Data Providers

This Data Providers Notice describes the categories of third-party service providers that SupplySwap works with and how they help us operate, secure, and improve the SupplySwap website, applications, and related services (collectively, the “Platform”).

We carefully select and review our data providers to ensure that they meet appropriate technical and organizational standards and that any personal data is handled in accordance with applicable laws and our Privacy Policy.

1. Types of third-party providers we use

SupplySwap may share or receive data from different categories of service providers in order to deliver the Platform and its features, including:

• Cloud infrastructure and hosting: services that provide servers, databases, storage, networking, and related infrastructure.
• Analytics and product usage tools: tools that help us understand how the Platform is used so we can improve performance, usability, and reliability.
• Communication and notification providers: email, messaging, and notification services that help us send updates, alerts, and service-related communications.
• Mapping and geolocation services: tools that allow us to display maps, approximate locations, and other geography-related features within the Platform.
• Payment and billing providers: where applicable, services that help us process payments, subscriptions, or invoicing.
• Security and monitoring providers: tools that help us detect abuse, monitor system health, and enhance the security of the Platform.

2. How we work with data providers

Where our data providers process personal data on our behalf, they act as “processors” or “service providers” under applicable data protection laws. They are contractually required to:

• Process data only in accordance with our written instructions.
• Implement appropriate technical and organizational measures to protect data.
• Maintain confidentiality and restrict access to authorized personnel only.
• Assist us in meeting certain legal obligations, where required by law.

We do not sell personal data to third parties. Our use of data providers is focused on enabling and improving the services we offer through the Platform.

3. Legal basis and purposes for sharing data

We rely on various legal bases to share data with our providers, depending on the context and applicable law. These may include:

• Performance of a contract: to provide the Platform and related services you or your organization have requested.
• Legitimate interests: to operate, secure, and improve our Platform, including analytics, troubleshooting, fraud prevention, and product development.
• Compliance with legal obligations: where we need to use or share data to meet regulatory, tax, or other legal requirements.

For more information about our legal bases and how we process personal data, please refer to our Privacy Policy.

4. International transfers

Some of our data providers may be located in, or process data from, countries outside of your home jurisdiction. Where required, we take appropriate steps to ensure that such transfers comply with applicable data protection laws, which may include:

• Using standard contractual clauses or similar safeguards for data transfers.
• Working with providers that participate in recognized transfer frameworks.
• Performing due diligence on the provider’s privacy and security practices.

5. Data security and retention with providers

We expect our providers to maintain appropriate security controls and to support our efforts to protect the confidentiality, integrity, and availability of data processed through the Platform.

Data retention periods may vary based on the type of service and our contractual and legal obligations. In general, our providers will retain data only for as long as needed to deliver their services to us or as required by law.

6. Your choices and rights

Depending on your location and your relationship with SupplySwap, you may have certain rights with respect to personal data processed via our providers, such as access, correction, deletion, or restriction of processing.

Requests to exercise your rights should be directed to SupplySwap, not directly to our providers. We will work with the relevant providers, as necessary, to help respond to your request in accordance with applicable law.

7. Updates to this Data Providers Notice

We may update this Data Providers Notice from time to time, for example when we add or change the categories of services we use or to reflect changes in applicable law. When we do, we will update the “Last updated” date above. In some cases, we may provide additional notice or obtain consent where required.

8. How to contact us

If you have questions about our use of data providers or how your data is shared with third parties, you can contact us at:

Email: support@supplyswap.app