Privacy & Compliance
Status page · Updated 23 October 2026 · English is the authoritative version
Related: Privacy Policy · Cookie Policy · Privacy request form · Accessibility · Legal Center
This page explains how FeedMatch handles personal data and which privacy, cookie and marketing rules we take into account for the markets we serve. It describes our current practices and open points. It is not a certification, a regulator's approval or legal advice, and a jurisdiction-specific review by qualified counsel has not yet been completed.
What this page is
FeedMatch is a business-to-business animal-feed procurement service: buyers send requests and RFQs, our team reviews them, contacts suitable suppliers and presents the responses. To do that we handle business contact details, request details, buyer and supplier account data, CRM notes and messages, and — only with your choice where required — website statistics and advertising measurement. The Privacy Policy is the full description; this page summarises what is in place, which laws we take into account and what is still open. The footer badge links here; it is not a seal, certification or regulator's approval.
What is in place today
- Cookie and tracker choices. Necessary storage only until you choose in the EEA, the UK, Switzerland and whenever your location is unknown. Accept, Reject and Preferences are equally easy, nothing is pre-ticked, and you can change your choice at any time in Cookie settings.
- Browser privacy signals. If your browser sends a Global Privacy Control (GPC) signal and you have not made a choice, advertising and remarketing tags stay off. Statistics follow the rules for your region.
- Notices where we collect data. Request, RFQ, contact, account and supplier forms show a short privacy and confidentiality notice with a link to the Privacy Policy.
- Marketing only with a separate opt-in. Update emails need their own unticked choice, separate from sending a request, and every email has an unsubscribe link.
- Confidential procurement data. Customer, supplier, RFQ and project information is not published or used for marketing; suppliers receive only what they need to quote, and your contact details only with your agreement.
- Data rights route. An online privacy request form for access, correction, deletion, restriction, portability, objection and consent withdrawal, answered within one month (extendable by two months with reasons).
- Data minimisation. Forms ask for business contact and procurement details. We do not ask for health, biometric, government-ID or payment-card data, and calculators run on the figures you enter without needing contact details.
- Security controls described in the policy. HTTPS with HSTS, database access rules per account and team role, private file storage with short-lived download links, and encrypted daily backups. Encryption at rest for hosting providers is not yet verified, so we do not claim it.
Laws we take into account, by market
We serve commercial buyers and suppliers internationally. The table shows our current understanding of which rules may be relevant; it is not a legal conclusion, and applicability is to be confirmed by qualified counsel for each jurisdiction.
| Market | Main rules | How they may apply | On the site today | Open point |
|---|---|---|---|---|
| EU / EEA (operated from Cyprus) | GDPR; ePrivacy rules on cookies as implemented in Cyprus and other member states | Applies: FeedMatch is operated from the Republic of Cyprus. | Privacy Policy with purposes, legal bases and retention targets; opt-in cookie choice; rights form; complaint route to the Cyprus Commissioner for Personal Data Protection. | Publish operating-entity details; finish the provider-by-provider transfer safeguard check; automate retention. |
| United Kingdom | UK GDPR, Data Protection Act 2018, PECR | Likely relevant when we offer the service to people in the UK. | Same rights and opt-in cookie choice as in the EEA. | Counsel to confirm whether a UK representative is needed. |
| Switzerland | Federal Act on Data Protection (revised FADP) | Likely relevant when we offer the service to people in Switzerland. | Opt-in cookie choice and the same rights route. | Counsel to confirm whether a Swiss representative is needed. |
| United States | State privacy laws such as California's CCPA/CPRA and similar laws in other states | These laws apply only to businesses above revenue, volume or data-sale thresholds; whether FeedMatch meets them has not been assessed. | No sale of personal data for money; Global Privacy Control turns advertising tags off; "Your privacy choices" in the footer opens the same controls. | Threshold assessment; if a law applies, a state-specific notice and request-verification process. |
| Canada | PIPEDA; Quebec Law 25 | May apply to commercial activity involving people in Canada. | Rights form; marketing only with opt-in. | Owner decision on opt-in defaults for tracking outside the EEA, UK and Switzerland (relevant to Quebec); named privacy contact. |
| Brazil | LGPD | May apply because we offer the service in Portuguese to buyers in Brazil. | Rights form; Portuguese privacy notices on forms and cookie banner. | Whether a data protection officer (encarregado) must be appointed; cookie consent defaults; Portuguese version of the full policy. |
| South Africa | POPIA | Applicability depends on where processing takes place; not yet assessed. | Rights form and form notices. | Counsel to assess; Information Officer registration if POPIA applies. |
| India | Digital Personal Data Protection Act 2023 (phased commencement) | Can apply to processing outside India when offering services to people in India. | Notices at collection; rights form. | Counsel to review the commencement timetable and notice requirements. |
| Middle East | UAE Federal Decree-Law 45/2021 (PDPL); Saudi Personal Data Protection Law; Israel Protection of Privacy Law | May apply when we serve people in these countries; not yet assessed. | Arabic and Hebrew privacy notices on forms and cookie banner; rights form. | Counsel to assess transfer and registration requirements. |
| Other markets we serve | For example Nigeria (NDPA 2023), Turkey (KVKK), Japan (APPI), South Korea (PIPA) | Applicability depends on our activities in each country; not yet assessed. | The same notices, choices and rights route are available to everyone. | Market-by-market review as activity grows. |
Your choices and rights
- Cookies and advertising: change or withdraw your choice at any time with . A Global Privacy Control signal from your browser is treated as an opt-out of advertising and remarketing when you have not chosen otherwise.
- Your data: ask for access, correction, deletion, restriction, a portable copy, or object to processing through the privacy request form or privacy@feedmatchgroup.com. We do not charge for requests and may ask for information to confirm your identity.
- Marketing: unsubscribe from update emails with the link in each email. Messages about a request you sent are service messages.
- Complaints: you can complain to the data-protection authority where you live or work. In Cyprus this is the Office of the Commissioner for Personal Data Protection (details in the Privacy Policy).
Accessibility and transparency
We aim to align with WCAG 2.1 level AA and describe known limitations in our accessibility statement; you can ask for help or another format through Accessibility Support. The service is for business buyers and suppliers, not consumers: buyer tools and reviews are free, suppliers fund the platform, and sending a request creates no purchase obligation. Calculator results are planning estimates based on your inputs, not offers or advice.
Still open
- Registered company name, number and address of the operating entity are being confirmed for publication.
- No data protection officer has been appointed; whether one is required (for example under the LGPD) is under review.
- Provider-by-provider check of international transfer safeguards is in progress.
- Retention periods are targets; deletion is currently done by our team rather than automatically.
- Encryption at rest at our hosting and storage providers is not yet verified.
- Translations of notices are AI-assisted and awaiting native review; the English policy is authoritative.
- Terms of Service remain a draft for counsel review.
- Opt-in defaults for trackers outside the EEA, UK and Switzerland (for example Brazil, Canada/Quebec) need an owner decision.
This page describes our practices. It is not legal advice, does not state that FeedMatch complies with any particular law, and does not claim certification or approval by any authority.