Skip to content
The Sourcing Book

Privacy policy

Last updated: 2026-11-05

Controller

Qronos Leads OÜ, registry code 17143926, Sepapaja tn 6, 15551 Tallinn, Estonia. Email: .

What we process, why, and on what basis

  • Contact requests. Name, company, work email, country, role and message sent through the contact form, to answer you and, if you wish, prepare an introduction. Basis: steps taken at your request before a contract and our legitimate interest in answering business enquiries (GDPR art. 6(1)(b) and (f)).
  • Security. Technical data such as IP address, browser and request time, processed by our host to protect the site against abuse, including the anti-spam check on the contact form. Basis: legitimate interest in security (art. 6(1)(f)).
  • Business development. Professional contact details of people working for food businesses, collected from business cards exchanged at trade fairs, from emails they send us, and from public registers (for example the French register of declared food supplements and the French official business directory). Used to propose relevant introductions between businesses. Basis: legitimate interest in business-to-business prospecting (art. 6(1)(f)). You can object at any time and we will stop contacting you.

We do not sell personal data. We do not use advertising or analytics cookies, and no automated decision is taken about you.

Recipients

  • Cloudflare, Inc. (hosting, security, anti-spam).
  • Google LLC / Google Ireland Ltd (business email, and the service that delivers contact-form messages to our mailbox).
  • A manufacturer, only when you ask for an introduction and after the NNN is signed.

Cloudflare and Google may process data in the United States. Transfers rely on the EU-US Data Privacy Framework and, where applicable, the European Commission's standard contractual clauses.

How long

Contact requests and business contact details: three years after our last exchange, unless a contract requires longer. Security logs: according to our host's retention, generally a few days to weeks. Objections are kept on a do-not-contact list so that we keep respecting them.

Cookies and local storage

Only strictly necessary items are used: security cookies set by Cloudflare and, stored only in your browser, your language, your light or dark theme and the sheets you put in the comparator. None is used for tracking, so no consent banner is required.

Your rights

You can ask for access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest, by writing to . You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or to the authority of your country.