Privacy Policy

1. Who we are

Fulfilment Finder is operated by Maia's Company Ltd, a company registered in England and Wales. We operate the website fulfilmentfinder.co.uk — a marketplace that connects brands and ecommerce businesses with UK third-party logistics (3PL) and warehouse providers.

We are the Data Controller for personal data collected through this website. You can contact us at: privacy@fulfilmentfinder.co.uk

2. What data we collect

For brands and buyers:

• Name and company name
• Email address and phone number
• Business requirements submitted via our RFQ (Request for Quote) form
• Reviews you write about providers

For 3PL providers and warehouse operators:

• Company name, address, contact details
• Business information (services, capacity, accreditations)
• Billing information (processed securely by Stripe — we do not store card details)
• Profile content you upload (descriptions, logos, case studies)

Automatically collected:

• Anonymised, hashed IP addresses for sponsorship impression and click tracking
• Browser type and device information (analytics only)
• Pages visited and time spent on site

3. Why we collect it and our legal basis

4. Who we share your data with

We use the following third-party services to operate the platform. Each is a data sub-processor under a Data Processing Agreement:

• Supabase (database hosting) — servers located in EU (Frankfurt). Privacy policy
• Stripe (payment processing) — processes billing data only. Privacy policy
• Resend (transactional email) — used to send emails. Privacy policy
• OpenAI (AI matching engine) — RFQ requirements are sent to OpenAI to generate provider matches. We do not send your name or contact details. Privacy policy
• Vercel (website hosting) — servers in USA with appropriate safeguards. Privacy policy
• Inngest (background job processing) — used for automated workflows.

We do not sell your personal data to any third party.

5. How long we keep your data

• Account data: retained while your account is active, then deleted within 30 days of account closure
• RFQ data: retained for 2 years then deleted
• Billing records: retained for 7 years (legal requirement)
• Anonymised analytics: retained indefinitely (no personal data)

6. Your rights under UK GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — ask us to delete your data ("right to be forgotten")
• Right to restrict processing — ask us to limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — for any processing based on consent (e.g. marketing emails)

To exercise any of these rights, email privacy@fulfilmentfinder.co.uk. We will respond within 30 days.

7. Cookies

We use only essential cookies required for the site to function (authentication session cookies via Supabase). We do not use advertising cookies or third-party tracking cookies. You will be informed of any changes to this via our cookie notice.

8. Security

We take data security seriously. Measures include: encrypted connections (HTTPS), Row Level Security on all database tables, hashed IP addresses in analytics, and access controls limiting who can view your data. No system is 100% secure — if you believe your data has been compromised, please contact us immediately.

9. Complaints

If you are unhappy with how we handle your data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would appreciate the opportunity to resolve any concern directly first.

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified by email to registered users. The date at the top of this page shows when it was last updated.