Privacy Policy

We collect only the information needed to provide our trade services:

• Account & contact data: name, company name, email, phone, address, and — for suppliers — business category, GST number, and login credentials.
• Buyer inquiry / order data: product interest, quantity, specifications, destination country, and messages you submit.
• Uploaded files: product images or documents you or suppliers upload.
• Technical data: IP address, browser type, device information, and pages visited (used for security, rate limiting, and basic analytics).
• Cookies: a strictly-necessary session cookie for authentication (see “Cookies”).

• To create and manage user and supplier accounts.
• To process quote requests, orders, shipments, and payment records.
• To operate the supplier portal and route orders to suppliers.
• To communicate with you (order updates, confirmations, notifications).
• To secure our platform (fraud prevention, rate limiting, abuse detection).
• To comply with legal, tax, and regulatory obligations.

Lawful bases (GDPR): performance of a contract, your consent, our legitimate interests in operating and securing the business, and compliance with legal obligations.

When you register as a buyer or supplier, we store the details you provide and a securely hashed password (using bcrypt). Supplier accounts require administrator approval before activation. Access to dashboards, order confirmation, payment confirmation, and document upload is restricted to authenticated, authorised account holders. You are responsible for keeping your login credentials confidential.

Inquiries, messages, product images, and documents you submit are “user-generated content”. You confirm you have the right to share such content and that it is lawful and not infringing. We may remove content that violates these terms or applicable law. Do not upload sensitive personal data that is not necessary for the transaction.

Uploaded images are validated by file type and size, and are stored to serve product and shipment records. Do not upload malicious files or content you do not own. We reserve the right to reject or delete uploads that fail validation or violate this policy.

Salvation Exim records commercial amounts, invoices, and payment confirmations for orders between buyers, Salvation Exim, and suppliers. We do not collect or store full card numbers or bank credentials on this website; settlement is handled through offline/agreed banking channels. Any future integrated payment gateway would process card data under its own PCI-DSS compliant systems, not ours.

Our website does not use third-party AI/LLM services to process your personal data, and we do not send your data to services such as OpenAI or Anthropic. Automated processing on the platform is limited to standard functionality (e.g. matching a product’s category to appropriate input fields, rate limiting, and fraud/security checks). If we introduce AI-assisted features in future, we will update this policy and, where required, seek your consent.

We use a single strictly-necessary cookie to keep you signed in (an HTTP-only, secure session cookie). It is essential to operate authenticated areas and cannot be switched off without disabling login. We do not use advertising or cross-site tracking cookies.

We may collect minimal, aggregated technical data (such as page views and IP-based request counts) to keep the site secure and reliable. We do not sell your data or use it for behavioural advertising. If a third-party analytics tool is added in future, this policy will be updated to name it and describe its cookies.

We share personal data only where necessary:

• With approved suppliers — limited order details required to fulfil an order (buyer identity is white-labelled and not exposed to suppliers).
• With logistics/transport partners — details needed for pickup and delivery.
• With service providers — e.g. WhatsApp/email notification delivery, strictly to send you messages.
• Where required by law, regulation, or legal process.

We do not sell your personal data.

We apply reasonable technical and organisational measures, including encrypted passwords (bcrypt), secure signed session tokens, HTTPS in production, security headers, input validation, rate limiting, and access controls. No system is perfectly secure, but we work to protect your data and to notify affected users and authorities of a breach where the law requires.

We keep personal data only as long as needed for the purposes described here or as required by law (e.g. tax and trade records). You may request deletion of data we are not legally required to retain.

Subject to applicable law (GDPR / DPDP Act), you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion (“right to be forgotten”), where applicable.
• Object to or restrict certain processing.
• Request a portable copy of your data.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a supervisory/data-protection authority.

To exercise any right, contact us at salvation.exim.private.limited@gmail.com.

As an import-export business, your data may be processed in India and shared with counterparties abroad to fulfil international trade. Where required, we take steps to ensure appropriate safeguards for cross-border transfers.

Our services are for businesses and adults. We do not knowingly collect data from children under 18.

We may update this policy from time to time. The “Last updated” date shows the latest revision. Material changes will be highlighted on the site.

Salvation Exim Private Limited
Khushi Nagar, Varma Layout, Gokulpeth, Nagpur, Maharashtra, India
Email: salvation.exim.private.limited@gmail.com
Phone: +91 92725 75166