Privacy Policy

Who operates Sourcely

Sourcely is operated by Onstep Shoe Trading Co. LLC, Office C-64, Ibrahim Hussain Ahli 101, Al Muteena, Dubai, United Arab Emirates. VAT number 104337036800003.

Onstep Shoe Trading Co. LLC acts as data controller for personal data processed through the Sourcely service. For privacy enquiries, access, correction or deletion requests, contact l.immacolato@onsteptrading.com.

Sourcely is currently offered as a business-to-business pilot. The initial pilot targets business customers in Italy and the European Union.

What information we process

Account information: name, work email address, company name, role within the workspace, and authentication data required to sign in.

Workspace and procurement content: products, suppliers, supplier contact details, requests for quotation, quotations and offers, prices, documents and attachments, emails you connect or forward, notes and comparison data that you or your colleagues enter or upload.

Operational records: security, audit and activity records generated by the platform, such as who performed an action inside a workspace and when.

Technical information strictly needed to operate and secure the service, such as request and error information.

Why we process it

To provide the Sourcely workspace and the functionality you request, including sourcing, quotation collection, comparison and supplier communication.

To keep the service secure, prevent abuse, maintain workspace separation between customers, and investigate incidents.

To communicate with you about your account, invitations you send or receive, and support requests.

To meet legal obligations that apply to the operator.

Supplier contact details

Business customers may enter supplier contact details into their own workspace and may send invitations to suppliers so that suppliers can respond through a secure link.

The business customer decides which suppliers are contacted and what is sent. Sourcely processes those details on the customer's behalf in order to deliver the requested functionality.

Cookies and local storage

Sourcely does not use analytics, advertising pixels or marketing trackers.

The application stores only strictly functional information in your browser: authentication and session data needed to keep you signed in, information required for application security and correct operation, and interface preferences such as whether the navigation panel is expanded.

Service providers and AI processing

Sourcely relies on infrastructure and service providers to host the application, store data, and deliver transactional email such as supplier invitations and notifications.

Sourcely may use AI services to process content when necessary to provide functionality you request, including document extraction, drafting clarification messages, generating explanations, and discovery or research assistance.

We do not use customer content to train public or general-purpose AI models.

External research or search providers may be used where and when the relevant Sourcely research functionality is active.

You remain responsible for reviewing AI-assisted output and for the procurement decisions you take.

Ownership of your data

Business customers retain ownership of the procurement and business data they upload to Sourcely. Sourcely processes that data in order to provide the service.

Genuinely aggregated or anonymised information may be used to improve Sourcely, only where it no longer identifies the customer, a user, a supplier or any individual.

How long we keep data

Data is retained while reasonably necessary to provide and operate the Sourcely service and your workspace.

Certain security, audit, transactional or compliance records may be retained where reasonably necessary or legally required.

You may request access, correction or deletion of data by contacting l.immacolato@onsteptrading.com.

Deletion and data requests have a target handling period of 30 days, subject to applicable legal obligations and legitimate retention requirements.

Your rights

Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing of your personal data, and to receive a copy of certain data.

Requests are handled manually. Write to l.immacolato@onsteptrading.com from the address associated with your account and describe what you are asking for. We may need to verify your identity or, for workspace data, ask the administrator of the relevant business customer to confirm the request.

Changes to this policy

This policy may be updated as Sourcely develops. The date below indicates the current version.

Last updated: 8 September 2026.