1.Overview
This policy explains how Infinity A Grade Limited ("IAG") collects, uses, and protects information about trade buyers and the people who use IAGSupply on their behalf. Because IAGSupply is a B2B platform, most of the data we hold is business information rather than consumer data.
2.Data we collect
KYB & business details — company name, business registration or company number, registered and trading addresses, beneficial-ownership and director information, and expected monthly volume, collected through the trade-account application.
Contact & account data — the names, work emails, and phone numbers of authorised users, sign-in credentials, assigned pricing tier, and team membership.
Order & transaction data — orders, proformas, payment-matching references (we do not store card data; payment is by bank transfer), shipping addresses, serialized unit records, and RMA / returns history.
Technical data — log data, device and browser information, and limited analytics about how the platform is used, collected via cookies and similar technologies (see §9).
3.How we use your data
We use your data to verify and approve trade accounts (KYB), to show tier pricing and process orders, to arrange DDP shipping and customs clearance, to provide support and handle returns, to prevent fraud and meet legal and accounting obligations, and to improve the platform. We may send service messages about your account and orders; trade marketing is sent only where permitted and you can opt out at any time.
4.Lawful basis & consent
We process data to perform our contract with your business, to comply with legal obligations (including anti-money-laundering and customs requirements), and for our legitimate interests in operating a secure trade platform and preventing fraud. Where we rely on consent — for example certain analytics cookies or marketing — you may withdraw it at any time.
5.Who we share data with
Banking & payment partners — to issue proformas and reconcile bank-transfer payments.
Shipping & customs partners — carriers and customs brokers who clear and deliver DDP shipments; this necessarily includes consignee name, address, and shipment contents.
Service providers — transactional email, hosting, and analytics providers acting on our instructions under contract.
Authorities & advisers — where required by law, regulation, or to establish or defend legal claims. We do not sell your data.
6.International transfers
IAG is based in Hong Kong and our buyers are global (primarily the US, UK, and EU). Operating the platform and shipping DDP necessarily involves transferring data between Hong Kong and your country. Where data originates in the UK or EEA, we rely on appropriate safeguards such as standard contractual clauses for transfers outside those regions.
7.Data retention
We keep KYB and transaction records for as long as your account is active and thereafter for the period required by tax, accounting, customs, and anti-money-laundering law (generally up to seven years). Technical logs are kept for shorter periods. When data is no longer needed we delete or anonymise it.
8.Your rights
Subject to local law, you may request access to the personal data we hold about you, correction of inaccurate data, deletion where there is no overriding legal reason to retain it, restriction of or objection to certain processing, and portability. Because most account data is held at the business level, some requests are handled through your account administrator. To exercise a right, contact us using the route in §11.
10.Security
We protect data in transit and at rest, restrict access to authorised staff on a need-to-know basis, and maintain operational and organisational measures appropriate to a trade platform. No system is perfectly secure; we ask that you keep your credentials confidential and report any suspected compromise promptly.
11.Contact for privacy requests
For any privacy question or to exercise a right, contact our data team at privacy@iagsupply.com or through the Contact page. We aim to acknowledge requests within five business days and to respond substantively within the period required by applicable law.