Privacy Policy

What we collect

• Account details — name, email, mobile number, country and delivery region.
• Order data — what you ordered, delivery addresses, payment method and status. We never store full card numbers; card payments are handled entirely by our payment provider on their own hosted page.
• Seller data — company details, tax number and uploaded documents, held in a private bucket and reachable only through short-lived signed links.
• Usage data — pages viewed, searches run and products opened, but only after you have recorded a cookie choice that permits it.

What we do with it

To operate your account, fulfil and track orders, verify payments, prevent fraud, answer your questions, and decide what to stock next. Aggregate search data — particularly searches that returned nothing — tells us what buyers want that we do not yet carry.

What we never do

We do not sell your personal data. We do not share your identity or contact details with the manufacturer fulfilling your order: a seller sees a destination city and region for shipping, never your name, phone number or full address.

Who else sees it

Only the processors we need to run the service: our payment provider, our email provider, our image host, our error-monitoring service, and our hosting provider. Each is bound by contract to process data only on our instructions.

How long we keep it

Order and financial records are retained for seven years, as tax law requires. Audit logs are retained for 24 months. Account data is retained while your account is open, and deleted or anonymised on request unless we are legally required to keep it.

Your rights

You can access, correct, export or delete your personal data. Requests go through Account → Cookies & privacy, or by email, and we respond within 30 days.

Security

Data is encrypted in transit and at rest. Access is row-level restricted in the database itself, so a request that should return nothing returns nothing even if it bypasses the application. Every staff view of a seller document, payment proof or unmasked contact detail is logged with the actor and timestamp.

Contact

Questions about this policy: privacy@tradezexa.com.