Privacy Policy

This Privacy Policy explains how Sleekshift Ltd, trading as TextileFlow, collects, uses, stores, shares, and protects personal information when individuals visit our website, contact us, submit an enquiry, use our buyer workspace, interact with our sourcing services, or communicate with us.

TextileFlow is a UK-based B2B sourcing platform and sourcing coordination service connecting UK and European home textile buyers with vetted Indian manufacturers. We support supplier matching, RFQ handling, sample tracking, production visibility, documentation management, and quality control coordination.

This Privacy Policy applies to website visitors, buyer contacts, supplier contacts, prospective customers, supplier representatives, contractors, service providers, and other business contacts.

• Legal entity: Sleekshift Ltd
• Trading name: TextileFlow
• Company number: 16854971
• Registered in: England and Wales
• Registered office: 5 Brayford Square, London, England, E1 0SG
• General email: contact@textileflow.co.uk
• Privacy email: privacy@textileflow.co.uk

For the purposes of UK data protection law, including the UK GDPR and Data Protection Act 2018, Sleekshift Ltd is generally the data controller for personal information collected through our website, buyer workspace, business communications, supplier onboarding, and sourcing services.

Where we process personal information strictly on behalf of a buyer or supplier under a separate written agreement, we may act as a processor. The relevant agreement will explain those responsibilities.

We may collect the following types of personal information.

Business contact information

This may include:

• Name
• Job title
• Company name
• Business email address
• Business phone number
• Country or region
• Business address
• LinkedIn profile or other business profile, where provided
• Communication preferences

Buyer and RFQ information

When a buyer submits an enquiry or RFQ, we may collect:

• Buyer contact details
• Company details
• Product requirements
• Target quantities
• Technical specifications
• Budget or target price information
• Delivery timelines
• Compliance requirements
• Uploaded files, including tech packs, product images, artwork, specifications, and design files
• Notes, messages, approvals, and sourcing instructions

Supplier information

When a supplier is reviewed, onboarded, or matched to buyer opportunities, we may collect:

• Supplier representative contact details
• Company details
• Factory location
• Product categories
• Export experience
• Production capability
• Certifications and audit documents
• Quality control information
• Commercial details relevant to sourcing
• Bank or payment-related information where necessary for commercial workflows
• Documents provided during onboarding or order management

Buyer workspace information

If you use the TextileFlow buyer workspace, we may collect:

• Login details
• User role and permissions
• RFQ history
• Quote records
• Sample status
• Purchase order status
• Production milestone updates
• Quality control records
• Uploaded and downloaded documents
• Activity logs
• Messages and comments

Website and technical information

When you use our website, we may collect:

• IP address
• Browser type and version
• Device type
• Operating system
• Pages visited
• Referring website
• Date and time of visit
• Approximate location based on IP address
• Cookie and analytics information

We collect information when you:

• Visit our website
• Submit a contact form
• Submit an RFQ
• Create or use an account
• Upload documents
• Communicate with us by email, phone, video call, website form, or messaging platform
• Apply to become or remain a supplier in our network
• Participate in sourcing, sampling, production, QC, or shipment workflows
• Interact with our emails or website content

We may also receive business information from buyers, suppliers, referrals, trade directories, publicly available sources, certification bodies, logistics providers, inspection partners, and other parties involved in a sourcing transaction.

We use personal information to:

• Respond to enquiries
• Assess buyer requirements
• Match RFQs with suitable suppliers
• Review and onboard suppliers
• Manage RFQs, quotes, samples, orders, production updates, QC records, and shipment-related information
• Provide access to the buyer workspace
• Communicate with buyers, suppliers, and operational partners
• Maintain records of sourcing activity
• Verify supplier details and documentation
• Support quality control and compliance documentation
• Improve our website, services, and workflow tools
• Send service updates and business communications
• Send marketing communications where legally permitted
• Detect, prevent, or investigate fraud, misuse, security issues, or contractual breaches
• Comply with legal, accounting, tax, regulatory, and contractual obligations
• Protect our legal rights and commercial interests

We rely on one or more lawful bases depending on the situation.

Contract

We process personal information where necessary to perform a contract with you or your organisation, or to take steps before entering into a contract. This includes RFQ handling, supplier onboarding, buyer workspace access, sourcing coordination, and order-related workflows.

Legitimate interests

We process business contact and operational information where necessary for our legitimate interests, including running a B2B sourcing business, communicating with buyers and suppliers, managing sourcing workflows, improving our platform, protecting our commercial interests, and preventing misuse.

We only rely on legitimate interests where we believe our interests are not overridden by your rights and freedoms.

Legal obligation

We process information where required to comply with legal, tax, accounting, regulatory, or record-keeping obligations.

Consent

We may rely on consent for certain optional activities, such as some marketing communications or non-essential cookies. Where we rely on consent, you may withdraw it at any time.

We may share personal information with:

• Buyers, where required to progress an RFQ, quote, sample, production, QC, or shipment workflow
• Suppliers, where required to respond to buyer requirements or manage sourcing activity
• TextileFlow team members, contractors, consultants, and operational partners
• Quality control providers
• Logistics or documentation partners
• IT, cloud hosting, storage, email, analytics, CRM, security, and workflow service providers
• Payment, accounting, banking, and tax advisers
• Legal, compliance, insurance, or professional advisers
• Regulators, courts, law enforcement, or public authorities where required
• A buyer, investor, or successor if our business is sold, transferred, restructured, or merged

We do not sell personal information.

To operate TextileFlow, we may use selected technology providers for hosting, database storage, file storage, email delivery, background workflows, monitoring, analytics, authentication, security, and customer communications.

Based on our current intended technology stack, this may include providers such as Vercel, Neon, Cloudflare, Resend, Inngest, Sentry, and other similar service providers. The exact providers may change over time as our platform develops.

Where service providers process personal information for us, we use appropriate contractual, technical, and organisational safeguards.

TextileFlow operates a UK-India sourcing model. This means some personal information may be accessed from or shared with recipients outside the UK, including India, where necessary for supplier verification, RFQ handling, production coordination, quality control, documentation, and sourcing operations.

Where we transfer personal information outside the UK, we take appropriate steps to protect it. These may include:

• Sharing only the information necessary for the relevant purpose
• Using contractual safeguards
• Applying appropriate access controls
• Using secure communication and storage systems
• Assessing transfer risks where required by law
• Using recognised transfer mechanisms where required

Buyers and suppliers should avoid uploading unnecessary personal information into TextileFlow systems or documents.

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Typical retention periods may include:

• Enquiry records: up to 3 years after last contact
• Buyer and supplier account records: for the duration of the relationship and up to 6 years afterwards
• RFQ, quote, order, QC, and sourcing records: up to 6 years after completion or last activity
• Financial, tax, and accounting records: as required by law, generally up to 6 years
• Marketing records: until you unsubscribe or we remove inactive contacts
• Website analytics data: according to the settings of the relevant analytics tools

We may retain information for longer where necessary to resolve disputes, enforce agreements, comply with legal obligations, or protect our legal rights.

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.

These measures may include:

• Secure cloud hosting
• Access controls
• User authentication
• Role-based permissions
• Encryption where appropriate
• Internal confidentiality obligations
• Secure document handling
• Monitoring and logging
• Backups and recovery procedures

No online system is completely secure. Users are responsible for keeping login credentials confidential and notifying us promptly if they suspect unauthorised account access.

Our website may use cookies and similar technologies to make the website function properly, understand website traffic, improve user experience, support security, and measure marketing performance.

Where required, we will ask for consent before using non-essential cookies.

More information is available in our Cookie Policy.

We may send business-to-business marketing communications about TextileFlow services, sourcing updates, supplier capabilities, or relevant industry information where legally permitted.

You can opt out of marketing communications at any time by using the unsubscribe link in our emails or contacting us directly.

We may still send non-marketing service communications, such as account updates, RFQ updates, order-related communications, or legal notices.

Depending on the circumstances, you may have the right to:

• Access your personal information
• Correct inaccurate or incomplete information
• Request deletion of your information
• Request restriction of processing
• Object to processing
• Request data portability
• Withdraw consent where processing is based on consent
• Complain to a data protection authority

To exercise your rights, contact us at privacy@textileflow.co.uk.

We may need to verify your identity before responding. Some rights may be limited where we need to retain information for legal, contractual, tax, accounting, dispute resolution, or legitimate business reasons.

If you have concerns about how we use your personal information, please contact us first at privacy@textileflow.co.uk.

You also have the right to complain to the UK Information Commissioner's Office.

Our website or workspace may contain links to third-party websites, platforms, or documents. We are not responsible for the privacy practices, content, or security of third-party websites.

We may update this Privacy Policy from time to time. The latest version will be published on our website with the updated effective date.

Material changes may be notified by email or through the buyer workspace where appropriate.

• Sleekshift Ltd trading as TextileFlow
• Company number: 16854971
• Registered in England and Wales
• Registered office: 5 Brayford Square, London, England, E1 0SG
• Privacy email: privacy@textileflow.co.uk
• General email: contact@textileflow.co.uk