International Commodity Trading

Legal

Privacy Policy

What we collect, why we are allowed to, how long we keep it, and what you can ask us to do about it.

Last updated: 16 September 2026 · Effective: 16 September 2026

Who is responsible

The data controller is SARL New Global Industrial Resources, trading as NAGTAR.

Controller
SARL New Global Industrial Resources
Registered office
Algeria
Privacy contact
info@nagtar.com

We are established outside the European Union but we address buyers in the European market, so we apply the GDPR standard to everyone who contacts us, regardless of where they are.

What we collect

We only hold what you send us. There is no hidden collection.

  • Buyer inquiries: first and last name, company, job title, business email, country, product, volume, destination port, delivery window, Incoterm, technical specification, current origin, your message and any file you attach.
  • Producer enquiries: company, contact name, email, product, production location, capacity, export experience, certifications, your message and any file you attach.
  • Newsletter: your email address only.
  • Cement catalogue requests: full name, company, business email and country, so we can send the technical PDF and keep a record of who received it.
  • Technical data: server logs including IP address and browser type, kept by our host for security and troubleshooting. Your IP address is also used for a short-lived counter that limits how often a form can be submitted.
  • Analytics and error reports: pages viewed and technical error details, collected only if you accept analytics cookies.

We do not ask for and do not want special category data. Please do not include personal details in free-text fields beyond what is needed to discuss a transaction.

How long we keep it

  • Inquiries that do not lead to a transaction: 24 months from the last exchange, then deleted.
  • Catalogue requests: 24 months from the send, then deleted.
  • Inquiries that lead to a transaction: for the duration of the commercial relationship, then as required by applicable accounting and commercial record-keeping rules.
  • Newsletter subscribers: until you unsubscribe, plus a suppression record so we do not contact you again by mistake.
  • Server logs: up to 30 days at our host.
  • Rate limiting counters: up to one hour.
  • Analytics data: up to 12 months.

Who else processes it

We use the following service providers. Each acts on our instructions under a data processing agreement, and none of them is allowed to use your data for their own purposes.

Netlify, Inc.

Website hosting, content delivery and server logs.

United States, with edge delivery in the European Union.

Resend (Plus Five Five, Inc.)

Delivery of transactional email: inquiry notifications, acknowledgements and newsletter messages.

United States.

Google Ireland Limited (Google Workspace)

Business mailboxes used to receive and answer your messages.

European Union.

PostHog, Inc. (EU Cloud)

Website analytics and error monitoring, loaded only after you accept analytics cookies.

European Union (Frankfurt, Germany).

Cloudflare, Inc.

Turnstile anti-abuse verification on forms. Turnstile does not set advertising cookies.

Global network, including the European Union.

Upstash, Inc.

Short-lived request counters used to rate limit form submissions and prevent abuse.

European Union.

We do not sell personal data and we do not share it with advertising networks.

Transfers outside the EU

Some of our providers are established in the United States, and we are established in Algeria, which is not covered by a European Commission adequacy decision. Where data leaves the European Economic Area, the transfer relies on the European Commission Standard Contractual Clauses included in our agreements with those providers.

Our analytics run on PostHog's European Union cloud in Frankfurt, and our business mailboxes are on Google Workspace in the European Union, specifically so that the bulk of the data stays in Europe.

Your rights

You can ask us to act on any of the following. We answer within one month, and we will not charge you for it.

  • Access: a copy of the personal data we hold about you.
  • Rectification: correction of anything inaccurate.
  • Erasure: deletion, where we have no overriding obligation to keep it.
  • Restriction: pausing our use of your data while a dispute is resolved.
  • Portability: receiving the data you gave us in a machine-readable format.
  • Objection: objecting to processing based on our legitimate interests.
  • Withdrawal of consent: for analytics and the newsletter, at any time.

Write to info@nagtar.com. We may ask you to confirm your identity before acting, to avoid disclosing your data to someone else.

If you are in the European Union and you believe we have not handled your request properly, you can lodge a complaint with the supervisory authority of the country where you live or work.

Security

The site is served over HTTPS only, form submissions are rate limited and screened for automated abuse, and access to the inbox that receives inquiries is restricted to the people who need it. To report a vulnerability, see our security contact.

Changes to this policy

We update this page when our processing changes. The last updated date at the top always reflects the current version. Material changes affecting how we use data you already sent us will be communicated to you directly.

See also our cookie policy, legal notice and terms of use.