DN
DenimNotes
LEGAL DOCUMENT

Data Sharing & Processing Policy

What is shared when buyers and suppliers collaborate — and what always stays private.

Effective: August 2026 Last updated: August 2026 Applies to: All DenimNotes users Contact: info@esipick.com
Plain English Summary

No data is shared until both parties explicitly accept a collaboration. Your price data is encrypted and never visible to your supplier — ever. You can revoke any collaboration at any time and access is removed immediately. We never sell your data to anyone.

What a Collaboration Is

01

A collaboration on DenimNotes is a connection between a buyer and a supplier (fabric mill) initiated by one party and accepted by the other through an explicit consent screen.

No data is shared between the two parties until both sides have reviewed and accepted the collaboration. Receiving an invite does not expose your data — accepting it does.

Each collaboration is isolated. Accepting a collaboration with one party does not give them — or anyone else — visibility into your other collaborations, your other buyers, or your other suppliers.

Important: You are always shown exactly what will be shared before you accept. If you decline, no data is exchanged and no record of the invite is visible to the other party.

What Is Shared

02

When a collaboration is active, the following data is visible to both parties within the shared workspace:

Data Type What It Includes Shared?
Company & contact details Name, company name, email address of the collaborating workspace ● Shared
Article & fabric specs Article number, composition, weight, colourways, and images sent or tagged to the collaboration ● Shared
Chat messages Messages exchanged within the shared collaboration workspace ● Shared
Documents & samples Files, sample requests, development updates, and PDFs shared within the collaboration ● Shared
Meeting notes Only notes explicitly marked as shared by the sender ● Shared if marked
Article selections Which articles the buyer has selected — visible to the supplier only ● Shared with supplier

What Is Never Shared

03

The following data is always private regardless of collaboration status. It cannot be shared, accessed, or viewed by the other party under any circumstances:

Data Type Why It Stays Private Status
Buyer price data Encrypted at workspace level. Never transmitted to the supplier's workspace under any condition ● Never shared
Private notes Notes not explicitly marked as shared remain inside your workspace only ● Never shared
Internal team conversations Messages between your own team members are never visible to any collaborating party ● Never shared
Other collaborations Each collaboration is isolated. No party can see who else you are working with ● Never shared
Payment & billing information Financial details are never stored on DenimNotes and are not part of any collaboration ● Never shared
Your price is always yours. Buyer price data is encrypted at the workspace level. It is never visible to your supplier, to DenimNotes staff, or to any third party. This is a hard technical guarantee, not a policy promise.

Who Can See Shared Data

04

Within a collaboration, shared data is visible to the team members that each party has added to that specific collaboration. You can see exactly who has access before you accept — the consent screen shows the names of all team members with access on the other side.

You can manage who on your side has access to any collaboration at any time from Settings → Collaborators. Removing a team member from a collaboration removes their access immediately.

DenimNotes does not access your collaboration data except where required to deliver the service (e.g. syncing messages between devices) or where required by law. We do not read, analyse, or use your collaboration content for any commercial purpose.

Retention & Control

05

For Buyers

When a buyer connects with a supplier, the supplier can see which of your articles they selected and any notes you choose to share with them. Shared data remains visible to both parties for as long as the collaboration is active.

You can revoke a collaboration at any time by going to Settings → Collaborators and turning off the collaboration. The supplier loses access immediately upon revocation.

For Suppliers

When a buyer connects with you, you can see which of your articles they selected and any notes they choose to share with you. Shared data remains visible for as long as the collaboration is active.

You can revoke a collaboration at any time by going to the Buyer Tab and turning off the collaboration. The buyer loses access immediately upon revocation.

What Happens to Your Data After Revocation

  • The other party loses access to shared data immediately
  • Your own workspace data is never deleted when a collaboration ends — only the shared access is removed
  • Messages and files you sent within the collaboration remain in your own workspace record
  • The collaboration history is retained in your workspace for your own reference unless you explicitly request deletion
You are always in control. No collaboration is permanent. You can revoke access at any time, without notice, without consequence to your own data.

Data Processing Basis

06

DenimNotes processes your data on the following legal bases under GDPR:

Contractual necessity Processing required to deliver the DenimNotes service you signed up for — storing your captures, syncing your workspace, delivering messages within collaborations.
Explicit consent Processing that begins only after you actively accept — collaboration data sharing, marketing communications. You may withdraw consent at any time.
Legitimate interests Processing required for security, fraud prevention, and service improvement — balanced against your privacy interests and never used for targeted advertising.
Legal obligation Where we are required by law to retain or disclose data, we will inform you unless prohibited from doing so.

We do not use your data for advertising. We do not sell your data to third parties. We do not share your data with brands, mills, or any commercial entity outside the collaboration you have accepted.

Your Rights

07

Under GDPR and applicable data protection law, you have the following rights:

  • Right to know — what data we hold about you and how it is used
  • Right to access — a copy of your personal data, provided within 30 days of request
  • Right to correction — update inaccurate or incomplete data in your profile
  • Right to deletion — request deletion of your account and associated data
  • Right to portability — receive your data in a structured, machine-readable format
  • Right to object — object to processing based on legitimate interests
  • Right to withdraw consent — withdraw collaboration consent or marketing consent at any time without affecting your account
  • Right to decline — decline any collaboration invite without consequence to your account or data

To exercise any of these rights, contact us at info@esipick.com. We will respond within 30 days.

Contact

08

If you have questions about this policy, how your data is shared, or how to exercise your rights, contact us at:

Emailinfo@esipick.com
Built byEsipick · Lahore, Pakistan

If you are an EU resident and believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority.