GORVETA Supplier Portal Privacy Policy

2. Information We Collect

We collect information voluntarily submitted during the 7-step registration process:

• Contact Information: Contact person name, executive title/designation, official email address, and direct telephone/WhatsApp number.
• Company & Location Information: Registered corporate/legal name, operating city, state, country, and company website URL.
• Manufacturing Capabilities: Selected product families, custom/OEM manufacturing scopes, and customer drawing production capability.
• Technical Processes & Materials: In-house machining processes (e.g. CNC turning, milling, laser cutting, stamping) and processed raw materials.
• Export & Quality Data: Current international export regions served and self-declared quality certifications (e.g. ISO 9001, IATF 16949, AS9100, or No Certifications).
• Commercial Preferences: Typical order sizes, delivery lead times, and sourcing opportunity interests.
• Technical & Security Metadata: IP address, timestamp, Cloudflare anti-bot verification token, and idempotency identifiers collected strictly to maintain system integrity and prevent abuse.

3. How We Use Submitted Information

Information collected through the supplier registration portal is utilized solely for legitimate industrial procurement purposes:

• Evaluating manufacturing capabilities for potential international sourcing matches.
• Conducting supplier screening, initial technical review, and qualification checks.
• Communicating with designated company representatives regarding registration status or relevant inquiries.
• Maintaining security, preventing automated bot abuse, and auditing system activity.
• Complying with applicable legal and trade regulatory obligations.

4. No Sale of Supplier Information

GORVETA does not sell, rent, or trade supplier profiles or contact information to third-party marketing agencies or consumer data brokers. Information is shared only with verified enterprise procurement clients or trusted infrastructure service providers strictly necessary to execute procurement operations.

5. Infrastructure & Service Providers

We utilize reputable, industry-standard infrastructure providers to deliver a secure and reliable experience:

• Hosting & Application Logic: Scalable cloud infrastructure with strict SSL/TLS encryption.
• Database Services: Enterprise-grade PostgreSQL with Row Level Security (RLS) and strict role segregation.
• Anti-Bot Protection: Cloudflare Turnstile for privacy-preserving bot and abuse mitigation.
• Transactional Email: Enterprise email delivery infrastructure with HTML sanitization to deliver registration reference confirmations.

6. Data Security Safeguards

We implement defense-in-depth technical safeguards, including Content Security Policy (CSP), HTTP security headers, parameterized database queries, Row Level Security, sliding window rate-limiting, and server-side Zod validation. While we apply robust commercial standards, no electronic storage or transmission over the internet can be guaranteed 100% immune to risk.

7. Data Retention & Updates

Supplier capability profiles are retained in our procurement indexing database for ongoing sourcing evaluation. Registered companies may contact us at any time to request updates, corrections, or profile de-indexing.

8. Business Users Only

The GORVETA Supplier Acquisition Portal is strictly designed for commercial industrial enterprises and manufacturing organizations. It is not intended for consumer use or minors.

9. Contact Information

For inquiries regarding this Privacy Policy or your company's data records, please contact our procurement desk at: suppliers@gorveta.com.