Privacy Policy

This policy explains what personal data globallinker collects when you use this marketplace, why we collect it, who we share it with, and what you can ask us to do with it. It covers the website, the buyer accounts and the ordering process.

1. Who we are

globallinker Pte. Ltd., 18 Supply Chain Avenue, #07-04, Singapore 618499, is the controller of the personal data described here. Questions about this policy, or any request to exercise the rights in section 10, can be sent to privacy@globallinker.com.

This policy does not cover what a brand on the platform does with your data once an order is placed. Each brand is an independent business and a separate controller of the data it receives; their own privacy notice applies. Section 5 explains exactly what they receive.

2. What we collect

• Account data. Name, business name, business email address, password, telephone number, and the business details attached to your account.
• Order data. The products, quantities and prices on each order, the delivery and FOB addresses, the shipping method and the payment method chosen.
• Payment data. The method, the amount and the transaction reference. We do not store card numbers. Card payments are handled by the payment provider, and a bank-transfer receipt you upload is stored because it is the evidence the payment was made.
• Communications. Enquiries, support threads, quotations and dispute correspondence, including the channel they arrived on.
• Technical data. IP address, browser and device type, and the pages you visited. This is what keeps a signed-in session working and tells us when part of the site is broken.

We do not collect special-category data — nothing about health, ethnicity, religion or political views — and we do not knowingly collect data about anyone under 18.

3. Why we use it

• To create and secure your account, and to keep you signed in.
• To price, process and record your orders, and to pass them to the brand that will fulfil them.
• To arrange shipment, customs clearance and delivery, and to produce the documents that go with them.
• To answer your enquiries and resolve disputes about an order.
• To detect fraud, abuse and attempts to access an account that is not yours.
• To send transactional messages — order confirmations, shipping updates, password changes. These are part of the service and are not marketing.
• To send marketing about the platform, only where you have asked for it. Every such message has a working unsubscribe link, and unsubscribing does not affect your orders.
• To meet our legal obligations, including tax, customs and accounting record-keeping.

4. Our legal bases

Where the GDPR or a similar law applies, we rely on the following:

• Performance of a contract — creating your account, processing and delivering your orders, and supporting them afterwards.
• Legitimate interests — fraud prevention, platform security, and improving how the marketplace works. We have weighed these against your rights and consider them proportionate to running a commercial platform.
• Consent — marketing messages, and cookies that are not strictly necessary. You can withdraw consent at any time.
• Legal obligation — invoices, customs declarations, tax records and responses to lawful requests from authorities.

5. Who we share it with

The brand you ordered from

This is the disclosure that matters most on a marketplace, so it is stated plainly rather than folded into a list. When you place an order, the brand fulfilling it receives your name, business name, delivery address, contact details, and the products, quantities and prices on that order — because it is the party manufacturing, packing and shipping the goods, and it cannot do that without them.

We do not send a brand your other orders, your order history with other brands, your password, or your payment credentials. Each brand sees the order it is fulfilling and the buyer details needed to fulfil it.

Service providers

Companies that process data on our instructions: hosting and infrastructure, payment processing, email delivery, freight forwarders and customs brokers, and analytics. They are bound by contract to use the data only for the service they provide us.

Authorities and legal requirements

Customs, tax and law-enforcement bodies, where we are legally required to disclose, and professional advisers where necessary to establish or defend a legal claim.

What we never do

We do not sell personal data. We do not rent or trade buyer lists. We do not share your data with brands you have not ordered from.

6. International transfers

globallinker operates across several jurisdictions, and the data described here will be transferred to and processed in countries other than the one you are in — including Singapore, where we are established, and the countries where the brands you order from are located.

Where data leaves the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses or an equivalent approved mechanism, together with a transfer assessment of the destination. A copy of the safeguards can be requested from privacy@globallinker.com.

7. How long we keep it

• Account data — while the account is open, and for 24 months after the last activity or a deletion request, so a closed account can be distinguished from a new one.
• Order and transaction records — seven years from the end of the financial year, which is the accounting and customs retention period we are subject to.
• Support and dispute correspondence — three years from the last message, which covers the window in which a claim can be brought.
• Technical and security logs — 12 months, then deleted or aggregated so they no longer identify anyone.
• Marketing consent records — kept for as long as the consent is relied upon, plus three years as proof it was given.

Where a retention period ends, data is deleted or irreversibly anonymised. Data under a legal hold is kept until the hold is released, even if the period above has expired.

8. Your rights

Subject to the law where you are, you may:

• Access the personal data we hold about you, and receive a copy.
• Correct data that is inaccurate or incomplete.
• Delete data we no longer have a lawful reason to keep. Records under a retention obligation, such as invoices, are not deleted on request.
• Restrict processing while a dispute about accuracy or lawfulness is resolved.
• Object to processing based on legitimate interests, and to marketing at any time.
• Port the data you gave us to another provider in a machine-readable format.
• Withdraw consent where consent is the basis, without affecting what was done before.

Write to privacy@globallinker.com. We answer within 30 days, and may ask you to verify your identity first — the alternative is a policy that lets anyone request anyone's data by typing their email address. If you are not satisfied with our answer, you may complain to your local supervisory authority.

9. Cookies and similar technologies

• Strictly necessary. The session cookie that keeps you signed in, and the cart. These cannot be switched off: without them the site cannot tell one buyer's cart from another's.
• Preference. Choices you have made, such as the shipping method you last selected.
• Analytics. Aggregate page and traffic measurement, used to find what is broken and what is not being found. Set only with consent where consent is required.

Your browser can block or delete cookies. Blocking the strictly necessary ones will sign you out and empty your cart.

10. Security

Passwords are stored as salted hashes and never in readable form. Traffic to and from the site is encrypted in transit. Access to buyer data inside globallinker is limited to the staff who need it for the task at hand, and administrative actions are logged.

No system is perfect, and we do not claim otherwise. If a breach affects your data, we will tell you and the relevant authority as the law requires, and we will say what was affected rather than describing it as "a security incident".

11. Children

globallinker is a trade platform for businesses. It is not directed at children, and accounts may not be opened by anyone under 18. If we learn that we hold a child's data, we delete it.

12. Changes to this policy

We update this policy when what we do with data changes. Where a change materially affects your rights, we will tell account holders by email before it takes effect, rather than relying on you to notice.

13. Contact

globallinker Pte. Ltd.
18 Supply Chain Avenue, #07-04
Singapore 618499
privacy@globallinker.com