Privacy Policy

Go MENA ("we", "us", "our") operates the website go-mena.com . This policy explains what personal information we collect, why we collect it, and how we protect it. This document is written to comply with the EU General Data Protection Regulation (GDPR).

What we collect

When you submit a supplier request through our form, we collect:

• Your name, company, email address, and WhatsApp number
• Details of your request — product, quantity, target price, delivery country, timeline
• Any additional message you include
• Basic technical data (IP address, browser type, timestamp) captured by our server logs

We do not use cookies for advertising or behavioral tracking. We use Vercel Analytics and Plausible Analytics in a privacy-first, cookie-less mode.

Why we collect it

Your information is used exclusively to:

• Respond to your supplier request within 24 hours
• Source, verify, and coordinate with European suppliers on your behalf
• Handle purchase, inspection, shipping, and customs documentation
• Send you transactional emails related to your request

We do not send marketing emails without your explicit opt-in. We do not sell your data to any third party. We do not share your data with anyone who is not directly involved in fulfilling your request.

Legal basis (GDPR Art. 6)

We process your data on the basis of Art. 6(1)(b) — contract performance — since your request initiates a service relationship. For server logs, we rely on Art. 6(1)(f) — legitimate interest in site security and operation.

How long we keep it

• Active leads and customer records: as long as the business relationship is active, plus 3 years
• Declined or inactive leads: 12 months
• Server logs: 30 days
• Transaction and tax records: 10 years (statutory retention under German commercial law)

Who has access

Internal:

• Our European team members who handle your specific request
• Our finance team for invoicing and payment reconciliation

External processors:

• Vercel Inc. (website hosting, EU region)
• Resend (transactional email delivery)
• European suppliers — only the information needed to provide quotes

All external processors are bound by Data Processing Agreements (DPAs) that meet GDPR standards.

Your rights

Under GDPR you have the right to:

• Access a copy of the data we hold about you
• Correct inaccurate data
• Request deletion ("right to be forgotten"), subject to our statutory retention duties
• Object to processing
• Data portability
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email us at privacy@go-mena.com.

International transfers

Your data may be processed in European Union member states where our service providers operate. We do not transfer personal data outside the EU unless required to fulfill your request (for example, shipping documentation to your destination country), in which case we rely on GDPR Art. 49(1)(b) — transfer necessary for contract performance.

Security

We use HTTPS everywhere, encrypted database storage, access controls on internal systems, and regular security reviews. Passwords and session tokens use industry-standard hashing and signing.

Changes to this policy

We may update this policy as our services evolve. The "last updated" date at the top of this page will always reflect the current version. Material changes will be announced via the blog.

Contact

Questions or requests: privacy@go-mena.com
Postal: [EU office address — to be confirmed]