This page explains the privacy practices we have in place on globalb2bgroup.com, the laws we have considered for the markets we serve, and what is still open. It is not a certification, a seal, an approval by any authority or a statement that we comply with every applicable law. A jurisdiction-by-jurisdiction review by qualified counsel has not yet been completed. It is general information, not legal advice.
Who this covers
We are a buyer-first sourcing service for commercial buyers and suppliers of produce, premium fruit and vegetables, fish and seafood, eggs, poultry and grains, with buyers and suppliers in Europe, the UK, the Americas, Asia, the Middle East and Africa. The personal data we handle is mostly business contact information and request details that people send us. We do not ask for sensitive data such as health, religion or biometric information, and the forms are built for business use, not for children.
What is in place today
- Cookie choice before tracking: optional analytics and advertising measurement stay off until you choose. “Reject all” is as easy as “Accept all”, and continuing to browse is not consent. Change your choice at any time: .
- Global Privacy Control: if your browser sends this signal, marketing measurement stays off.
- Notices on forms: request, listing, contact and sign-up forms explain why we ask for the details and link to the Privacy Policy; most ask you to confirm before sending.
- No marketing without opt-in: newsletters need a confirmed email sign-up (double opt-in); request and download forms do not sign you up for marketing.
- Buyer identity protected: we describe your requirements to suppliers without your name or contact details until an introduction is approved.
- Confidential business information: customer, supplier, RFQ and project information — including documents and content in private project areas — is not published or used for marketing, and access is limited to authorised team members and the service providers who need it, or where the law requires disclosure. See Privacy Policy section 7.
- Private files and pages: all file storage is private and documents open only through links that expire after five to ten minutes; account, workspace, transaction-request, portal and admin pages tell search engines not to index them. Details and what remains unverified: Confidentiality & Data Security.
- Data-rights requests: one request form for access, correction, deletion, objection and other rights, answered within one month.
- No sale of personal data.
Laws we have considered
Whether a law applies depends on where you are, what we do with the data and, for some laws, thresholds such as revenue or the number of people affected.
| Law | When it can apply to us | What we do |
|---|---|---|
| EU GDPR and ePrivacy rules (EU/EEA, including Cyprus) | Applies: we operate from Cyprus and serve buyers and suppliers in the EU. | Privacy Policy with legal bases; opt-in cookie banner; rights requests; transfer safeguards described. |
| UK GDPR, Data Protection Act 2018 and PECR | Applies: we have a London office and UK buyers and suppliers. | Same notices and consent controls as for the EU; ICO named as the UK authority. |
| California CCPA/CPRA and other US state privacy laws | May apply depending on revenue and data-volume thresholds that we have not yet confirmed. | We do not sell personal data. Google Ads conversion measurement may count as “sharing”; it runs only after you accept marketing, and a Global Privacy Control signal keeps it off. |
| Brazil — LGPD | Can apply when we process data of people in Brazil. | Notice, legal bases and rights requests through the same form. |
| Canada — PIPEDA and Quebec Law 25 | Can apply to business contacts in Canada; Quebec adds consent and transparency rules. | Notice, consent for optional cookies, rights requests. A designated privacy officer is not yet named (see open items). |
| South Africa — POPIA | Can apply when we process data of South African buyers or producers. | Notice and rights requests; information-officer registration not yet assessed. |
| Japan — APPI | Can apply to personal data of people in Japan. | Notice of purposes and third-party providers; rights requests. |
| South Korea — PIPA | Can apply to personal data of people in Korea. | Notice and rights requests; whether a domestic representative is required has not been assessed. |
| India — Digital Personal Data Protection Act 2023 | Can apply to personal data of people in India as its rules come into force. | Notice and consent records for optional processing; rights requests. |
| Singapore — PDPA; Philippines — Data Privacy Act; Hong Kong — PDPO | Can apply to business contacts in these markets. | Notice of purposes, consent for optional cookies, access and correction requests. |
| UAE — Federal PDPL; Saudi Arabia — PDPL | Can apply to personal data of people in these countries; free zones such as DIFC and ADGM have their own laws. | Notice and rights requests; cross-border transfer conditions still to be reviewed. |
| Morocco — Law 09-08; Uganda — Data Protection and Privacy Act 2019 | Can apply when we process data of producers or buyers there. | Notice and rights requests; any registration duties not yet assessed. |
| Accessibility (for example the European Accessibility Act and WCAG) | Relevant to how the site is built and to some services offered in the EU. | We aim for WCAG 2.1 Level AA; see the Accessibility Statement. No independent audit has been completed. |
Still open
- The registered legal name and company number of the controlling entity are being confirmed for the Privacy Policy.
- We have not appointed a Data Protection Officer or local representatives; whether any law requires one for our activities is being assessed. Privacy matters go to the team inbox below.
- Data-processing terms and transfer safeguards for each service provider are being confirmed provider by provider.
- Legal documents are written in English. Translated versions of the cookie banner, form notes and legal notices are reviewed before they appear on the live site.
- An independent accessibility audit has not been carried out.
- No independent security audit or penetration test has been carried out, and two-step sign-in is not yet required for team accounts.
Contact and requests
Use the privacy request form or email support@globalb2bgroup.com. Full details are in the Privacy Policy, the Cookie Policy, the GDPR rights summary and the Accessibility Statement.