Privacy Policy

Last updated: [DATE]

This Privacy Policy explains how GLOBAL TRADE ENGINE collects, uses, retains, and protects personal data processed through its website, orders, services, and communications with customers and visitors.

Where Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), applies to a particular processing activity, that processing is carried out in accordance with the principles and requirements of the GDPR.

1. Data Controller

The data controller is:

Frahane Store
[Legal form]
[Registered office or business address]
[Phone number]
[Contact email]
[Registration / legal identification number, where applicable]

For questions regarding privacy or the exercise of your rights, please contact us at: [PERSONAL DATA CONTACT EMAIL].

2. Personal Data We May Collect

Depending on how you use the website, we may process the following categories of personal data:

Identity and contact data: first name, last name, email address, telephone number, and information required for delivery or billing.
Order data: products or services ordered, quantities, amount, currency, delivery address, billing information, order status, and information required to fulfil the order.
Payment-related data: information required to process, monitor, or confirm a transaction, such as a transaction identifier, payment method, payment status, and, where provided by the relevant payment provider, certain payment metadata. Banking credentials or other sensitive payment data may be processed directly by the applicable payment provider depending on the payment method and its own privacy policy.
Commercial enquiry data: information provided through quotation requests, B2B enquiries, or import-export enquiries, including company information, contact details, volumes, origin, destination, requested commercial terms, and documents submitted by the requester.
Support and communication data: messages, support requests, and information required to handle communications.
Technical data: technical information required for operation, security, diagnostics, and service improvement, such as certain browser, device, connection, page-view, or technical event information.

3. Purposes and Legal Bases

Personal data is processed only for defined and legitimate purposes, including:

processing, confirming, and fulfilling orders;
organizing deliveries, shipment tracking, and logistics operations;
handling quotations, B2B enquiries, and import-export requests;
providing ordered digital products, content, or services;
processing or confirming payments through the relevant payment providers;
responding to support requests and providing after-sales assistance;
preventing fraud, abuse, automated access attempts, and security incidents;
operating, maintaining, securing, and improving the website;
measuring website usage and understanding technical and commercial performance within the limits permitted by applicable law;
sending marketing communications where an appropriate legal basis exists and, where required by law, prior consent has been obtained.

Depending on the purpose, processing may be based on the performance of a contract, compliance with a legal obligation, legitimate interests, or consent where consent is required.

4. Public Order Tracking

Where available, public order tracking may be provided without requiring the customer to create an account. To associate the tracking request with the relevant purchase, the system may require the order number together with the email address used for the purchase.

The publicly accessible information is limited to information necessary to track the order or shipment. Technical measures may also be used to limit automated requests and attempts to enumerate existing orders.

5. Recipients and Service Providers

Personal data may be disclosed, where necessary for the purposes described above, to the following categories of recipients:

payment providers and financial service providers;
carriers, logistics operators, and partners involved in order fulfilment;
hosting, email, security, maintenance, and infrastructure providers;
technical service providers supporting website functionality;
governmental, regulatory, or judicial authorities where disclosure is legally required.

We do not disclose more personal data than is necessary for the relevant purpose.

6. International Data Transfers

Some payment, hosting, email, security, or technical service providers may be established or process data outside the country in which you reside.

Where the GDPR applies and personal data is transferred to a country outside the European Economic Area, appropriate safeguards and transfer mechanisms required by applicable law are used where necessary.

7. Cookies and Similar Technologies

The website may use cookies or similar technologies that are strictly necessary for the operation of the service, including technical functions or preferences requested by the user.

Where non-essential cookies or tracking technologies are used, their use is subject to the applicable requirements regarding information and, where required, prior consent.

The technologies actually used on the website may depend on the configuration and services enabled.

8. Data Retention

Personal data is retained for no longer than necessary for the purpose for which it is processed, subject to applicable legal obligations and the need to establish, exercise, or defend legal claims.

Orders and contractual relationship: for the period required to fulfil the order, provide after-sales support, and manage potential disputes.
Invoices and accounting records: for the period required by applicable accounting, tax, and legal obligations.
Support requests and complaints: for the period necessary to process the request and manage any resulting matter.
Marketing data: for the period applicable to the marketing purpose or until a valid objection or withdrawal of consent, where required.
Technical and security data: for the period necessary for service operation, security, and diagnostics, in accordance with applicable requirements.

Once the relevant purpose has been fulfilled, data is deleted, anonymized, or archived where legally required.

9. Your Rights

Where provided by the GDPR or other applicable law, you may have the right to request:

access to your personal data;
rectification of inaccurate or incomplete data;
erasure of your personal data where legally permitted;
restriction of processing in the circumstances provided by law;
objection to certain processing activities, including processing based on legitimate interests or direct marketing;
data portability where the applicable legal conditions are met;
withdrawal of consent where processing is based on consent.

You may also lodge a complaint with the competent data protection authority in your country where you believe your rights have been infringed.

To exercise your rights, contact us at: [PERSONAL DATA CONTACT EMAIL].

10. Security

We implement reasonable technical and organizational measures appropriate to the risks in order to protect personal data against loss, destruction, alteration, unauthorized disclosure, or unauthorized access.

Access to personal data is limited to persons, systems, and service providers who require it for the stated purposes.

11. Marketing Communications

Marketing communications are sent in accordance with applicable law.

Where prior consent is required, it is collected separately and may be withdrawn at any time. Where applicable law permits marketing on another legal basis, a simple and free means of objecting is provided.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the website, our services, or applicable legal requirements.

The version published on this page indicates the date of its latest update.