ProcureDC Privacy Policy

Last updated: 18 October 2026

1. Who We Are

ProcureDC is provided by MissionProcure Solutions Ltd, a company registered in England and Wales (company number 15588689), whose registered office is at 71-75 Shelton Street, London WC2H 9JQ, United Kingdom. We are the controller of the personal data described in this policy.

2. Data We Collect

We may collect the following types of data:

Personal Information: Name, email, phone number, company details.
Technical Information: IP address, browser type, device information.
Usage Data: Actions you take on the platform, such as searches, profile views and changes you make, and your preferences.
Company Listings: Information about companies that our team researches from public sources, which may include the names of people connected with them.

3. How We Use Your Data

We use your data to:

Provide and improve our services.
Process transactions and respond to inquiries.
Send service emails about your account, demo, billing and activity on the platform.
Answer questions through Verity, our AI assistant, using information held on the platform.
Ensure security and fraud prevention.

4. Legal Basis for Processing

We process your data based on:

Contractual Obligations (e.g., fulfilling service requests).
Legitimate Interests (e.g., improving our platform and keeping our company listings).
Legal Obligations (e.g., keeping invoices and accounting records).

5. Data Sharing and Third Parties

We may share your data with:

Service providers for operational purposes: Vercel and Railway (hosting), Clerk (sign-in), Stripe (payments), Resend (email), Stream (messaging), and Amazon Web Services (file storage and the AI service behind Verity).
Legal authorities if required by law.

We do not sell your personal data.

6. International Transfers

Some of our service providers are based in, or process data in, countries outside the UK, including the United States.

Where personal data is transferred outside the UK, we rely on UK adequacy regulations or on the safeguards in our providers' data processing terms, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

To ask about these safeguards, contact privacy@procuredc.com.

7. Company Listings

Our team researches companies that work in data centre procurement and lists them on the platform so that buyers can find suppliers. A listing describes a company, such as its name, website, registration details, location, services and certifications.

Listings come from publicly available sources, such as company websites and public company registers. A listing may include personal data where that public information names a person.

We keep listings on the basis of our legitimate interests in running a directory for data centre procurement. We do not use them for marketing.

If you are named in a listing, you can ask us to correct or remove your details, or object to their use, by contacting privacy@procuredc.com.

8. Data Retention

We keep personal data only for as long as we need it for the purposes in this policy:

Account Data: for as long as your organisation has an account, and for a reasonable period afterwards in case the account is restored or a question about it arises.
Invoices and Billing Records: for at least six years, to meet tax and accounting obligations.
Audit Logs: for as long as we need them to keep the platform secure and to show what happened on an account.
Company Listings: for as long as the listing is accurate and useful, or until you ask us to remove your details.

We do not erase every record at once when an account is closed: invoices and audit logs are kept to meet legal and business obligations.

To ask for your personal data to be erased, contact privacy@procuredc.com.

9. Your Rights (UK GDPR)

You have the following rights under UK GDPR:

Access: Request a copy of your personal data.
Rectification: Correct inaccurate or incomplete data.
Erasure ("Right to be Forgotten"): Request data deletion.
Restriction: Limit processing under certain conditions.
Objection: Object to direct marketing or certain processing.
Data Portability: Request transfer of your data to another provider.

To exercise these rights, contact us at privacy@procuredc.com.

You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator, at ico.org.uk.

10. Security Measures

We implement technical and organisational measures to protect your data against unauthorised access, loss, or theft.

11. Cookies and Tracking

We use only essential cookies and browser storage, to keep you signed in, to protect the service and to remember choices you make on the platform. We do not use analytics or advertising cookies.

Our Cookie Policy at procuredc.com/cookies lists them and explains how to manage them in your browser.

12. Changes to Privacy Policy

We may update this Privacy Policy from time to time. The date at the top of this page shows when it last changed.

Continued use of our services constitutes acceptance of the updated policy.

For any questions or concerns regarding privacy, contact us at privacy@procuredc.com.