Privacy Policy
This site sets no cookies and runs no analytics. The only personal data we collect is what you type into our forms.
This is a draft. It describes accurately what this website does today, but it has not been reviewed by a data protection lawyer. Have it checked before you rely on it.
This policy explains what personal data Expand Beyond Borders s.r.o. collects through this website, why, and what you can do about it. It is written under the EU General Data Protection Regulation (GDPR) and Slovak Act No. 18/2018 Coll. on Personal Data Protection.
Who is responsible
The controller of your personal data is:
- Expand Beyond Borders s.r.o., Martina Granca 3669/20, 841 02 Bratislava, Slovakia (registered seat)
- Company ID (IČO): 57 827 800
- Email: hello@expandbeyondborders.com
We have not appointed a Data Protection Officer, as we are not required to.
What we collect, and why
There are two places on this site where you give us personal data: the quote form on Get your price, and the free briefing form on EBB Intelligence. Both are listed below. Nothing else on the site collects anything about you.
| What | Why | Legal basis |
|---|---|---|
| Your email address | To send you the quote you asked for | Steps prior to a contract, Art. 6(1)(b) |
| Photographs, price lists and spreadsheets you upload | To identify the product and the factory that makes it | Steps prior to a contract, Art. 6(1)(b) |
| What you type in your own words about what you buy | To understand the enquiry before we price it | Steps prior to a contract, Art. 6(1)(b) |
| Your answers to the four questions the assistant asks: the product, the volume, who you buy from today, and your timing | To price the right goods at the right quantity, and to know how urgent it is | Steps prior to a contract, Art. 6(1)(b) |
| Destination market | To work out the correct duty and tariff | Steps prior to a contract, Art. 6(1)(b) |
| What | Why | Legal basis |
|---|---|---|
| Your email address | To send you the briefing you asked for | Steps prior to a contract, Art. 6(1)(b) |
| The product photograph or catalogue you upload, or the product you describe | To identify the goods the briefing is about | Steps prior to a contract, Art. 6(1)(b) |
| The market you are interested in, and whether you buy or manufacture | To read the right customs records for you | Steps prior to a contract, Art. 6(1)(b) |
Please do not upload photographs containing people, identity documents, or anything confidential that is not yours to share. We only need the product.
Server logs
Our hosting provider records standard technical information when a page is served, including IP address, browser type, and the page requested. This is used to keep the site running and secure, on the basis of our legitimate interest (Art. 6(1)(f)). We do not use it to identify anyone.
Cookies and tracking
This website sets no cookies. It uses no analytics, no advertising pixels and no tracking of any kind. That is why you were not asked to accept anything when you arrived.
Fonts and images are served from our own domain rather than from Google or a third-party image host, so simply reading a page sends your IP address to nobody except our hosting provider.
The one exception: video
One of our guides includes a YouTube video. The still image you see is hosted by us, and nothing is requested from YouTube until you click play. If you do click, YouTube receives your IP address and may set cookies under Google's privacy policy. We use the youtube-nocookie.com domain to limit this. Not clicking means no data reaches Google at all.
Deleting your account
If you have an account, you can delete it yourself: sign in, open Leaving at the bottom of your page, and type ERASE. It removes your sign-in, your company and delivery details, and the files you sent us, from our storage as well as from the database.
The enquiries themselves stay in our books. We are required to keep a record of what we quoted and to whom. What we do instead is take you off them: your name, your email address and the link to your account are removed, so the record can no longer be connected to you and appears on nobody's page. If you would rather we deleted them entirely and you have no open order, write to us and we will.
Who else sees your data
We keep this list short deliberately.
- Netlify. Hosts the site and receives quote form submissions, including your photographs. Netlify acts as our processor.
- OpenAI. The questions on the quote page are asked by a language model. What you type into that chat, and the product and destination you chose on the form, is sent to OpenAI to produce the next question. If you attach a photo or a document, the images among them are also sent, so the assistant can read what is on them and ask about what is missing. Your name and your email address are never sent there; they go only to Netlify and to us. OpenAI acts as our processor under its data processing agreement and does not use the content to train its models. Its servers are in the United States, and the transfer is covered by the Standard Contractual Clauses described below.
- Our email provider, Google Ireland Limited (Google Workspace), which carries our correspondence with you.
To answer your enquiry we contact manufacturers and logistics partners, some of them outside the EU. We share the product photograph and specification with them. We do not share your name, your email address, or your company. The factory does not learn who is asking.
Where a transfer outside the European Economic Area is necessary, it is made under the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.
We never sell your data, and we never pass it to advertisers.
How long we keep it
- Enquiries that do not become orders: 12 months, then deleted.
- Enquiries that become orders: for the life of the business relationship, then as long as Slovak accounting and tax law requires, which is generally 10 years for accounting records.
- Server logs: kept by our host for a short period, typically 30 days.
Your rights
Under the GDPR you may ask us to:
- Show you the personal data we hold about you (Art. 15)
- Correct it if it is wrong (Art. 16)
- Delete it (Art. 17)
- Restrict what we do with it (Art. 18)
- Send it to you or to someone else in a portable format (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
Email hello@expandbeyondborders.com and we will respond within one month. There is no charge.
If you think we have handled your data badly, you can complain to the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk. We would rather you told us first, but it is your right either way.
Publishing and confidentiality
We do not publish your enquiry anywhere. Your name, your company, what you buy, how much of it, the prices we quote you, and the photographs and documents you send stay between you and us.
None of it appears in a case study, a guide, a social post, a screenshot, or a client reference without your written permission first. If we ever want to use your story, we will ask, we will show you exactly what we intend to publish, and no is a complete answer. Permission covers only what you agreed to, and you can withdraw it at any time.
The one exception is the sourcing itself, described above: to get you a price we show the product specification and photograph to manufacturers and logistics partners. They never learn who is asking.
The assistant on the quote page
The questions on the quote page are asked by a language model. So is the summary it writes and the tariff code it suggests. Everything it produces is informational and it can be wrong, including about tariff codes, duty rates, and the figures it repeats back to you.
We do not rely on it ourselves. A person checks the classification and every number before any price reaches you. Please do not rely on it either, and do not treat what it writes as legal, tax, or customs advice, or as a price we have committed to. We accept no liability for a decision taken on the basis of what the assistant said. The binding version is always the quotation a person sends you, on the terms set out in our terms.
Automated decisions
We make no automated decisions about you and do not profile you. Quotes are prepared by people.
Children
This is a business service and is not directed at children. We do not knowingly collect data from anyone under 16.
Changes
If this policy changes materially, we will update the date at the top of this page. This version is dated 12 August 2026.