GDPR Policy for Stone4Trade.com
1. Introduction
Stone4Trade.com ("we", "us", "our") is committed to protecting and respecting your privacy. This GDPR Policy outlines your rights under the General Data Protection Regulation (EU) 2016/679 (GDPR) and how we handle your personal data when you use our platform or services.
By accessing or using Stone4Trade, you agree to the terms outlined in this policy.
2. Who We Are
Stone4Trade.com is a B2B marketplace for buying and selling natural stones including Granite, Marble, Limestone, Sandstone, and products like Blocks, Slabs, Tiles. We serve manufacturers, quarry owners, distributors, and importers/exporters across global markets.
3. Types of Personal Data We Collect
We may collect the following personal data from users:
Full Name
Company Name and Type
Email Address
Mobile Number
Business Address
IP Address and Device Information
Trade History on the Platform
Uploaded Documents (e.g., GST, Company Registration)
We do not collect or process any sensitive personal data (e.g., health data, religion) unless required for legal compliance.
4. Legal Basis for Processing Data
We process personal data under the following lawful bases:
Contractual Necessity: To provide our services and fulfill transactions.
Consent: When you voluntarily provide information or subscribe to communications.
Legitimate Interest: To improve platform performance, detect fraud, and provide a better user experience.
Legal Obligation: To comply with local and international laws, such as taxation or fraud prevention.
5. How We Use Your Data
We use your personal data to:
Register and manage your account
Enable communication with other users or businesses
Respond to your inquiries and provide customer support
Send transactional emails, alerts, and updates
Improve and secure our platform
Comply with legal requirements
6. Data Sharing and Transfers
We do not sell or rent your personal data to third parties. We may share your data with:
Service providers who help us operate (e.g., hosting, email, CRM tools)
Government or law enforcement agencies, if required by law
Business partners, if you opt-in to share details during business transactions
If we transfer your data outside the EEA, we ensure it is protected through adequate safeguards, such as Standard Contractual Clauses.
7. Your Rights Under GDPR
You have the following rights regarding your personal data:
Right to Access – Request a copy of your personal data
Right to Rectification – Correct inaccurate or incomplete data
Right to Erasure – Request deletion of your data ("right to be forgotten")
Right to Restrict Processing – Limit how your data is used
Right to Data Portability – Transfer your data to another provider
Right to Object – Object to data processing in certain cases
Right to Withdraw Consent – If processing is based on consent
To exercise any of the above rights, contact us at support@stones4trade.com.
8. Data Retention
We retain your personal data:
As long as you have an active account
For up to 5 years after account deactivation (for audit/legal purposes)
Or as required by law
You may request account deletion at any time.
9. Cookies and Tracking
We use cookies and similar technologies to:
Remember user preferences
Analyze site performance
Enable secure login and session control
You can control cookies through your browser settings. See our Cookie Policy for more details.
10. Data Security
We implement appropriate technical and organizational measures to secure your data, including:
SSL encryption
Secure server infrastructure
Role-based access control
Regular audits and vulnerability scans
Despite our efforts, no method of data transmission is 100% secure.
11. Children’s Privacy
Our platform is intended for business users aged 18 or older. We do not knowingly collect personal data from minors.
12. Updates to This Policy
We may update this GDPR Policy from time to time. Changes will be posted on this page with a revised "Last Updated" date. We recommend checking this policy regularly.
13. Contact Us
If you have questions or concerns about this GDPR Policy or wish to exercise your data rights, please contact:
Effective Date: July 30, 2025
