Product OS + AI AGents

SupplyScope
Privacy Policy

Table of Contents

Effective Date: 11 February 2026

Introduction

Supply Scope Pty Ltd (ACN 650 495 668) (“SupplyScope“) is an all-in-one AI platform specialising in compliance automation and product workflows for retailers, marketplaces, and brands. Our platform is designed to enhance product integrity, address mandatory compliance requirements, and streamline collaboration.

We understand that you care about your personal privacy, and we take that seriously. 

This Privacy Policy describes SupplyScope’s policies and practices regarding the collection and use of your personal data and sets forth your privacy rights. 

We recognise that information privacy is an ongoing responsibility, and we will update this Privacy Policy as we adopt new personal data practices or policies. 

When we make material changes to this Privacy Policy, we will notify you by email (if you have provided your email address) and/or by posting a prominent notice on our website at least 30 days before the changes take effect.

The date of the last update to this Privacy Policy is 11 February 2026.

How this Privacy Policy applies

This Privacy Policy explains how SupplyScope collects and uses personal data when SupplyScope acts as a controller, including in relation to website visitors, marketing contacts, customer account administration, billing, security and platform analytics.

When SupplyScope provides services to customers, SupplyScope may process personal data contained in customer data on behalf of the customer. In those circumstances, the customer acts as the controller and SupplyScope acts as a processor, and the processing is governed by the applicable customer agreement and SupplyScope’s GDPR Data Processing Addendum available here (https://supplyscope.io/data-processing-agreement/) rather than this Privacy Policy.

Data Protection Officer

SupplyScope has appointed a Data Protection Officer in accordance with applicable data protection laws. The Data Protection Officer is responsible for overseeing SupplyScope’s compliance with data protection obligations and for acting as a contact point for data subjects and supervisory authorities.

The appointed Data Protection Officer is:

Reinaldo Lie
SupplyScope
Sydney, Australia
Email: [email protected]

Data subjects may contact the Data Protection Officer regarding any questions or concerns
about SupplyScope’s processing of personal data or to exercise their rights under applicable data protection laws.

SupplyScope’s Data Protection Officer may be contacted regardless of the data subject’s location.

How we collect and process your personal information

SupplyScope collects personal information directly from you when you visit our website, register for an account, request information, or use our services. We also collect information automatically through cookies and similar technologies (as described in our Cookie Notice), and occasionally from third-party sources as described below. 

The personal information we collect typically includes:

  • Name
  • Job title
  • Employer name
  • Work address
  • Work email
  • Work phone number

 

We use this information to provide prospects and customers with our services. We do not sell personal information and only share it with third parties who help deliver our services.


Occasionally, we receive personal information from third-party sources, such as LinkedIn, which may provide further details on your employer or industry. When we receive personal information from third-party sources, such as LinkedIn or other business contact databases, we ensure that such third parties have a lawful basis to share that information with us and that you have been informed of such sharing. The categories of third-party sources include professional networking platforms, business contact information providers, and publicly available sources.

Legal bases for processing

Where the General Data Protection Regulation (“GDPR”) applies, SupplyScope processes personal data only where it has a lawful basis to do so. Depending on the context, this may include:

  • performance of a contract or taking steps at the request of an individual prior to entering into a contract;
  • compliance with a legal obligation;
  • SupplyScope’s legitimate interests, such as operating, securing and improving its website and services, provided those interests are not overridden by the rights of the individual;
    and
  • consent, where required by law or where we have chosen to rely on consent as the legal basis. Where we rely on consent, you have the right to withdraw your consent at any time by contacting us at [email protected] or using the unsubscribe mechanism in marketing communications. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

Use of the SupplyScope Website

As with most websites, SupplyScope’s website collects certain information automatically and stores it in log files. This information may include:

  • IP addresses
  • Browser type
  • Operating system
  • The region or general location from where your device is accessing the internet
  • A history of the pages you view

We use this information to improve the design and functionality of our site, diagnose technical problems, analyse trends, track visitor behaviour, and enhance security. SupplyScope has a legitimate interest in understanding how users interact with its website, for the purposes of  operating, securing and improving its services. 

We have conducted a legitimate interests assessment and determined that these interests are not overridden by the rights and freedoms of individuals. You have the right to object to this processing at any time by contacting us at [email protected].

Cookies and tracking technologies

SupplyScope provides a comprehensive Cookie Notice that explains the cookies and tracking technologies used on our website. Users can view this notice and learn how to manage their preferences by accessing our Cookie Notice at. 

For certain cookies that are not strictly necessary for the website to function, we obtain your consent before placing such cookies on your device. You can withdraw your consent and manage your cookie preferences at any time through our cookie management tool available at (https://supplyscope.io/cookie-policy/) or by contacting us at [email protected].

Sharing information with third parties

We share personal data with the following categories of third-party recipients, only to the extent necessary for the purposes described in this Privacy Policy:

  (a) cloud infrastructure and hosting providers (including Amazon Web Services and Google Cloud Platform);
  (b) analytics and performance monitoring providers;
  (c) email and communications service providers;
  (d) customer relationship management platform providers;
  (e) payment processors (for billing purposes);
  (f) professional advisers including lawyers, auditors, and consultants; and
  (g) law enforcement, regulatory authorities, or other third parties where required by law or necessary to protect our rights.

We ensure that all third-party service providers are bound by contractual obligations to implement appropriate security measures and to process personal data only as instructed by us and in compliance with GDPR and other applicable data protection laws.

Personal data is stored and processed using cloud service providers, including Amazon Web Services (AWS) and Google Cloud Platform (GCP). Depending on the services used and the customer configuration, data may be hosted in data centres located in Australia, the European Union, or other locations where SupplyScope or its service providers operate. 

We have implemented appropriate technical and organisational measures and contractual safeguards with AWS, GCP and other service providers to ensure the security and confidentiality of your personal data.

AWS and GCP processes personal data only as instructed by SupplyScope and in accordance with our data processing agreement, which includes GDPR-compliant terms. Occasionally, SupplyScope engages third-party service providers
to send communications to you, including product updates and event invitations, on our behalf and under our instruction. SupplyScope does not share, sell, rent, or otherwise disclose personal data to third parties for their own marketing purposes.

We share personal data with third parties only in the following circumstances:

  1. You request or authorise it;
  2. It is related to SupplyScope-hosted events or co-sponsored conferences;
  3. Required by law to comply with legal requests;
  4. To protect our rights, property, or safety, or that of others;
  5. It is shared with agents or vendors performing functions on our behalf.

SupplyScope also aggregates non-personally identifiable data to provide insights to partners, service providers, and other third parties for marketing or promotional purposes.

Transferring personal data internationally

SupplyScope is headquartered in Australia and may process personal data in Australia, the European Union and other locations where it or its service providers operate. 

Where personal data is transferred outside the European Economic Area, SupplyScope relies on appropriate safeguards recognised under applicable data protection laws, such as standard contractual clauses, unless an adequacy decision applies.

Data Subject rights

The General Data Protection Regulation (GDPR) and other privacy laws provide rights for data subjects, including:

  • Right to be informed
  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restrict processing
  • Right of data portability
  • Right to object
  • Rights related to automated decision making, including profiling.

If you wish to exercise any of these rights or confirm that SupplyScope is processing your data, please contact us. We provide reasonable access to your data at no cost, and if access cannot be provided in a reasonable time frame, we will inform you of when the data will be available.

If you are located in the European Union, you also have the right to lodge a complaint with your local data protection supervisory authority.

Automated decision-making

SupplyScope does not use personal data for solely automated decision-making that produces legal effects or similarly significant effects on individuals, unless expressly agreed with the relevant customer and permitted by applicable law.

Security of your information

SupplyScope uses reasonable physical, technical, and administrative safeguards to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction.

Data storage and retention

Your personal data is stored and processed using SupplyScope’s systems and cloud service providers, including Amazon Web Services, in Australia, the European Union and other locations where SupplyScope or its service providers operate. 

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including providing the services, maintaining security, complying with legal obligations, resolving disputes and enforcing agreements. 

Retention periods vary depending on the nature of the data and applicable legalrequirements. Where personal data is processed on behalf of a customer as a processor, retention and deletion are governed by the applicable customer agreement and data processing addendum.

Children’s data

We do not knowingly collect data from children. If you are under the age at which you may lawfully consent to the processing of your personal data under applicable law, please do not provide any personal information through our website or services.

Questions, concerns, or complaints

If you have any questions, concerns, or complaints, or wish to exercise your privacy rights, please contact us at [email protected].