IndoEuroMarket

Privacy Policy

Last updated: February 2026. This policy describes how we collect, use, and protect your personal data when you use IndoEuroMarket (the “Service”). We process data in accordance with the UK GDPR and the Data Protection Act 2018.

1. Data controller

The data controller responsible for your personal data is DAYWORX LTD, with its registered office at:

71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ

For data protection enquiries or to exercise your rights, please contact us at the address above or by email at dayworx@zohomail.eu.

2. What we collect and how we use it

Authentication

We use our authentication provider for sign-in, sign-up, and organization membership. It processes your email, name, profile information, and session data. This data is used for authentication, access control, and managing your account and organization. Our authentication provider acts as a data processor/sub-processor. You can review our authentication provider's privacy information at clerk.com/legal/privacy-policy.

Convex (backend and database)

Data you create in the Service—such as profiles, RFQs, bids, purchase requests, notifications, and messages—is stored and processed by Convex. Convex provides our backend, database, and real-time sync. Convex acts as a data processor. Your application data is used to deliver the Service (e.g. matching suppliers and buyers, managing bids and RFQs). You can learn more about Convex at convex.dev.

Analytics

If you accept analytics in our cookie banner, we use our analytics provider to understand how the Service is used. It is cookie-free and collects anonymized, aggregated data (e.g. page views, referrer, country, device type). Data is not used to identify you. Session data is discarded after 24 hours. Our analytics provider acts as a data processor. You can find our analytics provider's privacy and compliance information at vercel.com/docs/analytics/privacy-policy.

3. Legal basis

We process your data where necessary for the performance of our contract with you (e.g. providing the Service), where we have your consent (e.g. analytics via our cookie banner), or where we have a legitimate interest (e.g. security, improving the Service) that is not overridden by your rights. Analytics runs only with your consent; you can choose “Essential only” in the cookie banner to disable it.

4. Retention

We retain account and profile data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations. Data stored in Convex (e.g. RFQs, bids) is retained in line with our business needs and legal requirements. Our analytics provider's session data is discarded after 24 hours; only aggregated statistics are retained.

5. Your rights (UK GDPR)

You have the right to:

  • Access your personal data
  • Rectification of inaccurate data
  • Erasure (“right to be forgotten”) in certain circumstances
  • Restriction of processing
  • Data portability
  • Object to processing
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with the Information Commissioner’s Office (ICO) in the UK

To exercise these rights, contact us using the details in section 1. We will respond within the time limits set by applicable law.

6. Cookies and similar technologies

We use essential cookies for session and authentication. We do not use cookies for analytics; our analytics provider is cookie-free. Convex does not set cookies directly; it is used for server-side and real-time data. For more detail on what we track and why, see our Cookie Policy. Essential cookies are necessary for the Service to function; disabling them may limit functionality.

7. International transfers

Your data may be processed by our processors (Clerk, Convex, and our analytics provider) in the European Economic Area (EEA) and/or other countries. Where we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other mechanisms permitted by UK and EU law.

8. Contact

For data protection requests or questions about this policy, contact the data controller at the registered office address above or via the contact option provided in the Service.