Legal
Privacy Policy
What information Serendib Trade collects, how it is used, who it is shared with, and the choices available to you.
What changed: Initial published version.
1. Introduction
This Privacy Policy explains how Serendib Trade handles information about buyers, exporters and visitors to the Platform.
2. Information we collect
Account information
Name, email address, password credentials handled by our authentication provider, phone number where supplied, language and notification preferences.
Business information
Company name, country, business type, addresses, sourcing interests or product categories, and other details you add to your profile or storefront.
Seller verification information
Business registration and export-related details submitted for verification review.
Documents uploaded for verification
Files you upload as evidence for verification are stored in our hosted storage and are accessible to authorised staff reviewing your application.
Buyer inquiry information
Inquiries, requests for quotation, sample requests and the business details attached to them, which are shared with the exporter you contact.
Communications
Messages exchanged on the Platform, and emails we send you (including delivery status records used to operate our email queue).
Technical information
IP address, browser user agent, device and session information, sign-in events and security signals used to protect accounts.
Cookies
See the Cookie Policy for the cookies used and the choices available.
3. AI features and processing
The Platform offers AI assistance (for example sourcing help, drafting and translation). Where you use these features, the content of your request and relevant marketplace context is sent to the AI provider that powers the feature in order to generate a response, and conversation threads are stored in your account so you can return to them.
4. How we use information
To operate accounts and authentication; to publish storefronts and listings; to route inquiries between buyers and exporters; to run verification; to send transactional and notification emails; to secure the Platform and investigate abuse; to produce aggregate analytics; and to comply with legal obligations.
5. How we share information
With other Platform users where the marketplace requires it (an exporter sees the inquiry you send them; a buyer sees your published storefront). With service providers that host and operate the Platform on our behalf. With authorities where required by law.
6. Buyer and seller marketplace interactions
Information you choose to share with a counterparty during a sourcing conversation is handled by that counterparty under their own practices. Only share what you need to share.
7. Service providers
We use third-party providers for hosting and database services, email delivery and AI processing. We do not sell personal information.
8. Data security
Access is controlled through authentication, role-based permissions and database row-level security. Administrative access requires multi-factor authentication. No system can be guaranteed to be completely secure.
9. Data retention
Account and marketplace records are retained while the account is active and afterwards where needed to resolve disputes, maintain audit records or comply with legal obligations. Specific retention periods are [to be confirmed by legal counsel].
10. International transfers
The Platform serves buyers outside Sri Lanka, so information may be processed in other countries by our hosting and service providers.
11. Your rights
You may access and update most information from your account settings, and may request a copy or deletion of your information by contacting us. Applicable statutory rights depend on your jurisdiction.
12. Account deletion
You may request deletion of your account. Some records — including policy acceptance records and audit entries — are retained where required for legal or accountability reasons.
13. Children's privacy
The Platform is for business use and is not directed at children. We do not knowingly collect information from anyone under 18.
14. Changes to this Privacy Policy
New versions are published here with a version number and effective date. Where a change is material, you will be asked to acknowledge the new version.
15. Contact
Use the contact channels published on the Platform for privacy questions or requests.
This policy describes the platform as currently built. It requires review by qualified legal counsel before being relied upon, and does not itself constitute a claim of compliance with any specific law.