UNIFIED COMMERCE FLOW
How we workInsightsContact

Data protection

Privacy policy

How UCF TradeBridge handles business-contact information submitted through its website.

Corporate policies prepared for review. Registered-office details are based on the original incorporation entry; confirm current registry information before unrestricted public launch.

Controller and privacy contact

UCF S.L. (NIF B56862667) is responsible for website enquiry data. Contact for privacy requests: office@ucftradebridge.com. The registered office in the original BORME incorporation record is Avenida Catedrático Soler 3, 2, 03008 Alicante, Spain; the current registered office should be confirmed against an up-to-date registry extract.

This notice applies to the UCF TradeBridge corporate site only. Any later UCF TradeHub marketplace, user accounts or integrations will need their own reviewed notice.

Information collected

When you contact us, request a quotation or introduce a supplier, we process the information you submit: name, business email, business name, country, enquiry and message details, requested items and delivery preferences where relevant, supplier product families where relevant, and an optional PDF attachment. Server systems may also process basic technical request data and a salted, rotating fingerprint of an IP address to limit abuse.

Do not upload identity documents, special-category personal data, confidential third-party material or unnecessary personal information. Submit only information you are entitled to disclose.

Purposes and lawful grounds

We use enquiry data to receive, assess and respond to requests, seek clarification, evaluate a proposed business relationship, manage follow-up and protect forms against automated misuse. Where you ask us to take steps towards an agreement, processing may be necessary to take steps at your request before a contract (GDPR Article 6(1)(b), where applicable). For B2B contact persons, routine correspondence, evaluation of supplier approaches, record management and abuse prevention are based where applicable on UCF’s legitimate interests (Article 6(1)(f)) balanced against individuals’ rights.

If a legal obligation requires retaining particular transaction records, Article 6(1)(c) may apply. We do not automatically add enquirers to a marketing list; any unrelated promotional mailings will require a separately established lawful basis and compliance with Spanish electronic-marketing rules. Checking the form’s privacy acknowledgement confirms that you have read this notice; it is not a bundled marketing consent.

Who receives the data

Authorised UCF personnel handle relevant enquiries. Cloudflare provides hosting, security, database and private file storage for the website. An email notification provider may transmit a notification to our designated corporate mailbox once configured; the current notification template contains the request reference and type, not the submitted message or attachment. Our corporate mail service is Purelymail. A necessary business enquiry may be shared in a limited and appropriate manner with prospective supply or logistics counterparties, professional advisers or relevant authorities when justified; disclosure is not automatic and confidential attachments should be shared only where authorised.

Service providers process data under their relevant contractual terms and security arrangements. Links to third-party sites are governed by their separate privacy notices.

International transfers

The providers and any international counterparties involved in a particular request may operate outside the European Economic Area. We assess transfers and apply a suitable GDPR transfer mechanism where required, such as an adequacy decision or appropriate contractual safeguards; the precise recipients and transfer arrangements must be checked before activating any integration or transferring a particular submission. Contact us for relevant transfer information.

Retention and security

The website’s current technical configuration retains unconverted website enquiries, their private PDF attachments and associated notification records for up to 90 days, subject to the configured deletion process. Where an enquiry results in negotiations, a contract, a dispute or a legal obligation, relevant business records may be retained separately for the applicable purpose and statutory period; these separate records are not governed by automatic website deletion.

We use access controls, private database and storage bindings, transmission encryption, validation, rate limits and Cloudflare Turnstile when public forms are enabled. No website or electronic transmission can be guaranteed risk-free.

Your rights

Subject to applicable conditions, you may request access, rectification, erasure, restriction, portability where applicable, or object to processing based on legitimate interests. You may also withdraw consent where consent is used, without affecting earlier lawful processing. Send requests to office@ucftradebridge.com. We may ask for proportionate verification if necessary; do not send identity documents unless specifically and securely requested.

You may lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos, AEPD). We encourage you to contact us first so we can address the matter.

Automated decisions and updates

The current site does not conduct decisions with legal or similarly significant effects solely by automated processing and does not offer public supplier accounts. We may update this policy when services or providers change; the version published here will show the revision date. Last updated: 27 September 2026.