Living draft — pending independent legal review. This notice supplements our Privacy Policy for Sourcing in Bangladesh (sourcinginbangladesh.com). Contact: support@sourcinginbangladesh.com.
1. Roles
For account, billing, support, and platform security data, we act as a data controller (or equivalent). When you upload documents or message another company, you remain responsible for having a lawful basis to share that business information.
2. Categories of data subjects
Buyers, suppliers, company members, visitors browsing public catalogues, and support contacts.
3. Purposes and retention (summary)
• Identity & account security — while account active + up to 24 months after closure for abuse prevention (unless longer required by law).
• KYB / verification documents — while verification is relevant + statutory periods.
• Marketplace records (RFQs, quotes, reviews, credit ledger) — active use + dispute window (typically 36 months).
• Server logs — short rolling window for security (typically 90 days unless investigating an incident).
4. Processors
We use reputable cloud hosting, email delivery, object storage, and (where enabled) search / analytics processors bound by data-processing terms. A current list is available on request via support@sourcinginbangladesh.com.
5. International transfers
Hosting may be outside Bangladesh / the EEA. Safeguards may include standard contractual clauses, vendor certifications, and encryption in transit.
6. Automated decisions
Matching and ranking may use algorithms to suggest suppliers. These suggestions do not produce solely automated legal effects; humans remain free to accept or reject matches. Soft quotas may temporarily limit contact reveals.
7. Your rights (EEA/UK and similar)
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent where processing is consent-based. We will respond within one month where those laws apply. Identity verification may be required.
8. Bangladesh context
We process business contact data to operate a commercial marketplace. Trade licences and identity documents you upload are used for verification and fraud reduction. Contact support@sourcinginbangladesh.com for local data requests.
9. Children
Not directed at children; business use only.
10. Breach notification
We will notify affected users and regulators as required by applicable law if a personal-data breach poses risk.
11. DPO / contact
Privacy and data-protection requests: support@sourcinginbangladesh.com. Subject line: “Data protection request”.
12. Relationship to other policies
If this notice conflicts with the Privacy Policy on a narrow operational detail, the Privacy Policy controls for collection practices; this notice elaborates roles, transfers, and rights for B2B compliance readers.