This policy explains how NEXGEN Global Trade Partners (“we”, “us”) handles personal data when you visit nexgenglobal.eu or contact us. We process personal data in line with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
1. Who is responsible
The controller is NEXGEN Global Trade Partners, registered office: Vikas Nagar, Lucknow, Uttar Pradesh, India, with a European office in Portugal. Contact for all privacy matters: info@nexgenglobal.eu.
2. What we collect and why
Enquiries and quote requests
When you use our contact form or email us, we process the details you give us — such as your name, company, email address, phone number, country and the content of your request — to answer your enquiry and prepare quotations.
Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to business enquiries (Art. 6(1)(f) GDPR). You also give us your consent when you submit the form (Art. 6(1)(a) GDPR).
Supplier registrations
When a company registers as a supplier, we store the company, contact and product details submitted in our supplier database (hosted in Google Workspace) to assess the supplier and contact them about sourcing opportunities. Legal basis: steps taken at the supplier’s request and our legitimate interest in building a supplier network (Art. 6(1)(b) and (f) GDPR). Suppliers can ask us to update or delete their details at any time.
To protect the supplier form from spam and automated abuse, it uses Cloudflare Turnstile, which checks that the form is being used by a person. Cloudflare processes limited technical data (such as IP address and browser characteristics) for this purpose only, based on our legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR). Turnstile does not use advertising cookies.
Business relationships
If you become a customer or supplier, we process contact and transaction data needed to perform the contract and to meet legal obligations, such as accounting, customs and tax record-keeping (Art. 6(1)(b) and (c) GDPR).
Website visits
Our hosting provider automatically processes technical data such as your IP address, browser type and the time of your visit in server logs, to deliver the site securely and to prevent misuse (Art. 6(1)(f) GDPR). Logs are kept for a short period only.
This website does not use analytics, advertising or tracking cookies, and our fonts are hosted on our own server, so no data is sent to font providers.
3. Who we share data with
We share personal data only where necessary: with our own offices in India and Portugal, with service providers who host this website, run our email or form services (including Google Workspace for our supplier database), and with logistics, inspection and banking partners when needed to carry out an order. Service providers act on our instructions under data processing agreements.
4. International transfers
Because we operate in India and the EU, personal data may be transferred to India, which the European Commission has not recognised as providing an adequate level of protection. Where this happens, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses, or rely on the transfer being necessary to carry out a contract or pre-contractual steps you requested (Art. 49(1)(b) GDPR).
5. How long we keep data
Enquiries that do not lead to business are deleted within 24 months. Contract and accounting records are kept for as long as tax, customs and commercial laws require.
6. Your rights
You have the right to access, correct or delete your personal data; to restrict or object to its processing; to data portability; and to withdraw consent at any time without affecting earlier processing. To exercise these rights, email info@nexgenglobal.eu.
You also have the right to complain to a data protection supervisory authority — in Portugal, the Comissão Nacional de Proteção de Dados (CNPD), or the authority in your country of residence.
7. Security
This site is served over an encrypted (HTTPS) connection. We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.
8. Changes
We may update this policy when our services or the law change. The current version is always on this page.