Privacy Policy

Last updated 7 September 2026

1. Who we are

SarTrade (Singapore) Pte. Ltd., UEN 202435090N, is the organisation responsible for the personal data described in this policy.

2. What we collect

• Contact details you give us in an enquiry, quote request or newsletter sign-up.
• Company details and business licence documents from sellers.
• Technical data: IP address, browser type and pages visited.

Because the public site has no buyer accounts, we hold no browsing history or saved lists tied to an individual visitor.

3. Why we collect it

To respond to your enquiries and quote requests, to verify seller companies, to operate and secure the site, and — only where you have said yes — to send you marketing.

4. Consent, and withdrawing it

We ask for consent before collecting your data and we never pre-tick a consent box. Consent to be contacted about an enquiry is asked for separately from consent to marketing. You can withdraw either at any time by emailing dpo@sartrade.com. We act on a withdrawal within 30 days and confirm when it is done.

5. Your rights: access and correction

You can ask what personal data we hold about you and how it has been used in the past year, and you can ask us to correct anything inaccurate. We acknowledge requests within 3 working days and respond within 30 days. Use the contact form and choose the data request option.

6. How long we keep it

Enquiry records are kept for 24 months after the last contact. Seller account data is kept while the account is active and for 12 months after deactivation. Consent records are kept for as long as we rely on that consent, and for 3 years afterwards as evidence. These windows are configurable by SarTrade.

7. Transfers outside Singapore

Where data is processed outside Singapore — for example by our email delivery provider — we require a comparable standard of protection by contract, as the PDPA's Transfer Limitation Obligation requires.

8. Keeping it safe

Data is encrypted in transit and at rest, access is restricted by role, and every significant action is logged. If a breach occurs that is likely to cause significant harm or affects 500 or more people, we notify the PDPC within 3 calendar days and tell affected individuals.

9. Cookies

See the Cookie Policy.

10. Data Protection Officer

Email dpo@sartrade.com. You may also complain to the Personal Data Protection Commission of Singapore.

---

Prototype content. Final wording is drafted by SarTrade's legal adviser and maintained through the admin content manager.