Privacy Policy

1. Who is responsible for your data

The data controller/operator is IPtradeportal, Not yet there, operating from [Registered Address]. Final legal-entity, registration, and registered-office details must be inserted before publication. For privacy questions, requests, or grievances, contact support@iptradeportal.com.

2. Scope and marketplace role

IP Trade Portal is a global marketplace for registered trademarks, patents, and design registrations. We manage the full lifecycle — from listing discovery and inquiry handling to verification, negotiation support, secure payments, and transaction completion. The Platform provides end-to-end support for buyers and sellers.

3. Personal data we collect

• Account data: name, email address, phone number, encrypted/hashed password credentials, account role, email-verification status, and account activity.
• Listing and IP data: title, description, IP type, registration and optional application numbers, jurisdiction, usage areas, price visible to the seller and platform, and other seller-submitted registration, classification, or technical information.
• Uploaded files: private supporting documents, such as registration certificates, drawings, technical descriptions, and mark/design representations. These documents may contain personal data, including names, signatures, or addresses appearing in official records.
• Inquiry data: the verified account holder's name and email, inquiry message, optional offer amount, listing reference, and inquiry-handling status.
• Technical and security data: IP address, browser and device information made available through ordinary server requests, authentication/session information, CSRF/security information, and server logs.
• Communications: support requests and transactional email records relating to registration, verification, password reset, listings, and inquiries.

We do not currently collect payment-card information, offer advertising-based tracking, use a payment processor, or process user data through an AI or LLM service.

4. How and why we use data

We process personal data to:

• create, authenticate, secure, and administer accounts, including email verification and password resets;
• host private seller records and make permitted listing information searchable on the Platform;
• receive and handle authenticated inquiries about a listing without automatically disclosing direct contact details;
• moderate content for Platform-rule compliance, respond to complaints, detect abuse or fraud, and protect users and the Platform;
• provide customer support, maintain logs, troubleshoot, and comply with legal obligations; and
• record legal-document acknowledgements and manage material Terms updates.

Where applicable, we process data with your consent, to provide services you request, to meet legal obligations, and for legitimate operational and security purposes permitted by applicable law.

5. Public listings and private documents

A live listing may make seller-submitted listing information public and searchable, including title, description, IP type, registration/application number, classification, category, and other information the listing contains. Asking price is not publicly exposed in the initial release and may be shared only through inquiry handling or as chosen by the seller or Platform.

Supporting documents and uploaded media are private by default. They are accessible to the seller who uploaded them and authorised Platform administrators for moderation or review; they are not generally public. They may be shared with an interested counterparty only after a separate mutual-consent process is implemented. Do not upload information you are not authorised to share.

6. Cookies and similar technologies

We use strictly necessary cookies and similar technical mechanisms to provide secure sessions, authentication, CSRF protection, and core Platform functionality. We do not currently use non-essential analytics, advertising cookies, session replay, or targeted advertising. If that changes, we will update this Policy and obtain consent where required before enabling non-essential technologies.

7. Service providers and disclosures

We use approved service providers to operate the Platform, including frontend hosting, backend hosting, database and private file-storage services, and a secure transactional email service provider using standard SMTP. These providers may process personal data only as needed to provide their services to us and subject to appropriate contractual or legal safeguards.

We may also disclose data where reasonably necessary to comply with law, enforce our Terms, respond to a valid legal request, protect rights or safety, investigate abuse or fraud, or in connection with a corporate reorganisation, subject to applicable law. We do not sell personal data or share it for cross-context behavioural advertising.

8. International transfers

Approved service providers may process data in various countries where they operate. Where applicable law requires safeguards for an international transfer, we will use reasonable measures such as contractual protections, standard contractual clauses, or equivalent safeguards appropriate to the transfer.

9. Retention and deletion

• Server and security logs are retained for up to 12 months, unless a longer period is required by law or needed for security or dispute resolution.
• On a valid deletion request, we aim to anonymise or delete personal data within 30-90 days, subject to legal, fraud-prevention, audit, security, and dispute-retention needs.
• Inactive accounts may be archived or deleted after 12-24 months as operational processes are implemented.
• Private uploaded files are removed where reasonably possible when their listing or account is deleted; we may retain non-identifying audit or metadata records where needed for compliance, security, or dispute resolution.
• Inquiry records may be retained for 12 months after activity and then anonymised, subject to the same exceptions.
• Legal-acceptance records are retained for the account lifetime plus three years after deletion or last activity, or longer where law or a dispute requires.

10. Security

We use reasonable safeguards designed to protect data, including HTTPS/TLS, hashed passwords, email verification, role-based access controls, rate limiting, CSRF protection, and restricted administrative access to private documents. No method of transmission or storage is completely secure; you must protect your credentials and notify us promptly of suspected unauthorised access.

We do not currently claim to provide login MFA/2FA. Additional authentication layers may be introduced in the future.

11. Your choices and rights

Subject to applicable law, you may request access to, correction of, deletion of, or information about personal data we hold; withdraw consent where processing depends on consent; and raise a grievance or complaint. Send requests to support@iptradeportal.com. We aim to respond within 30 days, subject to identity verification, legal exceptions, and the nature of the request.

The Platform serves a global audience and may be subject to data protection laws in multiple jurisdictions. Where a law such as the GDPR, UK GDPR, CCPA, CPRA, or other applicable data protection framework applies, we will handle applicable requests and obligations as required by that law. We do not sell or share personal information as those laws may define those terms.

12. Children

The Platform is for people aged 18 or older only. Registration requires an age confirmation. If we learn that an account belongs to a person under 18, we will suspend it and delete associated personal data and uploads promptly, except to the extent retention is legally required.

13. Policy changes and contact

We may update this Policy to reflect legal, operational, or security changes. We will provide notice by email and/or an in-product notice where appropriate, and obtain fresh consent if a new processing purpose requires it. The current version will always be available at iptradeportal.com/privacy.

For privacy requests, grievances, or questions, contact support@iptradeportal.com.