Privacy Policy

GMP Finder (“we”, “our”, or “us”) operates the website gmpfinder.com (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Economic Area and the Information Technology Act, 2000 and its rules for users in India.

Information you provide directly

• Contact information: name, email, phone number, and company name when you submit a contact form, request a quote (RFQ), or claim a listing.
• RFQ details: product requirements, quantity, preferred certifications, budget, timeline, and other details submitted through our quote request forms.
• Claim submissions: information provided when claiming a manufacturer listing — your name, role, and proof of association.

Information collected automatically

• Usage data: pages visited, time spent on pages, referring URLs, and navigation paths.
• Device information: browser type, operating system, device type, screen resolution, and IP address.
• Cookies and tracking: we use cookies and similar technologies to enhance your experience and gather analytics data (see Cookies).

We use the information we collect for the following purposes:

• To operate, maintain, and improve the Service and its features.
• To process and respond to your enquiries, RFQs, and listing claims.
• To connect buyers with relevant manufacturers based on submitted requirements.
• To send you relevant communications about your enquiries or account — we will not send unsolicited marketing emails without your explicit consent.
• To analyse usage patterns and improve the user experience.
• To detect, prevent, and address technical issues, fraud, or abuse.
• To comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We may share your information in the following circumstances:

• With manufacturers: when you submit an RFQ, your contact information and requirements may be shared with relevant manufacturers to fulfil your request.
• Service providers: we use third-party services for hosting, analytics, and email delivery. These providers process data on our behalf and are bound by contractual obligations to protect your information.
• Legal requirements: we may disclose information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: in the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction.

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data that are stored on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some portions of the Service may not function properly.

• Essential cookies: required for the Service to function — session management and similar.
• Analytics cookies: help us understand how visitors interact with the Service so we can improve it.
• Preference cookies: remember your settings and preferences for a better experience.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Contact form submissions and RFQ data are retained for up to 24 months unless you request earlier deletion. Analytics data is retained in an aggregated, anonymised form and may be kept indefinitely.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request that we correct any inaccurate or incomplete personal data.
• Right to erasure: request that we delete your personal data, subject to certain legal exceptions.
• Right to restrict processing: request that we limit how we use your data.
• Right to data portability: receive a copy of your data in a structured, commonly used, machine-readable format.
• Right to object: object to our processing of your personal data for direct marketing purposes.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please email us at privacy@gmpfinder.com. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption of data in transit (HTTPS/TLS), secure database storage, and access controls limiting data access to authorised personnel only. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

The Service is intended for business use and is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically for the latest information on our privacy practices.