Privacy & cookie notice
Version: 2026-10-29-v1 · 2026-10-29
Controller and contact
Not yet configured. The operator must complete this before collecting data in production.
Not yet configured. The operator must complete this before collecting data in production.
Privacy email pending; submit a privacy request through our contact page.
Information we collect
Interest lists: email address, selected products, interface language, creation/update/expiry dates, the privacy notice version and a hash of a random browser credential. Emails are not verified and do not establish the identity of the email owner. Enquiries: name, email, company, phone, message and language. Administration: authorised staff accounts and sign-in sessions. Our server or hosting providers may also process IP addresses, request times, browser information and error logs for security. Short-lived abuse-prevention counters do not write raw IP addresses into interest-list records.
Purposes and legal bases
We save product interests and handle enquiries that you actively request, and provide necessary session functionality. Where applicable, this is processing to take pre-contractual steps at your request or deliver the service you request. Necessary security and abuse-prevention processing may rely on legitimate interests. Saving products is not a marketing subscription: this feature does not send marketing emails. If we introduce marketing or non-essential tracking that requires consent, we will provide a separate voluntary choice and a way to withdraw it.
Access, recipients and international transfers
Staff authorised to handle customer leads can view emails and selected products. A random credential identifies this browser; knowing an email address does not provide access to its list. Different browsers can create separate records for the same email. Hosting, database and backup providers may process necessary data under our instructions. Providers: Not yet configured. The operator must complete this before collecting data in production. Processing region: Not yet configured. The operator must complete this before collecting data in production. Transfer safeguards: Not yet configured. The operator must complete this before collecting data in production. The current interest-list feature has no workflow for selling personal information or sharing it for cross-context behavioural advertising.
Retention
Interest lists are retained for 365 days after their latest save, then removed from the active database by periodic cleanup, normally within one hour. The browser credential cookie lasts 90 days and may expire before database cleanup. You can immediately delete your current record from My interest list. Historical backups may retain older copies during their separate retention cycle, for recovery and security purposes. Enquiry, log and backup retention policy: Not yet configured. The operator must complete this before collecting data in production.
Your rights and choices
Where applicable, you can request access, correction, erasure, restriction or portability, or object to certain processing. Where we rely on consent you can withdraw it without affecting prior lawful processing. Applicable US state laws may also provide rights to know, opt out of sale/sharing or targeted advertising, appeal, and receive non-discriminatory treatment. We verify requests and respond under applicable law; an email address alone is not sufficient to obtain another person's information. There is no sale or targeted-advertising feature in the current application, and opt-out signals such as GPC do not trigger additional tracking. You may complain to your local supervisory authority.
Children and security
This product catalog and business enquiry service is intended for adults and does not target children or ask for children's details. Contact us to remove information inadvertently provided by a minor. Production deployments should use HTTPS, restricted administration and controlled backups. No internet service can promise absolute security.
Necessary cookies and similar technology
gl_interest is set only after you request an interest list. It is a random credential without your email address, with HttpOnly and SameSite=Lax, Secure on HTTPS, and a maximum age of 90 days. NEXT_LOCALE stores a language preference; its lifetime depends on the language library and current response settings. Staff sign-in uses Payload authentication session cookies, normally payload-token, with expiry governed by the actual sign-in configuration. Site Settings can enable customer support, Google Analytics/Ads, Meta Pixel, Hotjar and custom scripts. Optional scripts load only after you accept their functional, analytics or marketing category. gl_integrations_consent in local storage saves your choices and configuration version; use Cookie preferences to reject or withdraw, which reloads the page to stop previously loaded services. gl_contact_session is a signed HttpOnly enquiry session cookie, lasting up to seven days, used for rate limits and duplicate submission protection. Provider details and actual data uses must match the operator’s active configuration. Blocking or clearing cookies may prevent access to your list or admin session.