Privacy policy

Alibi Connect ("we", "us", "our") operates the Alibi Connect commodity trade marketplace. This policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it.

1. Who we are

Alibi Connect is a multi-country marketplace for verified commodity trade. Our registered address and data controller contact details are provided in the contact section of this document. If you have questions about this policy or your data, write to [email protected].

2. Data we collect

Account and identity data

When you register or request access, we collect: full name, work email address, job title, organisation name, country of registration, and business registration documents. This data is required to verify your identity and your organisation's compliance status.

Transaction and trade data

When you list a lot or submit a quote, we collect: commodity details, lot quantities and pricing, certificate and document uploads, and communications through the platform messaging system.

Usage data

We collect standard web server logs including IP addresses, browser type, pages visited, and time of access. This data is used for security monitoring and platform improvement. It is not used for profiling or advertising.

Compliance data

As part of our Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, we may collect and retain additional identity documents, sanction screening results, and regulatory filings. This data is required by applicable law and cannot be deleted at your request during the retention period imposed by that law.

3. How we use your data

• To verify your identity and your organisation's eligibility to trade on the platform
• To operate the marketplace: listing management, quote processing, and trade documentation
• To comply with applicable laws including KYC, AML, and export control regulations
• To communicate about your account, transactions, and compliance status
• To detect and prevent fraud, money laundering, and sanctions violations
• To improve the platform using anonymised and aggregated usage analytics

4. Legal bases for processing

We process your data under the following legal bases: (a) performance of a contract, where processing is necessary to operate your account and facilitate trades; (b) legal obligation, where processing is required by KYC/AML or other applicable laws; (c) legitimate interests, for fraud prevention and platform security; and (d) consent, where you have explicitly opted in to specific communications.

5. Data sharing

We do not sell personal data. We may share data with: verified counterparties (only the information necessary to complete a transaction), regulatory authorities when required by law, our sub-processors (cloud infrastructure, identity verification providers, compliance screening services), and legal or professional advisors under confidentiality obligations.

All sub-processors are subject to data processing agreements and are required to maintain security standards equivalent to our own.

6. International transfers

As a multi-country marketplace, your data may be transferred to and processed in countries outside your jurisdiction. Where such transfers occur, we rely on appropriate safeguards including standard contractual clauses approved by the relevant data protection authority.

7. Retention

Account data is retained for the duration of your active account plus 7 years after closure, to satisfy our regulatory obligations. Trade documentation is retained for 10 years to support audit and dispute resolution. Compliance screening records are retained for the period required by applicable AML law in the relevant jurisdiction.

8. Your rights

Depending on your jurisdiction, you may have rights to: access a copy of your personal data, correct inaccurate data, request deletion (subject to legal retention obligations), restrict or object to processing, and data portability. To exercise any right, write to [email protected]. We will respond within 30 days.

9. Security

We use industry-standard encryption in transit and at rest, access controls, and regular penetration testing. Despite these measures, no system is perfectly secure. You should use a strong, unique password and notify us immediately if you believe your account has been compromised.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email to registered users at least 14 days before they take effect. Continued use of the platform after that date constitutes acceptance of the revised policy.

11. Contact

Data controller: Alibi Connect Ltd
Email: [email protected]
For complaints unresolved by us, you may lodge a complaint with the relevant data protection authority in your jurisdiction.