Privacy and data protection
How we handle your data
Last updated 24 August 2026. Applies to matchasupplyco.com and to email sent from it.
Matcha Supply Co. is a trading name of Allreasons SIA, not a separate company. If you received an email from this brand, the sender and the data controller is Allreasons SIA, Malu 30, LV-1058, Riga, Latvia, registration number 40203353946. An objection or erasure request sent to us is applied across every brand and domain Allreasons SIA operates, not just this one.
1. Who is the controller
- Allreasons SIA
- Malu 30, LV-1058, Riga, Latvia. Registration number 40203353946. VAT LV40203353946.
- Contact for all data protection matters
- sales@allreasons.eu
We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR.
2. What data we hold
For business to business outreach we hold professional contact data only. We do not seek, want, or knowingly process special category data, and we do not process data about consumers in this context.
| Category | Examples |
|---|---|
| Identification | First and last name, job title or role |
| Business contact | Work email address, work telephone number where publicly listed, business postal address |
| Employer | Company name, website, sector, approximate size, country |
| Interaction | Whether we emailed you and when, whether you replied, whether you asked us to stop |
| Content you send us | Anything you choose to include when you email us, such as a specification or a volume requirement |
We do not use open tracking pixels and we do not place cookies, analytics or any third party trackers on this website. This page and the rest of this site make no external network requests.
3. Where we got your details
We did not receive your details from you. We obtained them from one or more of the following:
- Your employer's public website, including a published team, contact or procurement page
- Publicly accessible business registers and trade directories
- Exhibitor and attendee lists published by trade fairs and industry events
- Professional networking platforms where your role is publicly displayed
- Licensed business to business contact data providers who represent to us that they collected the data lawfully
If you ask us which of these applies to you specifically, we will tell you. That is your right under Article 14(2)(f) GDPR and we will answer it properly.
4. Why we process it, and on what legal basis
We process your professional contact data to tell you about ingredient supply, production and private label services that we believe are relevant to your role. Our legal basis is legitimate interests under Article 6(1)(f) GDPR: our interest in developing business to business commercial relationships, balanced against your rights and freedoms.
We consider the impact on you to be limited, because we contact you in your professional capacity at a work address about a subject within your job responsibilities, we send low volumes, and we stop immediately on request.
On national marketing rules. The GDPR legal basis above is only part of the picture. National implementations of the ePrivacy Directive impose their own rules on unsolicited commercial email, and in some countries, including Germany and Austria, those rules require prior consent even for business to business contact. Where we have identified that a market requires prior consent, our approach in that market is not to send unsolicited commercial email. If you believe you received email from us in breach of your national rules, tell us at sales@allreasons.eu and we will suppress you and review how you entered our list.
5. How long we keep it
- No engagement: deleted within 12 months of the last message we sent you.
- You replied or we started a commercial conversation: retained for the duration of the relationship and 24 months after the last contact.
- You objected or unsubscribed: we keep the minimum needed to honour it, normally your email address on a suppression list, indefinitely. We have to keep it in order to keep not contacting you. This is itself a legitimate interest and you cannot be re-added by a later data purchase.
- Transaction records: retained five years in line with our document retention policy and Latvian accounting requirements.
6. Who else sees it
We do not sell your data and we do not share it for anyone else's marketing. It is disclosed only to:
- Our email sending and sequencing provider, and our email hosting providers, acting as processors under Article 28 GDPR
- Our CRM and business systems providers, acting as processors
- Professional advisers or authorities where we are legally required to disclose
Some of these providers process data outside the European Economic Area. Where they do, transfers rely on European Commission adequacy decisions or on Standard Contractual Clauses. You can ask us for details of the safeguards for a specific provider.
We take no automated decisions about you within the meaning of Article 22 GDPR, and we do not profile you beyond identifying the sector and role that make our products potentially relevant.
7. Your rights
You can exercise any of these free of charge by emailing sales@allreasons.eu. We answer within one month. You do not need to explain why, use particular wording, or prove a legal basis.
- Object to processing (Article 21). For direct marketing this is absolute. We stop, with no balancing test and no argument.
- Erasure (Article 17). We delete your record, keeping only the suppression entry described in section 5.
- Access (Article 15). A copy of what we hold and where we got it.
- Rectification (Article 16). Correction of anything inaccurate.
- Restriction (Article 18) and portability (Article 20), where applicable.
The fastest route: reply to any email you received from us with the word unsubscribe, or use the unsubscribe link in it. That suppresses you across every domain and brand Allreasons SIA operates, not only the one that contacted you. You do not need to find this page or write a formal request.
8. Complaints
If you are unhappy with how we handled your data, please raise it with us first at sales@allreasons.eu, because we would rather fix it. You also have the right to complain to a supervisory authority. Ours is the Data State Inspectorate of Latvia (Datu valsts inspekcija), Elijas iela 17, Riga, LV-1050, Latvia. You may instead complain to the authority in your own country of residence or work.
9. Changes
If we change how we handle personal data, we update this page and change the date at the top. We do not apply a materially different approach to data we already hold without a fresh look at the legal basis.