Who we are and this notice
Nine Sharks Group Limited is the legal entity behind the Nine Sharks website. Nine Sharks is its customer-facing brand.
The following statutory website details have not yet been confirmed for publication: Company number, Registered office address, Part of the UK in which the company is registered. They must be added before launch.
This notice explains how Nine Sharks Group Limited uses personal information in connection with this website. It applies to website visitors, people who submit a request for quotation (RFQ), buyer and business contacts, and people who communicate with us through website-related channels.
Nine Sharks Group Limited is the controller of that information where it decides why and how it is used. You can contact Nine Sharks through the Contact page, including for privacy-related enquiries.
Information we collect
The information depends on how you use the website. The Contact page can include your name, company, business email address, contact number, subject and message. An RFQ can include:
Identity and business contact information
Name, company name, job title or role, business email address, contact number, company website and buyer country.
RFQ and commercial information
Requirement title and description, product category, quantity, specification details, delivery country and other delivery information, and additional comments.
Category-specific details
Depending on the category selected, the form may collect information such as material, drawing or part references, process, dimensions, finishes, inspection needs, chemical name, CAS number, grade, purity, packaging needs, application context, packaging dimensions, material, protection, print, inserts or related requirement details.
Attachments
You may upload drawings, technical specifications, datasheets, images, dielines, quotations or other supporting commercial or technical documents.
Technical, security and attribution information
We may process normal server and request information, IP and security-related information used to protect the Contact and RFQ processes, anti-abuse verification information, and RFQ attribution context such as UTM source, medium, campaign, term, content, landing path and referrer where supplied by the browser.
Operational records
We may keep RFQ references, status, correspondence and limited notification records needed to manage the enquiry.
Sensitive information
Please do not include unnecessary special-category or other sensitive personal information in an RFQ description or attachment. The current service does not claim to detect or automatically remove that information.
How and why we use information
We use information to receive and assess sourcing enquiries, communicate about RFQs, identify sourcing opportunities, prepare commercial proposals where appropriate, progress potential business relationships, maintain operational records, protect the website and RFQ process from abuse, troubleshoot and secure the service, meet applicable legal obligations, and establish, exercise or defend legal claims where relevant.
| Purpose | Likely lawful basis |
|---|---|
| Responding to B2B enquiries, assessing requirements and managing business communications | Legitimate interests: operating and developing a B2B sourcing business and responding to enquiries reasonably expected by the sender. |
| Taking steps towards, or performing, a contract with an individual where this genuinely applies | Contract or pre-contract steps, only in the relevant circumstances. |
| Security, abuse prevention and troubleshooting | Legitimate interests: protecting the website, systems, people and RFQ process. |
| Record keeping or disclosures required by law | Legal obligation, where a specific obligation applies. |
We do not use consent as the general basis for RFQ processing, and this website does not currently subscribe RFQ users to marketing lists. Where processing relies on legitimate interests, we consider whether the use is necessary and whether people’s interests and rights outweigh those interests. You can object to processing based on legitimate interests; see Your rights.
Attachments and private storage
Attachments are held in private storage and access is limited according to operational need. Temporary signed links may be used internally where needed to review files. Attachments may be shared with relevant sourcing parties when necessary to pursue the enquiry. We do not claim that uploaded files are malware scanned.
International processing and transfers
Technology providers and commercial sourcing partners may operate in countries outside the UK. Where UK data-protection transfer rules apply, Nine Sharks intends to use an appropriate lawful transfer mechanism or safeguard as required. The provider entities, subprocessors and transfer position require review before launch; the current system’s regional configuration does not by itself determine every processing or transfer outcome.
How long we keep information
We will not retain information indefinitely merely because it was submitted. Retention depends on whether an enquiry progresses, any ongoing business relationship, operational need, disputes or legal claims, and applicable accounting or legal record requirements if a transaction occurs. A detailed owner-approved retention schedule is still required before or shortly after launch, including a decision for RFQ attachments.
Security
We use proportionate technical and organisational measures designed to protect information, including in-transit protection where deployed, restricted server-side database access, private attachment storage, signed upload or download access where used, anti-abuse measures, server-only secrets and access controls. No internet service can promise absolute security.
Your rights
Depending on the circumstances and applicable law, you may have rights to request access to, rectification or erasure of personal information; restriction of processing; objection to processing; and portability. You may withdraw consent where processing actually relies on consent. These rights are not absolute and may depend on the lawful basis and context.
You have the right to object to processing based on legitimate interests. You can make a request through the Contact page.
Questions and complaints
Use the Contact page for privacy questions or concerns. You may also raise concerns with the UK Information Commissioner's Office.
Changes to this notice
We may update this notice as the website, operational model or legal position develops. The date at the top of the page will show when it was last updated.