Effective date: 17 October 2026
1. Scope
This Privacy Policy describes how personal information may be processed in connection with nomyparts.com, an independent B2B directory, technical comparison and industry information platform. It covers website visitors, registered users, company representatives, contributors, business contacts and people who contact NomyParts.
2. Controller and privacy contact
For privacy questions and requests, contact info@nomyparts.com. NomyParts is the name used to operate this service. Privacy requests and questions about the responsible operator may be directed to info@nomyparts.com.
3. Categories of information
Depending on how the service is used, information may include:
- Account and contact information, including first name, surname, corporate email address, company, telephone number and account credentials (such as a securely stored password hash). Additional fields may be collected in the future only where relevant to clearly explained services, with updated notice and a lawful basis where required.
- Company representative verification information, including corporate email domain and any evidence reasonably needed to confirm authority.
- Company and product profile submissions, edits, technical descriptions and associated business contact information.
- Messages, support requests, correction requests, rights complaints and related correspondence.
- Reviews, ratings and other material a visitor elects to submit without registration, together with any limited moderation, abuse-prevention and verification records actually collected. Reviews without verified proof of purchase or use are described as unverified.
- Subscription, invoicing and payment status information for paid services. Stripe is used for payment processing; card and other payment data are handled according to the Stripe integration actually deployed, and payment information is handled according to the checkout method used.
- Website usage, security and device information such as IP address, browser, timestamps and server logs, subject to actual technical implementation and applicable consent rules.
- Email campaign engagement information collected through Mailrelay open-tracking pixels and tracked links, potentially including message identifiers, opening or click events, associated timestamps and related technical information, according to the actual configuration.
- Professional information from public company websites and other lawful sources used to prepare independent B2B listings.
We aim to collect only information reasonably necessary for the purposes described here.
4. Purposes and lawful bases
Personal information may be used to:
- Operate accounts, company claims, directory listings and comparison features, where necessary to provide requested services or under legitimate interests, as appropriate.
- Verify authorized company representatives and prevent fraud, impersonation and misuse, generally under legitimate interests or other applicable lawful bases.
- Respond to messages, profile removal requests, rights complaints and data-protection requests, under legitimate interests or legal obligations where applicable.
- Administer paid B2B subscriptions, invoices and customer support, under contract and legal obligations where applicable.
- Publish professional company information in an independent directory, subject to a documented legitimate-interests assessment and applicable rights, including objection.
- Secure, maintain and improve the website, where justified by legitimate interests or other applicable bases.
- Send product, platform and industry-related business communications to registered subscribers or, where the law of the recipient’s jurisdiction expressly permits it, to selected professionals whose responsibilities are relevant to NomyParts’ B2B services. Publicly available professional contact information does not by itself authorize unsolicited marketing emails. Where prior consent is required, no unsolicited marketing email will be sent without it. Any permitted outreach must identify the sender, explain the relevance and provide an effective, easy-to-use opt-out, honored for future marketing.
- Measure marketing email delivery and engagement, including Mailrelay open and link tracking, only with the transparency, lawful basis and any consent required by the recipient’s applicable privacy and electronic-communications laws. Recipients must be able to opt out of marketing, and engagement data must not be collected or reused beyond the disclosed lawful purposes.
- Use optional analytics or advertising technologies only under the consent or other basis required by applicable law.
Legitimate interests must be balanced against individuals’ rights. Consent, where required, must be freely given and withdrawable.
5. Public directory information
Company profiles may be created from publicly accessible business information without prior commercial contact. Some professional contact details may constitute personal data even when published on a business website. Where legally required, NomyParts provides information about the sources and privacy rights where required by law. A verified company representative may claim and edit company and product information, or request removal of the company’s directory profile and associated product listings. Following a verified removal, the directory profiles will not be republished without later explicit authorization from an authorized representative. NomyParts may retain a minimal internal suppression record where lawful to honor that instruction. Requests involving personal data will also be assessed under applicable data-protection law.
6. Reviews and contributions
Reviews may be published without verification of purchase or product use and should be clearly presented as unverified unless explicitly verified. Contributors should avoid including unnecessary personal data about others. Public contributions may remain visible to visitors until removed or moderated, subject to applicable rights and legal requirements.
7. Sharing, business inquiries and processors
NomyParts uses Google services for website-related functions (which may include analytics, tag management, advertising, authentication or other services depending on the deployed configuration), Mailrelay for email delivery and mailing-list management, and Stripe for payments. Their roles as processors or independent controllers depend on the specific service and contractual configuration. Personal information may also be shared with other service providers only as needed to operate the platform, such as hosting, security, customer support and infrastructure providers actually used. Providers should act under appropriate agreements where they process data on NomyParts’ behalf. Information may also be disclosed when required by law, to address rights complaints or to protect legitimate legal interests. Business contact requests or leads may involve sharing the details submitted by a requester with the intended company only where the form clearly explains the recipient and purpose, and an appropriate lawful basis applies. Details submitted through contact features are used in line with the notice presented with the relevant form. Paid visibility does not grant unrestricted access to visitors’ personal data. NomyParts does not represent that it sells personal data. The relevant recipients depend on the services used and the user’s interaction with the platform.
8. International transfers
Where personal data is transferred outside the jurisdiction in which it is protected, NomyParts must use an appropriate transfer mechanism where required, such as an adequacy decision or standard contractual clauses with supplementary safeguards when necessary. Details of applicable safeguards may be requested at info@nomyparts.com.
9. Retention
Personal information is retained only for as long as reasonably necessary for its purposes, including account operation, business records, security, dispute handling and statutory obligations. Retention depends on the purpose and applicable legal requirements; account data is generally kept while an account is active, financial records for statutory periods, and correspondence as needed to respond to requests and resolve disputes.
10. Security
NomyParts applies appropriate technical and organizational safeguards, such as access controls, authentication, backups and incident response, proportionate to the risks. No online service can guarantee absolute security. Any statutory breach-notification duties remain applicable.
11. Individual rights
Subject to applicable law, individuals may request access, rectification, erasure, restriction, portability or object to certain processing. Where processing relies on consent, it may be withdrawn without affecting prior lawful processing. Requests can be sent to info@nomyparts.com. NomyParts may request proportionate information to verify identity before disclosing or changing personal data. Individuals may also have the right to lodge a complaint with a competent supervisory authority.
12. Cookies and similar technologies
Strictly necessary technologies may support core website functions. Google services may use analytics, advertising or similar technologies, depending on which Google products are actually deployed. Non-essential analytics, advertising or other technologies must be described in the separate Cookie Policy and subject to consent choices where legally required; a Google integration does not automatically make all Google cookies necessary. Further information about cookies and available choices appears in the Cookie Policy.
13. Children
The platform is intended for professional and business audiences, not children. NomyParts does not knowingly seek children’s personal information through its B2B services.
14. Changes
This policy may be updated when processing activities, providers or legal requirements change. Material changes will be communicated where required. The current version should display an accurate effective date.
