Privacy policy

1. Who we are

Tail Sourcing operates the procurement platform available at tailsourcing.com. For questions about this policy or to exercise any of the rights described below, please contact us at sales@tailsourcing.com.

If you are located in the European Economic Area, the United Kingdom or Switzerland, Tail Sourcing is the controller of your personal data unless otherwise stated in a written agreement.

2. Personal data we collect

Account and identity data: name, work email, company, job title and password credentials.

Billing data: billing contact, tax identifiers and payment metadata processed by our payment provider (Stripe). We do not store full card numbers on our servers.

Platform usage data: pages visited, features used, event and error logs, device and browser information, IP address, and approximate location.

Communications: content of emails, support tickets, webinar registrations and marketing preferences.

Customer content: purchase requests, RFx, supplier records and related documents that your organisation uploads into the Services and for which your organisation is the controller.

3. Legal bases for processing

Where GDPR or UK GDPR applies, we rely on the following legal bases: (i) performance of a contract, to provide and administer the Services; (ii) legitimate interests, to secure the platform, prevent fraud, and improve our products; (iii) consent, for optional marketing communications, non-essential cookies, and any special-category data you voluntarily submit; and (iv) compliance with legal obligations.

4. How we use personal data

To deliver, operate and maintain the Services, authenticate users and provision workspaces.

To process subscriptions, invoices, renewals and cancellations.

To provide customer support and respond to inquiries.

To monitor, secure and improve the platform, including analytics, error diagnostics and product research.

To send transactional emails (activation, password reset, billing notices) and, where permitted, service and marketing updates you can unsubscribe from at any time.

To comply with legal, tax, accounting and regulatory obligations.

5. Sharing and subprocessors

We share personal data only with vetted service providers that support the Services under written contracts requiring appropriate confidentiality and security. Current categories include: cloud hosting and database (Lovable Cloud / Supabase infrastructure), payments (Stripe), transactional email delivery (Resend), product analytics and error monitoring, and customer support tooling.

We may disclose personal data if required by law, to enforce our terms, or to protect the rights, property or safety of Tail Sourcing, our customers or others. In the event of a merger, acquisition or asset sale, personal data may be transferred subject to the protections of this policy.

6. International data transfers

Personal data may be processed in countries outside your own, including the United States. Where required, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and equivalent safeguards to ensure an adequate level of protection.

7. Data retention

We retain personal data only for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes and enforce our agreements. Account data is generally retained for the life of the account plus a reasonable archival period. Billing records are retained for the period required by applicable tax law. You may request deletion of your data at any time, subject to those legal retention requirements.

8. Security

We apply industry-standard administrative, technical and organisational safeguards, including encryption in transit (TLS) and at rest, role-based access control, audit logging, least-privilege principles and regular security reviews. SOC 2 Type II is currently in progress. No system is perfectly secure; if we become aware of a personal data breach affecting you, we will notify you and the relevant authorities as required by law.

9. Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict or object to the processing of your personal data, receive a portable copy, and withdraw consent at any time without affecting the lawfulness of prior processing.

You may also lodge a complaint with your local data protection authority. To exercise any of these rights, email sales@tailsourcing.com. We may need to verify your identity before responding.

10. Cookies and similar technologies

We use strictly necessary cookies to run the Services, and, with your consent where required, analytics and preference cookies to understand usage and improve the platform. You can manage cookie preferences from your browser settings and, where applicable, from our cookie banner.

11. Children

The Services are intended for business use and are not directed to individuals under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. Material changes will be communicated through the Services or by email. The "Last updated" date at the top of this page indicates when the policy was last revised.

13. Contact

For questions, requests or complaints regarding this policy or our data practices, please contact us at sales@tailsourcing.com.