Privacy Policy
Privacy Policy
Last updated: 23 September 2026
This policy explains what personal data we collect on refindustry.com, why we collect it, and what rights you have under the General Data Protection Regulation (GDPR).
1. Who is responsible
The data controller is Business Marketing OÜ, Estonia, which operates refindustry.com. For any privacy question or request, write to info@refindustry.com.
2. What we collect
Account data. Name, email address, and optionally company, job title and country, when you register an account.
Company profile data. The information you publish about your company, including contacts you choose to make public.
Subscription data. Email address and preferences when you subscribe to our newsletters, and records of your consent.
Correspondence. The content of messages you send us, including press releases, partnership enquiries and support requests.
Technical data. IP address, browser and device type, pages viewed and referring page, collected through server logs and, where you consent, through analytics.
We do not collect special categories of personal data, and we do not knowingly collect data from children under 16.
3. Why we process it, and on what basis
To operate the website and keep it secure, including server logs and protection against abuse. Legal basis: our legitimate interest.
To provide your account and publish your company profile. Legal basis: performance of our agreement with you.
To send newsletters and marketing emails. Legal basis: your consent, which you can withdraw at any time.
To reply to your enquiries and manage commercial relationships. Legal basis: performance of an agreement, or our legitimate interest in responding to business correspondence.
To understand how the website is used, through analytics. Legal basis: your consent.
To meet legal and accounting obligations. Legal basis: legal obligation.
4. Cookies and third party services
We use a consent mechanism with four categories:
Strictly necessary. Always active. Login sessions, form protection, storing your cookie choice, and remembering which language version of the site you are viewing. These are required for the website to work. Form protection is provided by Cloudflare Turnstile, which runs in invisible mode and processes technical signals such as IP address, browser type and device characteristics to distinguish human visitors from automated traffic. Turnstile does not track visitors across websites and is not used for advertising. See Cloudflare’s Turnstile Privacy Addendum: https://www.cloudflare.com/en-gb/turnstile-privacy-policy/
Functional. Not used at present.
Analytics. Optional. Google Analytics, used to understand traffic and how pages are used.
Marketing. Not used at present.
Nothing beyond the strictly necessary category loads before you consent. Optional scripts are not delivered by our server at all; they are only loaded after you allow the relevant category. Choosing to reject means nothing optional is loaded.
Your choice is stored for 180 days, after which we ask again. You can change or withdraw your choice at any time using the Cookie settings link in the footer.Your choice is stored for 180 days, after which we ask again. You can change or withdraw your choice at any time using the Cookie settings link in the footer.
5. Who we share data with
We do not sell personal data. We share data with service providers who process it on our instructions and only for the purposes described in this policy.
Cloudflare, Inc. Form protection and bot detection, as described in section 4.
Bitrix24. Our customer relationship system. When you send us a contact or media kit enquiry, your name, email address, company, message and the page you came from are recorded there so that we can respond and keep track of the enquiry.
MailerLite. Newsletter delivery and subscriber management. We store your email address, display name, country and the topics you have chosen to follow.
MailerSend. Delivery of transactional email, such as account activation and password reset messages, confirmations and replies to enquiries.
Google Analytics. Website analytics, loaded only if you allow the analytics category. See section 4.
Hosting. Our hosting provider processes all data as part of operating the servers on which the website runs.
When you send an enquiry to a company listed in our directory, we pass your name, contact details and message to that company so it can reply to you. That company is responsible for what it does with your enquiry.
We publish the information you choose to include in a public company profile. That information is visible to anyone using the website.
We may disclose data where the law requires it. Some of our providers may process data outside the European Economic Area. Where that happens, transfers are made under the safeguards required by GDPR.
6. How long we keep it
Account and company profile data: while your account is active, and for a reasonable period afterwards.
Newsletter data: until you unsubscribe, plus a record of consent and unsubscription.
Correspondence: as long as needed for the enquiry and for our business records.
Server logs and analytics: for a limited retention period set in each system.
7. Your rights
If you are in the European Economic Area you have the right to access your data, to have it corrected, to have it erased, to restrict or object to processing, to receive your data in a portable format, and to withdraw consent at any time where processing is based on consent.
To exercise any of these rights, write to info@refindustry.com. You also have the right to complain to your national data protection authority.
8. Security
We use technical and organisational measures to protect personal data, including encrypted connections and restricted access to systems. No online service can guarantee absolute security.
9. Changes
We may update this policy. The current version is always published on this page with the date of the last update.
10. Contact
Business Marketing OÜ, Estonia
info@refindustry.com