Supplier Portal
Privacy Policy
Effective: 22 September 2026
Nousmata Ltd · Company no. 17409443 · ICO no. C2017510
Pickering Nook Garage, Clough Dene, Burnopfield, Durham, NE16 6EU, United Kingdom
privacy@nousmata.co.uk
1. Who we are
Nousmata Ltd is a private limited company registered in England and Wales. We operate the Nousmata Supplier Portal for parts quoting and order management. This policy explains how we collect, use, store and protect personal data in connection with the Portal.
2. Data we collect
- Company name, branch name and contact name.
- Business email address and telephone number.
- Parts categories, delivery-radius preferences and branch postcode.
- IP address and browser/device information used for security logging.
- Quote requests, responses and order records created through the Portal.
- Messages and attachments (such as photos) exchanged with garages through the Portal or Telegram.
- Your Telegram chat ID and username, if you connect Telegram.
- Login timestamps and access information used during registration.
We do not collect payment-card details. We do not use cookies for tracking or advertising.
3. How we use your data
- Create and manage supplier accounts.
- Use branch postcode information to support supplier matching.
- Deliver parts quote requests and responses through the Portal.
- Process and record order confirmations made through the Portal.
- Extract prices, availability and part details from quote replies using automated processing, so garages can compare them. This processing only extracts information; it does not make decisions about you.
- Send operational email notifications about Portal activity where applicable.
- Maintain security logs and prevent fraudulent or abusive access.
- Produce anonymised operational statistics.
- Meet legal and accounting obligations.
4. Legal bases
| Purpose | Lawful basis |
|---|---|
| Account registration and management | Contract - UK GDPR Art. 6(1)(b) |
| Supplier matching and Portal transactions | Contract - UK GDPR Art. 6(1)(b) |
| Messaging via the Portal or Telegram, and automated extraction of quote details | Contract - UK GDPR Art. 6(1)(b) |
| Operational notifications | Contract - UK GDPR Art. 6(1)(b) |
| Security logging | Legitimate interests - UK GDPR Art. 6(1)(f) |
| Legal and accounting compliance | Legal obligation - UK GDPR Art. 6(1)(c) |
5. Data sharing
We share data only where necessary to operate and protect the Portal. This may include the garage involved in a quote or order; Railway.app for cloud hosting and database services; Cloudflare for CDN, DNS and file services; Google (Gemini API) for automated extraction of details from quote replies; Telegram, if you choose to use Telegram; Resend for delivery of operational emails; Zoho for business email; Twilio if an SMS invitation is used; and public authorities where required by law or court order. We do not sell or rent personal data or share it with third parties for marketing purposes.
6. Retention
Account data is retained while the supplier account is active. Quote and order records are retained where required for business, legal and accounting purposes. Security logs are generally retained for 90 days. Copies of Telegram messages held in our server's message queue are deleted after 48 hours; the quote and order records created from them are retained as described above. When an account is deleted, personal data is removed subject to records that must be retained by law or for legitimate business purposes.
7. Your rights
Subject to applicable law and exemptions, you may have rights to access personal data, correct inaccurate information, request erasure or restriction, object to certain processing, receive certain data in a portable format, and withdraw consent where processing relies on consent. Contact privacy@nousmata.co.uk. You may also complain to the UK Information Commissioner's Office.
8. Security
Data in transit is protected using HTTPS/TLS. Access to the Portal and administrative systems is controlled and security measures are reviewed periodically. We do not publish detailed security architecture on the public website.
9. International transfers
Some service providers may process information outside the UK. Where UK data-protection law requires safeguards for an international transfer, an appropriate lawful transfer mechanism or applicable adequacy arrangement is used.
10. Cookies and tracking
The Portal does not use cookies for tracking or advertising and does not embed third-party advertising or analytics scripts. Essential storage or authentication technologies may be used where required to provide and secure the Portal. The Portal also stores your display preferences (such as theme and text size) and some cached quote and message data in your browser's local storage so that it works as expected.
11. Changes
We may update this policy as the Portal or our legal obligations change. The current version will be published with its effective date.
12. Contact
Privacy: privacy@nousmata.co.uk
Supplier enquiries: suppliers@nousmata.co.uk