This policy explains what personal data 𝐼yenX collects, why, and what you can ask us to do with it. We collect as little as we can.
Who is responsible
𝐼yenX (Aishwarya Iyengar), Stockholm, Sweden, is the controller of your personal data. Contact: hi@iyenx.com.
Visiting the website
The site sets no cookies and uses no tracking or analytics. Like any website, our web host, Simply.com (Denmark), records technical data such as your IP address and browser type in server logs to keep the site running and secure. The site loads its fonts from Google Fonts, which means your browser sends your IP address to Google when the page loads.
Using the supplier directory
You can browse the directory without an account. If you shortlist suppliers or open their profiles, the shortlist and a list of recently viewed suppliers are saved only in your own browser (local storage). They are never sent to 𝐼yenX, and you can remove them at any time with the Clear and remove buttons or by clearing your browser’s data for the site.
To show suppliers how much interest their profile gets, the directory counts profile views, gallery views and how often a profile is placed in a side-by-side comparison. To count each visitor only once a day, our database makes a one-way code from your IP address and browser type combined with a secret that changes every day. Your IP address itself is not stored, no cookies are used, and the daily secret is deleted after two days, so the codes cannot be traced back to you or linked across days. Suppliers only see totals. We do this on the basis of our legitimate interest in running the directory and reporting to suppliers (Article 6(1)(f)).
Emailing or calling us
If you contact us, we use your name, contact details and message to reply. We keep the conversation for as long as it is needed to help you, and normally no longer than 2 years after our last contact.
Supplier accounts and listings
Suppliers create and manage their listing themselves in the 𝐼yenX supplier portal. To do this we collect:
- Account details: the contact person’s name and email address, and a sign-in record so you can log back in to edit your listing.
- Listing content: the company information, logo, photos, contact details and other text you enter, including drafts you have not submitted yet.
- Subscription details: your plan, when you paid, when your subscription renews and whether it is active.
We use this to show your draft and preview, review and approve your listing, publish it, contact you about it and keep your subscription running.
Everything you put on your listing cards is published on iyenx.com and is visible to anyone. Please do not add personal or confidential information you do not want to be public. Your account email, sign-in details and payment information are never shown on the site. Visitor enquiries are passed to the email address you give us.
Payments
Subscriptions are paid through Stripe. You enter your card details on Stripe’s own secure page; 𝐼yenX never sees or stores your full card number. Stripe tells us whether a payment succeeded and gives us the billing details needed for invoices and receipts, such as your company name, billing address, VAT number and the last four digits of your card. Stripe also processes payment data for its own fraud-prevention and legal obligations, under its own privacy policy (stripe.com/privacy).
Prefer to draft offline first? Once signed in to the supplier portal, you can download an optional Word version of the listing questions. It stays on your own computer until you copy your answers into the portal.
Sending an enquiry or requesting an intro
When you send an enquiry from a supplier’s profile or request an intro through the directory, your message comes to 𝐼yenX first, through our own enquiry form or our form run by Tally (Belgium). We collect your name, company, email, phone (if given), a short description of your requirements (if given), your message and, for intro requests, up to 4 photos. We forward these only to the supplier you chose, so they can reply to you. If you send one enquiry to several suppliers at once, each supplier receives a separate copy and does not see who else you wrote to. From then on, that supplier handles your details under its own privacy policy.
Legal basis
We handle supplier account, listing, subscription and payment data to enter into and carry out the listing agreement (GDPR Article 6(1)(b)). For contact persons at companies, and for replying to enquiries, we rely on our legitimate interest in running the directory and answering messages (Article 6(1)(f)). We forward intro requests on the basis of your consent, which you give with the tick box in the form (Article 6(1)(a)). You can withdraw it at any time by emailing us, as long as we have not forwarded the request yet. We keep invoices because Swedish accounting law requires it (Article 6(1)(c)).
How long we keep it
- Intro requests and photos: deleted from our form account and inbox within 30 days of forwarding them.
- Drafts that are never submitted: deleted after 12 months without activity.
- Applications we do not accept: deleted within 6 months.
- Accounts and listings: for as long as you are a member, then deleted within 12 months of the subscription ending, or sooner if you ask us.
- Invoices, receipts and billing records: 7 years, as Swedish accounting law requires.
Who else handles your data
We share data only with services that help us run 𝐼yenX, under data processing agreements: the provider that stores supplier accounts, listings, photos and enquiries for the supplier portal; Stripe (payments); Tally (intro request forms, stored in the EU; form notification emails are sent through SendGrid in the US under the EU’s standard contractual clauses); Simply.com (web hosting); and our email provider. Where a provider handles data outside the EU or EEA, we rely on the EU’s standard contractual clauses or an EU adequacy decision. We do not sell your data or use it for advertising.
Your rights
You can ask to see the data we hold about you, correct it, delete it, limit how we use it, object to our use of it, or get a copy to take elsewhere. Suppliers can see and change most of their details themselves under My account in the supplier portal. For anything else, email hi@iyenx.com and we will answer within one month. If you are unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (IMY) at imy.se.
Changes
If we change this policy, we update the date at the top of this page.
