Table of Contents
Privacy Policy
Circolis Ltd (“Circolis”, “we”, “our”, “us”) is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, and safeguard your personal data when you use our platform.
Who We Are
Circolis is a platform enabling the discovery and sourcing of sustainable products, packaging, and services, connecting buyers and suppliers while supporting transparency and responsible sourcing.
For the purposes of data protection law, Circolis Ltd is the data controller.
The Principles We Follow
We handle personal data in line with the following principles:
- Data minimisation - we only collect what we need
- Purpose limitation - data is used only for clear, defined purposes
- Security - we take appropriate steps to protect your data
- Transparency - we are clear about how data is used
- Accountability - we take responsibility for how data is handled
Information We Collect
We may collect and process the following types of personal data:
Information you provide directly:
- Name
- Email address
- Company name
- Phone number
- Account or enquiry details
- Supplier onboarding information
Information collected automatically:
- IP address
- Browser type and device information
- Website usage data (e.g. pages visited, interactions)
Business Information from Public Sources
- In some cases, Circolis may collect and process limited business-related information about companies and suppliers from publicly available sources or third-party platforms. This may include company names, product categories, and general business information.
- This information is used to support the operation of the platform, including supplier discovery and onboarding, and does not typically include personal data.
How We Use Your Data
We use your data to:
- operate and maintain the Circolis platform
- connect buyers with relevant suppliers
- process enquiries, onboarding, and transactions
- communicate updates, responses, and service information
- improve the performance and usability of the platform
- support compliance and prevent misuse
We do not use your data in ways that are unexpected or intrusive.
Legal Basis for Processing
We process personal data under the following lawful bases:
- Consent - where you have agreed to receive communications
- Contractual necessity - where processing is required to provide services
- Legitimate interests - to operate, improve, and secure the platform
Data Sharing
Circolis is designed to minimise the sharing of personal data. We only share information where it is genuinely necessary to operate the platform and deliver our services.
When we do share data, it is done in a controlled and limited way with trusted partners, such as:
- Technology and hosting providers, to securely run the platform
- Analytics providers, to help us understand and improve user experience
- Payment providers, only when processing transactions
- Logistics or delivery partners, where needed to fulfil orders
We do not give third parties unrestricted access to your data. Each partner only receives the minimum information required to perform their role.
We do not sell, rent, or trade personal data under any circumstances.
We remain responsible for how your data is handled and take reasonable steps to ensure that any third parties we work with meet appropriate data protection standards.
We may disclose data only where required to:
- comply with legal obligations
- prevent fraud or misuse
- protect the rights, safety, or integrity of Circolis and its users
Data Retention
We retain personal data only for as long as necessary to:
- fulfil the purposes outlined in this policy
- comply with legal and regulatory obligations
- resolve disputes and enforce agreements
Where data is no longer required, it is securely deleted or anonymised.
Your Rights
Under UK GDPR, you have the right to:
- access your personal data
- correct inaccurate data
- request deletion of your data
- restrict or object to processing
- withdraw consent at any time
To exercise your rights, please contact: privacy@circolis.com
We will respond within applicable legal timeframes.
Data Security
We take appropriate technical and organisational measures to protect personal data against:
- unauthorised access
- loss or misuse
- alteration or disclosure
While no system can be completely secure, we continuously review and improve our safeguards.
Cookies
Circolis uses cookies to support platform functionality and improve user experience. For more information, please refer to our Cookie Policy.
Third-Party Links
Our platform may contain links to third-party websites.
Circolis is not responsible for the privacy practices or content of external sites.
Changes to This Policy
We may update this Privacy Policy from time to time.
Where changes are material, we will take reasonable steps to notify users.
Contact
If you have any questions about this Privacy Policy or how your data is handled, please contact: partnerships@circolis.co.uk