Privacy, in plain language.

01Who this notice is for

This notice covers the TopKli website and requests for quotation. TopKli is the brand owned by Itzik Burla. The legal operator and its contact details will appear in the business-details section below before live collection begins.

This version is a review draft. The current preview accepts sample details only. New preview requests are kept in the test lead store for up to seven days and are not emailed to the team or forwarded to a CRM.

02Information you provide

The RFQ form asks for your company, contact name, email, requested materials, quantities, destination and timing. You may also provide your role, phone number, destination port, preferred language and a message with relevant specifications.

Please share only what is necessary for the enquiry. Do not include passwords, payment information, identity documents or sensitive personal information. If drawings need a separate sharing channel, mention that in the request.

• Project information: products, grades, forms, dimensions, quantities and delivery requirements.
• Business contact information: company, name, email and optional role or phone.
• Service information: the submitting page, submission time and reference, plus IP address and short-lived request counters used to prevent abuse.

03How the information is used

For the live service, the proposed uses are to clarify your requirements, prepare and discuss a quotation, coordinate the enquiry and keep the relevant correspondence. Security information supports spam prevention, request limits and troubleshooting.

The current form does not enroll you in marketing or send information to a CRM. Any future marketing or optional tracking will need a separately defined process and an updated notice.

04Legal grounds for processing

Where applicable data-protection law requires a legal basis, that basis must match the purpose and the relationship with the person contacting us. Proposed grounds include steps requested before a contract where the individual is a party, legitimate interests in handling business-contact enquiries and protecting the service, and compliance with applicable legal obligations.

The final operator must confirm this assessment, including any legitimate-interest balancing, before the live notice takes effect. Sending an RFQ is not blanket consent to unrelated marketing.

05Service providers and access

The preview uses Cloudflare for website hosting, security and the test lead store. Access to enquiry information is intended for the authorized people handling the request and the providers needed to operate the service.

Transactional email is planned through Resend but is not active in this preview. The final business inbox provider, access list and any additional processors will be confirmed before launch. CRM forwarding and automatic customer emails are currently disabled.

06Processing across borders

Hosting and communication providers may process information outside the country where a visitor is located. The final notice will identify the relevant processing locations and applicable transfer arrangements, including how to obtain information about safeguards where required.

No specific data-residency or transfer-safeguard claim is made in this draft. Those details depend on the final operator and service-provider arrangements.

07How long information is kept

New preview RFQs have a seven-day expiry in the test lead store. Anti-abuse request counters expire after approximately one hour. These periods describe those records, not all provider security logs or future mailbox copies.

For live enquiries, the retention period is still to be added below. The final schedule should distinguish open enquiries, completed customer/order records, correspondence and security records. Information should be deleted or anonymized when it is no longer needed, subject to applicable retention duties.

08Your rights and choices

Depending on the law that applies, you may request access, correction, deletion, restriction or portability of your personal information, object to certain processing, or withdraw consent where processing relies on consent. You may also have the right to complain to a relevant data-protection authority.

The privacy contact will be added in the business-details section before live collection. A reasonable identity check may be needed to protect your information. Requests will be assessed under applicable law, including any limits or retention duties.

09Security and browser storage

The current service includes encrypted web connections, request validation, anti-abuse controls and restricted service configuration. No online transmission or storage system can be guaranteed completely secure.

The site stores functional preferences, such as your theme and quote basket, in your browser. The browser-storage page explains these features and how to clear them.

10Scope and updates

The website is intended for professional business enquiries, not children. External websites have their own privacy practices.

This notice will be updated when the live service, providers or relevant practices change. The effective date will be shown below when the final notice is approved.