Nuvinor Fabrics: Business-Grade Data Practices and Partner Rights
Nuvinor Fabrics is committed to the responsible processing, secure storage, and lawful handling of partner information, recognizing its commercial sensitivity. This policy outlines data collection, usage, sharing, and partner rights.

Categories of data collected
We collect business-essential information for transactional and operational purposes: company name, registered address, tax identifiers, authorized contact persons (email/phone), shipping/billing addresses, order histories, product specifications, and contractual documentation. We minimize capturing unnecessary personal information. Operational data (order records, shipment tracking, payment documentation, quality reports) is also maintained for fulfillment, dispute resolution, and audit support.

Purposes of data use
Collected data serves strictly business operations: processing quotations, generating invoices, coordinating shipments and logistics, and providing customer support. We may use aggregated, non-identifying data for improving procurement, forecasting demand, and enhancing our catalogue. We do not use partner data for promotional or marketing activities without explicit permission.

Data sharing and third-party processors
We share partner data exclusively with third parties essential for order fulfillment: logistics carriers, payment gateways, statutory auditors, and legal compliance bodies when mandated. All vendors are contractually bound to confidentiality, using data solely for contracted purposes. We do not sell or lease partner data for marketing or promotional activities.

Data security measures
We apply industry-standard protections: role-based access controls, encrypted storage, procedural safeguards for handling/backup, and comprehensive audit trails. Staff access is limited to authorized personnel with required business needs and training in data protection. Regular security reviews are conducted.

Partner rights and requests
Partners may request access to retained information, corrections for inaccuracies, or restricted communication preferences. Deletion requests are handled in accordance with legal retention requirements (e.g., tax documentation). We respond to legitimate access and modification requests within a reasonable timeframe (typically 10-15 business days).

Policy updates and contact
We update this policy as needed to maintain alignment with regulatory and business requirements. Material changes are communicated to registered trade partners via formal channels, typically email, and updated website publication.