA).

Where personal data is transferred to countries outside the EEA, we will ensure that the transfer complies with applicable GDPR requirements.

Depending on the circumstances, appropriate safeguards may include:

• Adequacy decisions adopted by the European Commission.
• Standard Contractual Clauses approved by the European Commission.
• Other legally recognised transfer mechanisms.

Where applicable, additional measures may be implemented to protect personal data.

Information about relevant international transfers and applicable safeguards may be requested through our contact details.

9. Personal Data Retention

Supply4y retains personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Retention periods depend on the nature of the information and the purpose of processing.

These may include:

Contact Form Enquiries

Personal data submitted through contact forms is retained for the period necessary to respond to enquiries and manage potential commercial relationships.

Business Relationships

Information relating to customers, suppliers and business partners may be retained throughout the commercial relationship and for an appropriate period afterwards, where justified.

Contractual and Accounting Records

Information subject to legal retention requirements will be kept for the periods established by applicable legislation.

Marketing Data

Where processing is based on consent, personal data will be retained until consent is withdrawn or the relevant retention criteria are met.

Website Technical Data

Technical information and logs will be retained according to operational, security and legal requirements.

Once personal data is no longer required, it will be securely deleted or anonymised, unless continued retention is legally justified.

Specific retention periods or objective criteria must be defined according to Supply4y’s actual processing activities.

10. Cookies and Similar Technologies

Our website may use cookies and similar technologies to ensure its proper operation, improve functionality and understand website usage.

Depending on the website configuration, these may include:

Essential Cookies

Cookies necessary for the technical operation, security and functionality of the website.

Preference Cookies

Cookies that remember certain visitor preferences, where implemented.

Analytics Cookies

Cookies used to collect information about website traffic and performance, where analytics services are implemented.

Marketing Cookies

Cookies used for advertising, campaign measurement or related purposes, where such technologies are implemented.

Where required by applicable law, non-essential cookies and similar technologies will only be activated after obtaining valid consent.

Visitors must be able to manage or withdraw their consent through the available cookie preference controls.

Further information about the cookies actually used, their purposes, providers and retention periods should be available in our Cookie Policy.

11. Personal Data Security

Supply4y is committed to implementing appropriate technical and organisational measures to protect personal data.

Depending on the processing activities and associated risks, these measures may include:

• Secure website communications.
• Access controls and authentication.
• Restricted access to personal information.
• Software maintenance and security updates.
• Appropriate data storage and backup procedures.
• Security measures applied by relevant service providers.

These measures aim to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.

However, no internet-based system can guarantee absolute security.

12. GDPR — Your Data Protection Rights

Your Privacy Matters to Us

At Supply4y, we are committed to respecting your rights under the General Data Protection Regulation (GDPR – EU Regulation 2016/679).

Under applicable data protection legislation, you may exercise the following rights, subject to the relevant legal conditions.

Right of Access

You have the right to request confirmation of whether your personal data is being processed and, where applicable, obtain access to that data and relevant information about its processing.

Right to Rectification

You may request the correction of inaccurate personal data or the completion of incomplete information.

Right to Erasure

You may request the deletion of your personal data in circumstances provided for by applicable law.

This right is not absolute and may be subject to legal obligations or other lawful grounds for continued processing.

Right to Restriction of Processing

You may request the restriction of processing in certain circumstances established by the GDPR.

Right to Data Portability

Where the applicable legal conditions are met, you may request to receive personal data you have provided in a structured, commonly used and machine-readable format.

You may also request its transmission to another controller, where technically feasible and legally applicable.

Right to Object

You may object to processing based on legitimate interests, subject to applicable legal conditions.

You have the right to object at any time to the processing of your personal data for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Automated Decision-Making

You have rights concerning certain decisions based solely on automated processing, including profiling, where such decisions produce legal or similarly significant effects.

Exercising Your GDPR Rights

To exercise your rights or request further information about how Supply4y processes personal data, please contact:

Email: [email protected]

Please provide sufficient information to allow us to identify your request.

Where necessary, we may request additional information to verify your identity.

We will respond without undue delay and, in principle, within one month of receiving your request, in accordance with the GDPR.

Where legally permitted, this period may be extended by up to two additional months, taking into account the complexity and number of requests. You will be informed of any extension within the initial one-month period.

Right to Lodge a Complaint

If you believe your personal data has been processed in violation of applicable data protection legislation, you have the right to lodge a complaint with a competent supervisory authority.

In Portugal, the supervisory authority is:

Comissão Nacional de Proteção de Dados (CNPD)

⁠Portuguese Data Protection Authority — CNPD

You may also seek an effective judicial remedy where applicable.

13. Children’s Privacy

Our website and services are intended primarily for businesses and professional users.

We do not knowingly seek to collect personal data from children through our commercial contact forms.

If we become aware that personal data has been collected from a child without an appropriate legal basis, we will take the necessary measures in accordance with applicable legislation.

14. External Websites and Third-Party Links

Our website may contain links to websites operated by third parties.

These websites have their own privacy policies and data protection practices.

Supply4y is not responsible for the content or privacy practices of independent third-party websites.

We encourage visitors to review the relevant privacy policies before providing personal information.

15. Changes to This Privacy Policy

Supply4y may update this Privacy Policy to reflect changes in:

• Business activities.
• Website functionality.
• Personal data processing practices.
• Applicable legislation.
• Regulatory guidance.

Any changes will be published on this page, together with the corresponding revision date.

Where required by law, additional notification or consent procedures will be implemented.

We encourage visitors to review this Privacy Policy periodically.

16. Contact Information

For questions regarding this Privacy Policy, personal data processing or the exercise of your GDPR rights, please contact:

SUPPLY4Y | FMCG EXPERTS

Legal Entity: SUPPLY4Y, Unip, Lda.
Trading Name: Supply4y
Registered Address: Porto, Portugal

Email: [email protected]