Privacy policy

Information we collect

Depending on how you use the platform, we may collect account and contact details (name, email, phone, company); company verification details (legal and trading name, country, website, business email, registration and tax numbers or the reason they do not apply, registered and shipping addresses, and a named contact person); company registration or tax documents you choose to upload; saved delivery addresses; enquiries, quote requests and messages; and order records.

Company verification is about the business, not the individual. We do not ask for Aadhaar, passport or other personal identity documents.

Security and platform data

We process essential session and authentication data, security and audit events, request and rate-limit information, and anti-abuse challenge results such as Turnstile. These controls help protect accounts and the platform. The site uses only cookies and browser storage needed for sign-in, security and basic preferences; no advertising trackers are used. On public pages we may use Google Analytics 4 (Google LLC) to measure aggregate site usage (pages viewed, approximate location, device and browser data via Google Analytics cookies), with Google signals and ad personalisation disabled; we use Google Consent Mode (advanced), so the Google tag may load on public pages before you choose, with analytics storage and all advertising consent denied. Until you accept, no analytics cookies or storage are set, but Google may receive cookieless consent and measurement pings (including technical data such as IP address, browser and page visited). Analytics cookies are set only after you accept in our cookie banner, advertising consent is never granted, and page views are never recorded on account, admin, sign-in, cart or checkout pages. You can withdraw consent at any time via Cookie settings; see our Cookie policy.

How information is used

• To review and manage B2B buyer accounts.
• To respond to parts enquiries and prepare quotations.
• To process orders, addresses, shipping coordination and transaction records.
• To verify identity or business information where KYC is required.
• To prevent abuse, investigate security events and meet recordkeeping obligations.

Storage and service providers

Information is processed by the hosting, authentication, database, storage, email and anti-abuse providers used to operate the platform. Payment and carrier providers receive order and delivery details only when those services are used for your transaction. International processing may occur where a provider or shipment requires it.

Protection of verification documents

Uploaded verification documents are held in private storage, checked on upload, and are not publicly accessible or visible to other buyers. Authorised iRef staff open them through short-lived links with additional sign-in verification, and access is logged. No system is perfectly secure, but we apply reasonable safeguards appropriate to the information.

Retention and your choices

We collect only what is needed to run B2B accounts, quotations and orders. Records are retained for as long as needed for account operation, quotations, orders, security, legal obligations and dispute handling. You may ask to access, correct or update your information, or request deletion where retention is not required. Some transaction, audit or legal records may need to be retained.

We intend to handle personal data in line with India's Digital Personal Data Protection framework as its provisions come into effect, and will update this policy as required.

Contact

Privacy questions and requests may be sent to info@irefsupply.com or to iRef Supply LLP at 133, Shanta Industrial Estate, IB Patel Road, Goregaon East, Mumbai 400063, Maharashtra, India