Privacy Policy

1. Who controls your data

UAB Nodica (registration code 306504597), Girulių g. 10, LT-12112 Vilnius, Lithuania, is the data controller for personal data processed through nobrandfood.com, in accordance with Regulation (EU) 2016/679 (GDPR).

2. What we collect

• Account & company data: contact name, email, phone, company name, registration code, VAT ID, registered address, IBAN.
• Trading data: listings, offers, counter-offers, deals, invoices, transport requests, and the documents you or the other party upload for a deal (invoice, packing list, quality certificate, CMR).
• Usage data: pages visited and basic technical information (browser, device type) needed to operate and secure the site.
• Anything you send us directly through the contact form or by phone.

3. Why we process it, and on what basis

• Contract — to review your registration, run the negotiation/deal/invoicing/payment flow you use the platform for, and communicate with you about it.
• Legal obligation — to issue and retain sequentially-numbered VAT invoices and accounting records as required by Lithuanian tax law.
• Legitimate interest — to keep the platform secure, prevent fraud, and improve it.
• Consent — for non-essential cookies and any optional notification channel you opt into (see section 7).

4. Who we share it with

The other party to a deal sees your company name and the offer/deal terms — never your personal contact details or full address beyond what a VAT invoice requires. We don't sell personal data. We use infrastructure providers (hosting, database) strictly to operate the platform, bound by their own confidentiality obligations, and disclose data to authorities where legally required (e.g. tax audits).

5. How long we keep it

Account data is kept for as long as your account is active. Invoices and the accounting records tied to them are retained for the period required by Lithuanian tax law regardless of account status, since we remain legally obliged to keep them — this is a statutory exception to erasure requests, not a choice we make. Data with no ongoing legal basis is deleted or anonymised once it's no longer needed.

6. Your rights

Under GDPR, you can ask us to:

• give you a copy of your personal data (access/portability),
• correct inaccurate data (rectification),
• delete data we no longer have a legal basis to keep (erasure),
• restrict or object to certain processing.

You can update most of your own account and company details directly in Account settings, where you can also download a copy of your data or request account deletion. For anything else, or if something isn't working, reach us via the contact page or by phone at +370 651 75145. You also have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania.

7. Cookies

We use one strictly necessary cookie to keep you signed in, which doesn't require consent under GDPR. We also use Google Analytics to understand how the site is used — but only once you accept the cookie banner; it never loads before that. You can withdraw consent at any time by clearing your browser's cookies for this site, which shows the banner again.

8. Security

We apply reasonable technical and organisational measures to protect your data, including encrypted connections and access controls limiting who can see what.

9. Changes to this policy

We may update this policy from time to time; the effective date above reflects the latest revision.