Privacy policy

01Who is responsible

Ploosa is operated by SYMQUARK L.L.C-FZ, licensed by the Meydan Free Zone in Dubai, United Arab Emirates, with its registered office at Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates.

Symquark is responsible for personal data used to administer Ploosa accounts, billing, support, and security. When a business puts personal data into its workspace and determines why it is processed, that business is the controller and Symquark acts on its behalf under the applicable Data Processing Agreement.

This notice covers ploosa.com and the Ploosa application. Symquark’s corporate website has its own privacy notice.

02Information we handle

• Account and business information: your name, work email, sign-in information, role, company details, preferences, and team membership, supplied by you or your workspace administrator.
• Workspace activity: business profiles, catalogues, documents, connections, price lists, RFQs, quotations, messages, and other content you or your colleagues provide.
• Billing and support: subscription details, invoices, payment status, and correspondence. Payment providers process payment details through their payment flows.
• Technical information: IP address, browser and device details, request times, access and audit logs, and interactions needed to operate, troubleshoot, and secure the Service.
• Connected and public sources: information from integrations your business enables, counterparties you work with, and publicly available business or product sources used for discovery and intelligence. These sources may contain business contact information.

03Why we use information

We use information to create accounts, operate workspaces, provide business workflows and intelligence, process subscriptions, respond to enquiries, maintain records, and prevent misuse. Information required for registration, security, or billing is necessary to provide the corresponding feature.

Where data protection law requires a lawful basis, we rely on the basis applicable to the activity: fulfilling a contract or responding to a request before a contract; meeting a legal obligation; legitimate interests in security, support, and service improvement where permitted and balanced against your rights; or consent where required. You may withdraw consent for processing based on consent.

04Sharing & visibility

Your workspace administrators can manage team access and business settings. Information may be visible to colleagues, selected counterparties, or a wider audience according to the feature and its publishing or sharing settings. Review those settings before sharing confidential or personal information.

Providers supporting hosting, storage, authentication, communications, payments, and enabled AI or integrations may process information needed for those functions. The applicable sub-processor information describes providers used for contracted services.

Information may also be disclosed to professional advisers, where legally required, to protect rights and security, or as part of a business transfer with appropriate protections. We do not sell personal information. Recipients outside your workspace handle information they receive under their own responsibilities.

05AI & business intelligence

Ploosa uses business information, activity, public sources, and inputs to enabled features to generate search results, summaries, recommendations, and intelligence. Depending on the feature, relevant information may be processed by an AI provider. Avoid including unnecessary personal or sensitive information in prompts or uploaded documents.

AI outputs can be inaccurate. Your business remains responsible for reviewing them and for decisions it makes using them. Contractual restrictions on the use of customer data, including model training, are governed by your Symquark agreement. Contact us for details about a particular feature or provider.

06Retention, security & transfers

How long we keep information depends on its purpose: account administration, the life of a workspace, completing a transaction, resolving a support issue, security investigation, or a legal record-keeping requirement. The applicable agreement sets out customer data return and deletion arrangements.

Account closure does not necessarily remove records needed for accounting, security, or legal claims, backups awaiting their normal expiry, or copies held by counterparties. Ask us about the retention period for a specific category of information.

We use technical and organisational measures to protect information. No service can guarantee absolute security. Contractual safeguards and security information are available in Symquark’s Security and Assurance documentation.

Symquark is established in the UAE, and providers may process data in other countries. Where required, international transfers must be covered by a lawful transfer mechanism. The applicable Data Processing Agreement describes contractual safeguards; contact us for information about the arrangements that apply to your workspace.

07Your choices & rights

You can update available profile and privacy settings in your workspace. Depending on the law that applies, you may request access to personal data, correction, deletion, restriction, or a portable copy, and withdraw consent where processing relies on consent.

You may object to processing based on legitimate interests, including direct marketing where applicable. You may also complain to the competent data protection authority, including the UAE Data Office or your local EU or UK authority where those laws apply.

To make a request, use Symquark’s contact form, choose “Contracts, security and data”, and identify Ploosa and the relevant account. We may need to verify your identity and authority before disclosing or changing data. Requests are subject to applicable legal time limits and exceptions.

If the data is controlled by a business using Ploosa, contact that business or its workspace administrator. We can help route the request to the appropriate controller.

08Cookies & browser storage

Our Cookie Policy describes the cookies and browser storage used for account security, preferences, and application state. It also explains how to control them through your browser.

09Children

Ploosa is a business service intended for adults aged 18 or over. If you believe a child has supplied personal information, contact us so we can investigate and address it.

10Updates & contact

We update this notice when our practices or requirements change. The date above identifies the latest revision. Where a change materially affects how we use existing personal information, we will provide an appropriate notice.

For privacy questions or requests, contact Symquark under “Contracts, security and data”, or write to the registered office below. Include “Ploosa” so the enquiry reaches the right team.