The operator
Branden Sanchez trading as ProcureTwin is the data controller. ProcureTwin is a sole-trader business, not a registered limited company. Contact hello@nuancesites.com or write to 21 Buckholt Avenue, Bexhill-on-Sea, TN40 2RS, United Kingdom.
What is available today
The public service offers a domain comparison, public registry lookups, an editorial register of official supplier notices pilot enquiries and manually reviewed company profiles. Private incident submissions and member intelligence sharing are not open. Please do not send allegations, purchase orders, customer files, identity documents or sensitive information.
Information and purposes
- Pilot enquiries: your name, email, business, optional website, optional role and optional sector let us assess pilot suitability, send a receipt and reply to your enquiry. We rely on legitimate interests in responding to business enquiries and developing a relevant service (UK GDPR Article 6(1)(f)). An enquiry does not subscribe you to marketing.
- Company verification: your name, work email, company number, official domains and optional purchasing numbers and delivery sites let us verify your authority and company details. We rely on legitimate interests in maintaining accurate business identity references. Once independently reviewed, the company name, number, approved domains and explicitly public business numbers may be published with review and expiry dates. Representative details, full sites and verification notes remain private. This request does not create incident intelligence or a paid membership.
- Public checks: only the sender domain, comparison domain and optional company number are submitted. Any email local part is removed in your browser. We use submitted domains to return the check you request, relying on legitimate interests in providing this limited verification aid. No order history is saved.
- Feedback and coverage requests: your chosen feedback option or business name is stored privately for 30 days to improve coverage and usability, based on legitimate interests. We do not attach your search or ask for contact details. Do not submit personal information or allegations.
- Privacy requests: your contact details, request category and optional reference let us handle access, correction, erasure, objections and complaints. We rely on our legal obligations under data-protection law (Article 6(1)(c)); general source queries use legitimate interests in maintaining accurate information.
- Security: the hosting service receives connection information such as IP address and request metadata. ProcureTwin uses keyed fingerprints of IP addresses and enquiry emails for temporary abuse limits. Restricted administrative actions produce an access log. The basis is legitimate interests in protecting the service.
Required fields are marked by the form. Without contact information we cannot respond to an enquiry. You can use the public pages without submitting a form. The acknowledgement box confirms you have read this notice; it is not consent to unrelated uses.
Recipients and hosting
Branden handles enquiries privately. OpenAI provides Sites hosting, with Cloudflare infrastructure. These providers process service data; they also handle their own account and security information under their policies. We do not sell enquiry details or share them with pilot members. No AI model is called to assess orders or enquiries.
A live registration lookup sends the domain to the registry endpoint listed by IANA. The response can be unavailable. Clicking a source or Companies House link takes you to that organisation’s site, which has its own privacy practices. Resend processes recipient email addresses, short transactional messages, references and delivery metadata for receipts and operator alerts. Alerts contain a reference and private-inbox link, not your enquiry contents. No mailing-list signup or open/click tracking is added. Direct replies are processed by the email services used by you and the operator.
Hosting is not restricted to the UK. OpenAI’s Data Processing Addendum provides for UK transfers using the Standard Contractual Clauses with the UK Addendum. Its sub-processor list describes further service providers. Contact us for information about applicable safeguards. We do not claim UK-only storage. Resend’s Data Processing Addendum describes processing in the United States and transfer safeguards including the UK Addendum. Its sub-processor list identifies its further providers.
Storage and retention
Enquiry contents are encrypted before database storage. Private contents are restricted to the operator. Approved company profile fields are intentionally public, as explained above. Keyed fingerprints are pseudonymous information, not anonymous data.
- Pilot enquiries expire 60 days after submission. Encrypted outgoing messages and sending-status records are deleted with the related form record. Resend retains its own delivery records under its service retention settings.
- Company verification requests, verification notes and resulting profiles expire 90 days after submission. Deleting a request also deletes its profile and queued emails. Renewal needs a new request and review.
- Initial privacy and correction requests expire after 90 days. A continuing rights matter may need a separate, minimal correspondence record until resolved; we explain any longer retention that is needed.
- Temporary abuse-limit records expire after two hours. Administration logs are retained for up to 90 days.
Expired form records disappear from the operations queue. Deletion runs when the enquiry, check or operations service is used and through operator retention maintenance. Providers manage infrastructure logs and backups under their own service retention processes. If you continue into a pilot, we provide the applicable member notice before collecting additional information.
Your choices and rights
You can ask for access, correction, erasure, restriction or object to processing based on legitimate interests. Portability applies where its legal conditions are met. Rights are subject to applicable exceptions; we explain any refusal. There is no automated decision with legal or similarly significant effect.
Use our contact and corrections form or email hello@nuancesites.com. We may ask for proportionate identity checks. We normally respond within one month and explain any permitted extension within that first month. You can complain to the Information Commissioner’s Office.
Cookies and children
ProcureTwin adds no advertising pixels, behavioural analytics or non-essential cookies. Hosting and optional administrator sign-in may use essential security or session technologies. This is a business service for adults, not a service directed at children.
If the service changes
We will update this dated notice before introducing new processing. Any future private incident network requires separate membership terms, a defined legal basis for sharing and additional safeguards. Today’s enquiry details will not become incident intelligence.