Privacy Policy · 360 Global Enterprises

360 Global Enterprises (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how we use it, who we share it with, and the rights you have over it. It applies to our website, RFQ portal, customer account, invoice portal and support channels (the “Services”).

1. Data we collect

Account data — name, email, password hash, company, phone, country, backup email.
RFQ & order data — parts, quantities, VINs, target prices, destinations and any files you upload.
Invoice & payment data — invoice numbers, amounts, currency, payment references and shipping terms.
Support conversations — messages you exchange with our AI assistant, chat and email support.
Technical data — IP address, browser, device, referrer, timestamps and pages visited (via cookies and server logs).
Marketing preferences — your opt-in/opt-out choices for RFQ status updates and product news.

2. How we use your data

To respond to quotations, orders, invoices and support requests.
To operate your account, watchlist, notifications and invoice portal.
To send transactional emails (RFQ replies, support replies, invoice notifications, security alerts).
To improve our catalogue, search, pricing accuracy and website security.
To detect fraud, abuse and unauthorised access.
To comply with legal, tax, export-control and customs obligations.

3. Legal bases

We process data on the following legal bases: (a) performance of a contract with you (RFQs, orders, invoices); (b) our legitimate interests in running and securing our business; (c) your consent, where required (e.g. marketing emails); and (d) compliance with legal obligations.

4. Sharing

We share the minimum necessary data with the following categories of recipients:

Zoho (CRM & Books) — to log RFQs, contacts and issue invoices.
Microsoft Outlook / Microsoft 365 — to send and receive quotations, invoices and order updates.
Supabase & Lovable Cloud — hosted database, authentication and edge functions.
Firecrawl and AI model providers — to enrich catalogue and answer support queries; only the minimum context is shared.
Logo.dev / Google favicon service — to display brand logos from company domains.
Payment, freight, insurance and customs partners — to fulfil orders you place with us.
Government authorities — where required by law (e.g. tax, sanctions and customs enforcement).

We do not sell your personal data and we do not use it for third-party advertising.

5. International transfers

As a global sourcing business we transfer data across borders — typically between the UAE, EU, UK, Turkey, China and the United States. We rely on appropriate safeguards (standard contractual clauses, reputable cloud providers, encryption in transit) to protect data during those transfers.

6. Storage & security

Data is stored on infrastructure hosted by Supabase and Lovable Cloud with encryption in transit and at rest. Access is restricted by role-based access control and row-level security policies. Passwords are hashed. We regularly review our access, logging and backup practices.

7. Retention

Account and transaction records — minimum 5 years (UAE commercial and tax law).
RFQs and quotations — 3 years from last activity.
Support conversations — 24 months.
Server and security logs — 12 months.

8. Your rights

Subject to applicable law you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data (subject to legal retention).
Object to or restrict certain processing.
Withdraw consent for marketing at any time.
Lodge a complaint with your local data-protection authority.

To exercise any of these rights email sales@360globalenterprises.com. We will respond within 30 days.

9. Cookies

We use strictly necessary cookies to keep you signed in, remember your preferences and secure the site (CSRF, session, auth). We do not currently use advertising or third-party tracking cookies. If this changes we will update this policy and, where required, request your consent.

10. Children

Our Services are intended for business use and are not directed at children under 18. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy from time to time. Material changes will be notified by email or a notice on this page. The “Last updated” date at the top always reflects the current version.

12. Contact

Data protection queries: sales@360globalenterprises.com
360 Global Enterprises, SPC Free Zone, Sharjah, United Arab Emirates.