Privacy Policy

Effective 20 June 2026

Shorend Limited ("Shorend", "we") respects your privacy. This policy explains what personal data we collect when you use the Shorend platform, how we use it, and the rights you have.

1. Data we collect

Account data: name, email, password hash, role (buyer or supplier), language and country.
Business profile: company name, logo, address, products, photos, and any KYC/verification documents you upload.
Communications: messages exchanged through our inbox, support tickets, and product inquiries.
Billing data: subscription plan, billing status, and a Stripe customer identifier. Card details are handled directly by Stripe and never stored on our servers.
Usage data: pages viewed, product events (views, clicks, contact requests), device and browser metadata, IP address.

2. How we use data

To provide and operate the platform (matching, messaging, listings, analytics for sellers).
To process subscriptions and prevent fraud.
To send transactional emails (sign-in, billing, inbox notifications) and, with consent, product updates.
To enforce our Terms and comply with legal obligations.

3. Legal bases (GDPR)

We rely on the performance of our contract with you (account, subscriptions, messaging), our legitimate interests (security, fraud prevention, product improvement), your consent (marketing emails, optional cookies), and legal obligations (tax and accounting).

4. Sharing

We share personal data only with:

Service providers that help us operate the platform: our database & auth backend (EU/US), Stripe (payments, global), Cloudflare (hosting & CDN), our transactional email provider, and AI gateway providers used for translation and search features.
Other platform users only as needed for the marketplace to function (e.g. a buyer's name and company are shown to the supplier they contact).
Authorities when legally required.

We do not sell your personal data.

5. International transfers

Our processors operate in several regions. Where data leaves your jurisdiction we rely on appropriate safeguards such as Standard Contractual Clauses.

6. Retention

Account and profile data: kept while your account is active and for up to 24 months after closure for legal, tax and dispute-handling purposes.
Messages and product events: up to 36 months.
KYC documents: kept as required by applicable anti-money-laundering rules.
Billing records: kept for the period required by tax law (typically 7 years).

7. Security

Data is encrypted in transit (TLS) and at rest. Access is restricted by Row-Level Security policies and role-based permissions. We do not store raw payment-card data.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, object to or restrict processing of your personal data, and to withdraw consent. To exercise these rights email privacy@shorend.com. You may also lodge a complaint with your local data protection authority.

9. Children

The platform is for business use and not directed at children under 18.

10. Changes

We may update this policy. Material changes will be notified by email or in-app at least 14 days before they take effect.

11. Contact

Shorend Limited · Hong Kong · privacy@shorend.com

This page is maintained by Shorend Limited and describes our current practices. It is not a substitute for legal advice for your situation.