Legal

Privacy Policy

Last updated: 6 October 2026

Polymermarketplace gives polymer producers and traders their own private, invite-only marketplace. Privacy is the point of the product: your prices, customers and deals are never published, and never shown to other sellers on the platform. This policy explains what personal data we handle, why, who else receives it, and what your rights are.

1. Who we are

Polymermarketplace B.V. (“Polymermarketplace”, “we”, “us”), Kaldenkerkerweg 27, 5913 AB Venlo, the Netherlands, registered with the Dutch Chamber of Commerce under number 60834501.

Questions about privacy: info@polymermarketplace.com or +31 (0)85 48 54 120.

2. Our two roles

We are the controller for: our website, your user account and sign-in, the “Looking for material?” requests we receive and forward, notifications we send you, and the security and operation of the platform.

We are a processor for the data a seller puts into their own marketplace: their customers and contacts, delivery addresses, offers, prices, bids and orders. That seller is the controller of that data and decides what happens with it; we process it only on their instructions, under the data processing agreement in our Terms of Service. If you are a buyer on a seller's marketplace and have a question about your data there, you can contact the seller directly — or us, and we will pass it on.

3. What we collect

Visiting our website

Our servers record technical data needed to deliver and protect the site: IP address, browser and device type, pages requested and the time. We do not use analytics, advertising or tracking cookies, and we do not build visitor profiles.

Your account and sign-in

Your email address, name, the organisation you belong to and your role in it. You sign in with a one-time code sent to your email, through Microsoft Entra External ID — we never receive or store a password.

Using a marketplace as a seller

Your company details and branding, your catalogue (materials, grades, plants, stock), your offers and prices, and the customers you invite: company name, contact name, email address, phone number, country and delivery addresses.

Using a marketplace as a buyer

The offers you are invited to, the bids you place, delivery addresses and requested ship dates, and orders you confirm. If you set a maximum (automatic) bid, that maximum is used only to bid on your behalf; it is not shown to the seller or to other buyers.

“Looking for material?” requests

Company name, your name, work email, the material, grade and volume you are looking for, and the delivery country. Nothing is passed on until you confirm your email address and agree; we then share the request with one producer that fits it, who may invite you to their marketplace.

Notifications

We email you about your account and marketplace activity (for example, being outbid or an order to review). SMS and WhatsApp alerts are optional and only start after you add and verify your mobile number and switch them on; we store the number and a hashed (unreadable) verification code. If you use WhatsApp to bid, we process the messages you send to our WhatsApp number to place the bids you confirm. In our mobile app, push notifications use a device token, which you can switch off at any time.

The AI assistant (sellers)

When a seller asks the AI assistant a question, the question and the relevant data from that seller's own marketplace are sent to our AI provider to produce the answer. Conversations are stored in the seller's account so they can be reopened and deleted. The assistant only reads data; it cannot change anything or see any other seller's data.

4. Why, and on what legal basis

We do not sell personal data, and we do not use it for advertising.

5. Who receives your data

Within a marketplace: a seller sees the bids on their offers and who placed them. Buyers see only what the offer type shows them — for example the current highest price in an auction, never who placed it. A seller never sees another seller's marketplace, and buyers never see marketplaces they were not invited to.

Service providers who process data for us under contract (processors):

We may also share data when required by law, or with professional advisers under a duty of confidentiality.

6. Transfers outside the EU

Some providers above are based in, or may access data from, the United States. Where that happens we rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses with additional safeguards. Under its commercial terms, Anthropic does not use the data it receives through our assistant to train its models.

7. How long we keep it

• Account data: as long as your account exists, then deleted within 90 days.
• Marketplace data (offers, bids, orders): as long as the seller's agreement with us runs, then returned or deleted on the seller's instruction, at the latest 90 days after it ends.
• Unconfirmed “Looking for material?” requests: deleted 30 days after the 7-day confirmation link expires; confirmed requests: 12 months.
• AI conversations: until the seller deletes them, or the account ends.
• Mobile number and alert settings: until you remove the number or your account ends.
• Technical logs: up to 90 days.
• Invoices and bookkeeping records: 7 years, as required by Dutch tax law.

8. Security

All traffic is encrypted (HTTPS). Data is stored with Microsoft Azure in the EU and encrypted at rest. Every marketplace's data is separated and scoped on our servers, not just hidden in the screen. Sign-in uses one-time codes instead of passwords; verification codes are stored only as hashes; access by our own staff is limited to what is needed to run and support the service. No system is perfectly secure: if a breach affects your data, we will inform you and the authorities as the law requires.

9. Automated decisions

A seller can choose to let an offer be awarded automatically to the best bid when it closes; that is a commercial rule the seller sets for their own offers. Price suggestions and the AI assistant give sellers information and advice only — people make the decisions. We do not use profiling that has legal or similarly significant effects on individuals.

10. Cookies and browser storage

We only use what is strictly necessary for the site to work — no consent banner is needed:

• pmp_session — keeps you signed in across a marketplace's pages and subdomains.
• pmp_recent_tenant — remembers for 10 minutes which marketplace you came from, so the sign-in page can show its branding.
• pmp_notice_seen — remembers for a year that you closed the cookie notice, on this site and every marketplace on it.
• Browser storage used by the Microsoft sign-in library to hold your session securely in your browser.
• A few settings kept only in your own browser: whether you prefer the table or card view of offers, the timezone you picked for offer times, that you closed a notice. They never leave your device.

No analytics, advertising or third-party tracking cookies are used. The site's fonts are served from our own servers, so loading a page sends nothing to third parties.

11. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you, and receive a copy;
• have it corrected or completed;
• have it deleted, where we no longer need it or you withdraw consent;
• restrict or object to processing based on our legitimate interest;
• receive your data in a portable format;
• withdraw consent at any time, without affecting earlier processing.

You can switch SMS, WhatsApp and push alerts off yourself in your settings (or reply stop on WhatsApp). For anything else, email info@polymermarketplace.com; we answer within one month. If you are not satisfied, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or the authority in your own EU country.

12. Children, changes and contact

Our services are for businesses and are not intended for anyone under 16. We may update this policy as the platform changes; the date at the top shows the latest version, and we will tell account holders about significant changes by email.