Who is responsible
Contrade Global Pte. Ltd., 531 Upper Cross Street, #02-11 Hong Lim Complex, Singapore 050531, is the organisation responsible for your personal data under the PDPA and the controller under the GDPR. Privacy questions: cs@contrade-global.com.
What we collect and why
We collect only what the purpose needs.
- Enquiry and quote forms: name, company, email, phone (optional), and the requirement you describe. Used to reply to you and to prepare a quote. Kept for as long as the enquiry and any resulting business relationship lasts, then for the period Singapore tax and company law require.
- Direct contact by email: the details you send. Used to respond.
- Analytics, only with your consent: page views and interactions, collected through Google Analytics 4 via Google Tag Manager with IP anonymisation. Used to understand which pages help buyers. Declining consent has no effect on the site.
- Server logs: IP address, user agent and the pages requested, kept by our hosting provider for security for a limited period.
Legal basis
For enquiries: your consent when you send the form, and our legitimate interest in responding to business enquiries and performing a contract. For analytics: your consent, which you can withdraw at any time by deleting the cg-consent cookie and reloading the site. For logs: our legitimate interest in keeping the site secure.
Cookies and storage
The site sets no analytics cookies until you accept them. Your choice is stored in a first-party cookie named cg-consent for six months so we do not ask again; it holds only the word granted or denied. The spam check on forms (Cloudflare Turnstile) may set a cookie needed for it to work.
Who receives the data
Processors acting on our instructions:
- Vercel Inc. (hosting and delivery, United States and edge locations).
- Resend (transactional email delivery of enquiries and acknowledgements).
- Cloudflare (spam protection on forms).
- Google (analytics, only after consent).
International transfers
Data is processed in Singapore and, through the providers above, in the United States and other countries. Transfers out of Singapore are made under the PDPA transfer limitation obligation; where the GDPR applies, transfers rely on standard contractual clauses or adequacy decisions in the providers' terms.
Your rights
Under the PDPA you may ask for access to and correction of your personal data, withdraw consent, and complain to the Personal Data Protection Commission of Singapore. Under the GDPR you may also ask for erasure, restriction and portability, object to processing, and complain to your supervisory authority. Write to cs@contrade-global.com; we reply within the time the law sets.
Children
The site is for businesses. We do not knowingly collect data from anyone under 18.
Changes
We update this policy when our processing changes and show the date at the top.