Privacy Policy

Effective Date: January 1, 2024
Last Updated: January 1, 2026

1. Introduction

Gigabuyportal LP ("Company," "we," "our," or "us") is committed to protecting your privacy and ensuring you have a positive experience on our website and when using our procurement software platform. This Privacy Policy explains how we collect, use, disclose, and otherwise process your personal information in accordance with applicable privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada and other relevant legislation.

This Privacy Policy applies to all personal information collected through our website (gigabuyportal.cfd), our mobile applications, and our procurement software services. By accessing our services, you acknowledge that you have read and understood this policy.

2. What Personal Information We Collect

We collect personal information in various ways to provide and improve our services. The types of information we collect include:

2.1 Information You Provide Directly

• Account Information: Name, email address, phone number, company name, job title, business address, and password when creating an account
• Profile Information: Professional background, company information, procurement preferences, and team member details
• Communication Data: Messages, support requests, inquiries, and feedback you send us
• Payment Information: Billing address, payment method details (processed securely through third-party payment processors)
• Transaction Data: Purchase history, procurement requests, supplier information, and contract details

2.2 Information Collected Automatically

• Usage Data: Pages visited, features accessed, time spent on platform, clicks, and interactions
• Device Information: IP address, browser type, operating system, device identifiers, and mobile network information
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance user experience and analytics
• Location Data: General location derived from IP address (not precise GPS unless explicitly enabled)

2.3 Information from Third Parties

• Supplier and Partner Data: Information about suppliers, vendors, and business partners in your procurement network
• Public Sources: Publicly available business information and company directories
• Social Media: Data from linked social media accounts (with your permission)

3. How We Use Your Information

We use the personal information we collect for the following purposes:

3.1 Service Delivery

• Providing, maintaining, and improving our procurement software and related services
• Processing transactions and managing your account
• Facilitating supplier discovery, vendor management, and procurement workflows
• Providing customer support and technical assistance

3.2 Communication

• Sending transactional emails (account confirmations, password resets, receipt notices)
• Providing product updates, security alerts, and important notices
• Responding to your inquiries and support requests
• Sending marketing communications (only with your consent)

3.3 Analytics and Improvements

• Analyzing usage patterns to improve user experience and platform functionality
• Conducting statistical analysis and market research
• Developing new features, products, and services
• Personalizing content and recommendations based on your preferences

3.4 Legal and Security

• Complying with legal obligations and regulatory requirements
• Detecting, preventing, and addressing fraud, security, or technical issues
• Protecting our rights, privacy, safety, and property
• Enforcing our Terms of Service and other agreements

4. Legal Basis for Processing (GDPR/Privacy Laws)

We process your personal information on the following legal bases:

• Consent: Where you have explicitly consented to the processing (e.g., marketing communications)
• Contract Performance: To perform our contractual obligations and provide services you've requested
• Legal Obligation: To comply with applicable laws and regulations
• Legitimate Interest: To pursue our legitimate business interests while respecting your rights

5. How We Share Your Information

We do not sell your personal information. However, we may share it in the following circumstances:

5.1 Service Providers

We may share information with third-party service providers who perform services on our behalf, such as payment processors, cloud hosting providers, email service providers, and analytics platforms. These providers are contractually obligated to maintain confidentiality and use your information only for the purposes specified.

5.2 Business Partners

With your permission, we may share limited information with suppliers, vendors, and other business partners within your procurement network to facilitate transactions and improve service delivery.

5.3 Legal Requirements

We may disclose information if required by law, court order, government request, or to protect our legal rights and safety.

5.4 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

6. Data Retention

We retain your personal information for as long as necessary to provide our services, comply with legal obligations, and maintain business records. Retention periods vary depending on the type of information and its purpose:

• Account information is retained while your account is active and for a reasonable period afterward
• Transaction records are retained for financial and tax compliance purposes (typically 7 years)
• Analytics and usage data are typically retained for up to 24 months
• Marketing preferences are retained until you opt out

7. Your Privacy Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

7.1 Right of Access

You have the right to request access to the personal information we hold about you.

7.2 Right to Correction

You may request that we correct or update inaccurate or incomplete information.

7.3 Right to Deletion

You may request deletion of your personal information, subject to legal and contractual obligations.

7.4 Right to Restrict Processing

You may request that we limit how we use your information in certain circumstances.

7.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used format.

7.6 Right to Withdraw Consent

You may withdraw consent for processing at any time by updating your preferences or contacting us.

7.7 Marketing Communications

You can opt out of marketing emails by clicking the unsubscribe link in any email or by updating your preferences in your account settings.

8. Data Security

We implement comprehensive technical, administrative, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, and destruction. Our security measures include:

• SSL/TLS encryption for data in transit
• Encryption at rest for sensitive data
• Secure authentication protocols and access controls
• Regular security audits and penetration testing
• Employee training on data protection and privacy
• Incident response and breach notification procedures

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and gather analytics. Types of cookies we use include:

• Essential Cookies: Required for basic website functionality
• Performance Cookies: Help us understand how you use our platform
• Marketing Cookies: Used for targeted advertising (requires consent)
• Functional Cookies: Remember your preferences and settings

You can control cookie preferences through your browser settings. For more information, see our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing personal information.

11. Children's Privacy

Our services are not intended for children under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information and terminate the child's account immediately.

12. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws that are different from your home country. By using our services, you consent to the transfer of your information to countries outside your country of residence, which may provide levels of data protection that are different from those in your country.

13. Contacting Us About Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer:

14. Your Right to Lodge a Complaint

If you believe your privacy rights have been violated, you have the right to lodge a complaint with the appropriate regulatory authority in your jurisdiction. In Canada, you may contact the Privacy Commissioner of Canada at priv.gc.ca.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services following the posting of changes constitutes your acceptance of the updated Privacy Policy.

16. Additional Information for Specific Jurisdictions

16.1 Canada (PIPEDA)

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), which sets out principles for the management of personal information by organizations inthe private sector. Under PIPEDA, you have the right to access, correct, and request deletion of your personal information held by us.

16.2 European Union (GDPR)

If you are located in the EU, the General Data Protection Regulation (GDPR) applies to our processing of your personal information. You have enhanced privacy rights under GDPR, including the right to object to processing, the right to restrict processing, and the right to lodge a complaint with a supervisory authority.

16.3 California (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information.

17. Definitions

• Personal Information: Any information about an identified individual or an individual whose identity may be inferred from the information, including but not limited to name, contact information, and online identifiers.
• Processing: Any operation performed on personal information, such as collection, use, storage, disclosure, deletion, or destruction.
• Data Subject: The individual to whom personal information relates.
• Data Controller: The organization that determines the purposes and means of processing personal information (Gigabuyportal LP in this case).
• Data Processor: An organization that processes personal information on behalf of the controller.

18. Acknowledgment

By using Gigabuyportal LP's services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our privacy practices, please do not use our services.