Last updated: 24 September 2026
Information we collect
When you submit an RFQ or engineering-service enquiry, we collect your contact and company details, the technical and commercial information you provide, project references, target and latest acceptable delivery dates, optional engineering-review or inspection requests, NDA preference, accepted Terms version and consent time. Depending on your NDA choice, we may also receive technical files or a customer-provided NDA PDF through a restricted upload route. Supplier applications include company contacts, capability information and the accepted Supplier Terms version. Buyer and Supplier submissions may also include a logistics preference and business contact details for a preferred transport partner where the submitter is authorised to share them. For an Opportunity Notice, we retain the applicable scope and fee terms, notice and Terms versions, acceptance time, and the accepting person's name, role and business email. To protect forms from abuse, a one-way pseudonymous connection identifier and submission count may be retained temporarily. Registered accounts also contain verified email, profile name, organisation details, membership role, security-factor status, accepted Website Terms version, access state and security or audit events. Project-level access assignments, invitations and access changes are also recorded for collaboration and accountability. A matching email may generate a historical-record claim for manual review, but does not itself disclose that record.
Why we use it
We use submitted information to assess whether PartEnvoy can assist, clarify requirements, propose a scope, identify potentially suitable Suppliers, coordinate authorised work, maintain acceptance and operational records, prevent abuse and improve the service.
Controlled sharing
Project information is not intended for public display. An enquiry starts an internal fit review only. PartEnvoy does not begin supplier outreach or paid work until the relevant scope and terms have been accepted in writing. If an NDA is required only before supplier sharing, technical files may be received into private quarantine but are not released to a Supplier until the applicable NDA is recorded. If an NDA is required before PartEnvoy receives technical files, the CAD and drawings must wait until confidentiality has been put in place. A customer-provided NDA PDF may be submitted with either NDA option. Responsive Supplier quotations may be standardised and shown to the Buyer on an anonymised basis. The selected Supplier's identity and official quotation are disclosed before the Buyer can place a binding order.
Storage and security
Structured submissions are held in access-controlled service infrastructure. The private operations dashboard requires the registered administrator account and a second authentication factor. Company accounts use verified email and access-controlled organisation memberships. A second authentication factor is required to download protected files and make certain project or access decisions. Uploaded files are stored in a private quarantine. File type and actual size are verified after upload, and rejected files remain blocked. Technical files cannot be recorded as released to a Supplier until the applicable Buyer approval, Supplier Opportunity Notice acceptance and NDA controls are satisfied. Data is encrypted in transit.
Service providers
PartEnvoy uses Vercel for website hosting, Supabase for database and authentication services, and Resend for transactional email. These providers may process contact, submission, security and message data only as needed to provide their services. Supplier recipients receive information only after the Buyer authorises the relevant outreach.
Project conversations and personalised updates
Project conversations are available only to authorised participants and PartEnvoy. In moderated conversations, PartEnvoy reviews messages before sharing them with the other company and may remove identifying details. Original messages, reviewed versions, mentions and disclosure approvals are retained with the project record for accountability. Withdrawing access does not recall copies already received.
We store your selected news topics, notification preferences, read status and email-delivery records to provide your workspace feed. Optional email summaries require opt-in and can be switched off in Updates. They contain a sign-in link, not technical files or message contents. Account security and essential contractual messages are separate from these preferences.
Retention
Incomplete file-upload submissions are automatically removed after 24 hours. Unaccepted enquiries are reviewed for deletion after 90 days. Supplier due-diligence and active-project records are reviewed annually. Contract, accounting, acceptance and dispute records may be retained for the applicable statutory or limitation period. A legal hold overrides routine deletion where necessary.
Your choices
You may ask to access, correct or delete submitted personal information, restrict or object to certain processing, or request portability where applicable. You may also complain to the Dutch Data Protection Authority. Email contact@partenvoy.com and state that your message concerns privacy.
Controller details
Dániel Gergő Kis, trading as PartEnvoy
Tongelresestraat 377, Eindhoven, Netherlands
KVK: 42159606
Privacy contact: contact@partenvoy.com