Privacy Policy
Last updated: August 25, 2026
This Privacy Policy explains how Tail Sourcing (“Tail Sourcing”, “we”, “us”) collects, uses, discloses and safeguards personal data when you access our website, create an account, purchase a subscription, or use the procurement platform (the “Services”). We act as a data controller for website visitors, prospects and account administrators, and as a data processor for customer data our clients upload into the Services.
1. Who we are
Tail Sourcing operates the procurement platform at tailsourcing.com and esourcing.tailsourcing.com. Registered correspondence: 19505 Biscayne Blvd, Suite 2350, Aventura, FL 33180.
Privacy, legal notices, and security incidents: info@alseatrading.com. Billing and subscriptions: sales@tailsourcing.com.
If you are located in the EEA, the United Kingdom or Switzerland, Tail Sourcing is the controller of your personal data unless a written customer agreement says otherwise.
2. Personal data we collect
We collect only what we need to run a B2B procurement product:
- Account and identity: name, work email, company, job title, role, and credentials.
- Billing: billing contact, tax identifiers and payment metadata processed by Stripe. We do not store full card numbers on our servers.
- Platform usage: pages and features used, event and error logs, device/browser, IP address and approximate location.
- Communications: emails, support tickets, webinar or demo registrations, and marketing preferences.
- Know-your-supplier / KYC (where required): identity-document checks via Onfido for supplier onboarding in certain countries.
- Customer content (your organisation is the controller): purchase requests, RFx, supplier records, invoices, catalogs, banking details you choose to store, and related documents.
3. Legal bases for processing
Where GDPR or UK GDPR applies, we rely on: (i) performance of a contract, to provide the Services; (ii) legitimate interests, to secure the platform, prevent fraud and improve the product; (iii) consent, for optional marketing, non-essential cookies and any special-category data you voluntarily submit; and (iv) legal obligation (tax, accounting, sanctions screening where applicable).
4. How we use personal data
- Deliver, operate and maintain the Services, authenticate users and provision tenant workspaces.
- Process subscriptions, invoices, renewals and cancellations.
- Provide customer support and respond to inquiries.
- Monitor, secure and improve the platform, including analytics, error diagnostics and product research.
- Send transactional email (activation, password reset, billing, RFx and order notices) and, where permitted, service updates you can unsubscribe from.
- Run AI-assisted drafting and matching on Customer Data solely to provide the feature you invoked. We do not sell your procurement data to train public models for unrelated third parties.
- Comply with legal, tax, accounting and regulatory obligations.
6. International data transfers
Personal data may be processed in countries outside your own, including the United States. Where required, we rely on the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, and equivalent safeguards.
7. Data retention
We retain personal data only as long as needed to provide the Services, comply with law, resolve disputes and enforce agreements. Account data is generally kept for the life of the account plus a reasonable archival period. Billing records follow applicable tax-retention rules. You may request deletion, subject to those legal holds. Tenant administrators can export Customer Data from in-app export tools before account closure.
8. Security
We apply administrative, technical and organisational safeguards: encryption in transit (TLS / HTTPS), encryption of sensitive fields at rest where designed (for example supplier banking details), role-based access, tenant isolation, audit logging and least-privilege internal access. No system is perfectly secure. If we become aware of a personal-data breach affecting you, we will notify you and the relevant authorities as required by law. See the Security page for HTTPS, multi-tenant isolation and our incident plan.
9. Your rights
Subject to applicable law, you may access, correct, delete, restrict or object to processing, receive a portable copy, and withdraw consent. You may lodge a complaint with your data-protection authority. Email info@alseatrading.com. We may need to verify your identity. Tenant admins should raise Customer-Data requests for their workspace; we will not fulfil a user request that would expose another tenant’s data.
11. Children
The Services are for business use by individuals 18 or older. We do not knowingly collect personal data from children. If you believe a child provided data, contact us and we will delete it.
12. Changes
We may update this policy. Material changes will be communicated through the Services or by email. The “Last updated” date shows the latest revision.