Privacy Policy
Last updated: February 17, 2026
GMP Finder ("we", "our", or "us") operates the website gmpfinder.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Economic Area and the Information Technology Act, 2000 and its rules for users in India.
1. Information We Collect
Information You Provide Directly
- Contact Information: Name, email address, phone number, and company name when you submit a contact form, request a quote (RFQ), or claim a listing.
- RFQ Details: Product requirements, quantity, preferred certifications, budget, timeline, and other details submitted through our quote request forms.
- Claim Submissions: Information provided when claiming a manufacturer listing, including your name, role, and proof of association.
Information Collected Automatically
- Usage Data: Pages visited, time spent on pages, referring URLs, and navigation paths.
- Device Information: Browser type, operating system, device type, screen resolution, and IP address.
- Cookies and Tracking: We use cookies and similar technologies to enhance your experience and gather analytics data (see Section 4).
2. How We Use Information
We use the information we collect for the following purposes:
- To operate, maintain, and improve the Service and its features
- To process and respond to your enquiries, RFQs, and listing claims
- To connect buyers with relevant manufacturers based on submitted requirements
- To send you relevant communications about your enquiries or account (we will not send unsolicited marketing emails without your explicit consent)
- To analyse usage patterns and improve the user experience
- To detect, prevent, and address technical issues, fraud, or abuse
- To comply with legal obligations and enforce our Terms of Service
3. Data Sharing
We do not sell your personal information. We may share your information in the following circumstances:
- With Manufacturers: When you submit an RFQ, your contact information and requirements may be shared with relevant manufacturers to fulfil your request.
- Service Providers: We use third-party services for hosting, analytics, and email delivery. These providers process data on our behalf and are bound by contractual obligations to protect your information.
- Legal Requirements: We may disclose information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction.
4. Cookies
We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data that are stored on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some portions of the Service may not function properly.
Essential Cookies: Required for the Service to function (e.g., session management).
Analytics Cookies: Help us understand how visitors interact with the Service so we can improve it.
Preference Cookies: Remember your settings and preferences for a better experience.
5. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Contact form submissions and RFQ data are retained for up to 24 months unless you request earlier deletion. Analytics data is retained in an aggregated, anonymised form and may be kept indefinitely.
6. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
- Right to Erasure: You can request that we delete your personal data, subject to certain legal exceptions.
- Right to Restrict Processing: You can request that we limit how we use your data.
- Right to Data Portability: You can request a copy of your data in a structured, commonly used, machine-readable format.
- Right to Object: You can object to our processing of your personal data for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, please contact us using the details below. We will respond to your request within 30 days.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption of data in transit (HTTPS/TLS), secure database storage, and access controls limiting data access to authorised personnel only. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
8. Children's Privacy
The Service is intended for business use and is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us and we will promptly delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically for the latest information on our privacy practices.
10. Contact
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your data is being handled, please contact us at: