Privacy Policy

• —This Privacy Policy explains how ARC Polymers Ltd (“we”, “us”, “our”), trading as Prime Polymers, collects and uses personal data when you use the Prime Polymers website, apps and services (the “Platform”).
• —We are the data controller for the personal data described in this policy. We are registered with the UK Information Commissioner's Office (ICO) under registration number [ICO NUMBER]. This policy should be read together with our Terms and Conditions.
• —Contact for privacy matters: hello@primepolymers.org. The Platform is for business users only; it is not intended for consumers or for anyone under 18.

Depending on how you use the Platform, we collect:

• —Account & profile data: name, business name, email, phone, business type, location/address, and any logo or profile details you provide.
• —Listing & Wanted data: the content you post as a Seller or Buyer — materials, grades, prices, quantities, locations, images and descriptions.
• —Messages & enquiries: the content of messages you send to, or receive from, other Users through the Platform.
• —Membership & payment data: your membership status and billing records. Card payments are processed by our payment provider (Stripe); we do not store full card numbers.
• —AI feature data: the requirements and text you submit to our AI matching and listing features, and records of your usage of them.
• —Technical & usage data: IP address, device and browser information, log data, and cookies/similar technologies (see our Cookie Policy).

We process your personal data on the following UK GDPR lawful bases:

• —Performance of a contract — to create and run your account, publish your Listings and Wanted posts, enable messaging and AI matching for members, and take payment.
• —Legitimate interests — to operate, secure, improve and promote the Platform, prevent fraud and abuse, and moderate content. We balance these against your rights.
• —Legal obligation — to comply with law, including tax, accounting and lawful requests from authorities.
• —Consent — where required, for example certain marketing or non-essential cookies. You may withdraw consent at any time.

• —Our matching and listing-improvement features use a third-party AI provider (Anthropic) to process the text you submit. We send only what is needed to perform the feature. We do not use your data to train third-party AI models, and our provider does not train its models on data submitted through our business API. AI suggestions are automated and indicative only.

• —The Platform is designed to introduce Sellers and Buyers. When you contact, or are contacted by, another User, they will see the information you have chosen to make available (such as your name, business and contact details) and the content of your messages.
• —Once another User receives your details, they become an independent data controller of that information, and their own use of it is governed by their privacy practices and their obligations under data-protection law — not by this policy. Likewise, if you receive another User's details, you become an independent controller and must use that data lawfully, only for a bona fide dealing arising from the Platform, and never for unsolicited marketing, resale, or any unlawful purpose. We are not responsible for how other Users handle personal data they receive through the Platform.

We share personal data with:

• —Service providers (processors) who act on our instructions — including our hosting and database provider (Supabase), payment provider (Stripe), AI provider (Anthropic), and email/notification providers.
• —Authorities and advisers where required by law, or to establish, exercise or defend legal claims.
• —A buyer of our business in the event of a sale, merger or reorganisation, subject to appropriate protections.
• —We do not sell your personal data.

• —Our Users are international, and some of our providers are outside the UK. Where we transfer personal data outside the UK, we rely on an adequacy decision or appropriate safeguards such as the International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses. Note that when you deal with a User in another country, your exchange of details with them is a transfer you make as an independent controller.

• —We keep personal data only as long as needed for the purposes above: account data for as long as your account is active and for a reasonable period afterwards; billing and tax records for the period required by law (generally six years); and message and listing data for as long as needed to operate the Platform and resolve disputes. We then delete or anonymise it.

Under UK GDPR you have the right to: access your data; have it corrected or erased; restrict or object to processing; data portability; and withdraw consent. You also have the right to complain to the ICO (ico.org.uk). To exercise any right, contact us at hello@primepolymers.org. Some rights are qualified, and we may need to verify your identity.

• —We use appropriate technical and organisational measures to protect personal data, including encryption of sensitive tokens, access controls and row-level security in our database. No system is completely secure, and you are responsible for keeping your login credentials safe.

• —We use cookies and similar technologies to run the Platform, remember your session, and understand usage. Non-essential cookies are used only with your consent. See our Cookie Policy for detail and controls.

• —We may update this policy from time to time. We will post the updated version with a new date, and where changes are significant we will take reasonable steps to notify you.