Privacy Policy

This Privacy Policy explains how GlobalCommodityX ("we", "us", "our") collects, uses, shares, and protects information when you use the GlobalCommodityX platform, website, and related services (the "Platform"). The Platform is a business-to-business marketplace, and most information we process relates to businesses; where that information identifies an individual (such as a named contact person), this policy applies to it as personal data.

Information you provide to us:

• Account details — name, work email address, password, role (buyer, supplier, or trading agency), and company name.
• Business profile — company registration details, addresses, product and service listings, certifications, and logos.
• KYC documents — business registration, tax identifiers, and identity documents submitted for verification.
• Transaction content — RFQs, bids, auction activity, orders, invoices, disputes, and messages exchanged through the Platform.
• Billing information — subscription plan, billing contact, and payment records. Card details are processed by our payment providers; we do not store full card numbers.
• Support communications — messages you send to our support and sales teams.

Information collected automatically:

• Usage and device data — IP address, browser type, pages viewed, actions taken, and timestamps.
• Cookies and similar technologies — used to keep you signed in, remember preferences, and secure the Platform. Essential cookies are required for the Platform to function.

• to provide and operate the Platform — accounts, RFQs, bids, auctions, orders, invoices, and notifications;
• to verify identities and businesses through KYC checks and to display verification status;
• to process subscriptions and transaction fees, and to send billing documents;
• to display business profiles, listings, and bids to relevant counterparties (this is the core function of a marketplace);
• to provide market intelligence and analytics, in aggregated or de-identified form where practical;
• to secure the Platform, prevent fraud and abuse, and enforce our Terms of Service;
• to comply with legal obligations, including trade-compliance, tax, and accounting requirements; and
• to communicate with you about the Platform, including service updates and, with your consent where required, marketing messages you can opt out of at any time.

We do not sell personal data. We share information only:

• With other Platform users — your business profile, listings, RFQs, and bids are visible to counterparties as needed to trade; contact details are revealed according to Platform rules and your plan.
• With service providers — hosting and database infrastructure, email delivery, payment processing, and analytics providers who process data on our behalf under contractual safeguards.
• With authorized agents — where a trading agency acts on your behalf with your authorization, it can access the data needed for that role.
• For legal reasons — when required by law, regulation, legal process, or to protect the rights, safety, and security of the Platform, our users, or the public.
• In business transfers — as part of a merger, acquisition, or sale of assets, subject to this policy's protections.

Our infrastructure providers may store and process data in countries other than your own. Where data crosses borders, we take reasonable steps to ensure it receives a comparable level of protection, including contractual commitments with our providers.

We retain account and transaction data for as long as your account is active and afterwards as needed to meet legal, tax, accounting, and dispute-resolution obligations. KYC documents are retained for the period required by applicable verification and record-keeping laws. When data is no longer needed, we delete it or de-identify it.

We protect data with measures including encryption in transit (HTTPS), access controls, role-based permissions, and audit logging. No system is completely secure; you are responsible for keeping your credentials confidential, and you should notify us immediately at the address below if you suspect unauthorized access to your account.

Depending on your jurisdiction, you may have rights to access, correct, update, export, or delete personal data we hold about you, and to object to or restrict certain processing. You can exercise most of these directly in your account settings, or by contacting us at the address below. We will respond within the timeframe required by applicable law. Note that we may need to retain certain records (for example, invoices and KYC files) even after an account is deleted, where the law requires it.

The Platform is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through the Platform before the changes take effect, and we will update the effective date above.

For privacy questions or to exercise your rights, contact support@globalcommodityx.com.