Privacy Notice

We do not knowingly process data of children under 18 and we do not use your data for automated profiling or targeted advertising.

We ask for consent separately for each purpose, with unticked checkboxes, at the point we need it. The purposes are:

• Account creation (required to provide the service)I consent to Trade Rede storing my name, email, and phone number for account creation and communication.
• KYC verification (required to provide the service)I consent to Trade Rede collecting and processing my GSTIN, PAN, and KYC documents for vendor/buyer verification as required by law.
• Order processing (required to provide the service)I consent to Trade Rede processing my address and order details for order fulfillment and delivery.
• Communication (optional)I consent to Trade Rede sending me order updates, notifications, and promotional communications via email and SMS.
• Data sharing with partners (optional)I consent to Trade Rede sharing my data with trusted logistics partners for delivery and with payment gateways for transaction processing.

To withdraw consent: open Account settings → Privacy → Consent management and switch off the purpose, or email privacy@traderede.com. Withdrawal is as easy as giving consent. Withdrawing an optional consent does not affect your access to the platform. Withdrawing a required consent means we can no longer operate your account, so we will begin closing it and keep only the records the law requires us to retain.

Use Download my data and Delete my account in Account settings, or raise an access, correction, erasure or grievance request there and we will track it to closure.

After the retention period ends the data is erased or irreversibly anonymised. Tax and KYC records survive account deletion only for as long as Indian tax law requires.

• Encryption at restAll database contents and uploaded documents are encrypted at rest by our managed cloud infrastructure.
• Encryption in transitEvery request is served over HTTPS/TLS with HSTS enabled.
• Role-based access controlRow-level security policies restrict each record to its owner, its counterparty, or an administrator.
• Private document storageKYC documents and invoices live in private buckets reachable only through short-lived signed links.
• Audit logsAdministrative and transaction-changing actions are written to an append-only audit trail.
• Access logsViews, edits, exports and deletions of personal data are logged with time, IP address and device.
• Rate limitingSensitive actions such as uploads, exports and order requests are throttled per account.
• Breach responseDetected breaches are registered, reported to the Data Protection Board of India within 72 hours, and affected users are notified.

We share personal data only with the counterparty to your transaction (a buyer sees the supplier they order from and vice versa), our payment gateway for settlement, our logistics partners for delivery, and our cloud hosting, database and email providers as Data Processors under contract. We never sell your data.

Our infrastructure providers may store or process data on servers outside India. Such transfers are made only to countries not restricted by the Central Government under Section 16 of the DPDP Act, and are covered by contractual safeguards that hold the processor to the same standards of confidentiality and security we apply ourselves.

If a personal data breach affects your data, we intimate the Data Protection Board of India without delay and file the detailed report within 72 hours, and we notify you directly with the nature and extent of the breach, its likely consequences, the measures we have taken, and the steps you should take to protect yourself.