1. Who We Are
RenDeals Technologies Ltd. ("RenDeals", "we", "us") operates a digital marketplace for renewable energy M&A transactions. We act as the data controller for personal data processed through our platform at rendeals.com.
2. Data We Collect
We collect and process the following categories of personal data:
- Account data: name, email address, password (hashed), role (buyer/seller/lender/advisor).
- Organisation profile: company name, country, organisation type, principal/broker status, typical investment size.
- Transaction data: expressions of interest (EOIs), non-disclosure agreements (NDAs), non-binding offers (NBOs), and their statuses.
- Platform content: project listings, intake submissions, messages submitted through forms.
- Technical data: IP address (recorded at agreement signing only), browser type via standard HTTP headers.
We do not collect browsing behaviour, page visit history, login frequency, device fingerprints, or location tracking data.
3. Legal Basis for Processing
We process personal data under the following legal bases (GDPR Article 6):
- Contract performance (Art. 6(1)(b)): Processing necessary to provide our marketplace services, manage accounts, and facilitate transactions.
- Legitimate interest (Art. 6(1)(f)): Deal management, buyer/seller screening, fraud prevention, and platform security. We balance our interests against individual rights and only process data proportionate to these purposes.
- Consent (Art. 6(1)(a)): Email notifications (opt-in, configurable in account settings).
4. Deal Management & Buyer Screening
To facilitate transactions, our deal management team may view:
- Buyer and lender organisation profiles (company name, type, country, investment mandate).
- Transaction history on the platform (EOIs submitted, NDAs signed, NBOs made) — limited to deal-related data only.
- Seller project submissions and listing details.
This processing is necessary for our legitimate interest in maintaining deal quality and screening buyer qualification. We do not share individual transaction histories with other buyers, sellers, or third parties except as required to facilitate a specific deal or comply with legal obligations.
5. Data Sharing
We share personal data only in the following circumstances:
- Deal parties: When a buyer submits an EOI, their organisation name and message are shared with the seller (after screening). Full identity is disclosed only after NDA signing.
- Service providers: We use Supabase (database hosting, EU region), Vercel (application hosting), and Resend (transactional email). These providers process data under data processing agreements.
- Legal obligations: Where required by law, regulation, or court order.
We do not sell personal data to third parties.
6. Data Retention
Account data is retained for as long as your account is active. Transaction data (EOIs, NDAs, NBOs) is retained for the duration of the related deal plus 5 years for contractual and legal compliance purposes. You may request earlier deletion of your account and personal data at any time.
7. Your Rights (GDPR)
Under the General Data Protection Regulation, you have the right to:
- Access your personal data and obtain a copy.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten"), subject to legal retention requirements.
- Restrict processing in certain circumstances.
- Data portability — receive your data in a structured, machine-readable format.
- Object to processing based on legitimate interest.
- Withdraw consent for email notifications at any time via your account settings.
To exercise any of these rights, contact us at privacy@rendeals.com.
8. Cookies
We use only essential cookies required for authentication and session management. We do not use tracking cookies, analytics cookies, or advertising cookies.
9. Security
We implement appropriate technical and organisational measures to protect personal data, including encrypted data transmission (TLS), row-level security policies on our database, authenticated API access, and regular security reviews.
10. Contact
For privacy-related enquiries or to exercise your data rights:
RenDeals Technologies Ltd.
Email: privacy@rendeals.com
If you believe your data protection rights have not been addressed, you have the right to lodge a complaint with your local data protection supervisory authority.