Privacy Policy

This Privacy Policy explains how Grandhosting Ltd(“Nokk”, “we”, “us”) collects, uses and protects information when you use the Nokk mobile app and website. Nokk is a network for verified local businesses to source urgently-needed supplies from other businesses nearby. We are committed to handling your data in line with the EU General Data Protection Regulation (GDPR).

Who we are

The data controller is Grandhosting Ltd, a private company registered in Cyprus under registration number HE 488909, of Lordou Vyronos 36, 1096 Nicosia, Cyprus, VAT CY60338088T. For any privacy question or to exercise your rights, contact us using the details at the end of this page.

What we collect

• Business & account details — business name, category, area and address, VAT number, contact person, email and password.
• Content you create — requests, offers, chat messages, photos and ratings.
• Location — the coordinates you set for your business and requests, used to match you with nearby businesses.
• Technical data — device identifiers for push notifications, and basic usage/diagnostic data to keep the service working.

How we use your data

• To operate the service — post requests, deliver offers to nearby businesses, enable chat and coordination.
• To verify businesses against the EU VAT registry (VIES) so the network stays trustworthy.
• To send you relevant notifications (nearby requests, offers, deal updates).
• To maintain security, prevent abuse and comply with legal obligations.

Legal basis

We process your data to perform our contract with you (providing the service), on the basis of our legitimate interests (security, improving the service, network trust), and where required to comply with a legal obligation.

Sharing

Your business name and offers are shown to other verified businesses as part of the service. Your exact address is only revealed once you accept an offer. We use trusted service providers (e.g. hosting and infrastructure at Supabase, push notifications via Expo, VAT checks via the EU VIES registry) who process data on our behalf. We do not sell your data.

Storage & security

Data is stored on EU-based infrastructure with access controls, encryption in transit, and strict per-business data isolation. Chat photos are private and accessible only to the two businesses involved in a conversation.

Your rights

Under the GDPR you have the right to access, correct, delete, restrict or port your data, and to object to processing. You may also lodge a complaint with a supervisory authority — either the Office of the Commissioner for Personal Data Protection in Cyprus, where Nokk is established, or the authority in your own country (in Greece, the Hellenic Data Protection Authority). To exercise any right, contact us.

Retention

We keep your data for as long as your account is active and as needed to provide the service, then delete or anonymise it, unless a longer period is required by law.

Children

Nokk is a service for businesses and is not intended for anyone under 18.

Changes

We may update this policy; material changes will be notified in the app or by email. Continued use after an update constitutes acceptance of the revised policy.