GTC Privacy Notice

This Privacy Notice describes how Global Trade Collective LLC (“GTC,” “we,” “us,” or “our”) handles personal data in connection with globaltradecollective.com, membership applications, accounts, directories, communications, events, support, verification, tracking, quotations, transactions, and related GTC services.

GTC generally acts as the controller or business when it decides why and how personal data is handled. GTC may act as a processor or service provider when it handles data only for another organization under that organization’s instructions and a written agreement.

Depending on the relationship and requested service, GTC may collect business contact and account information; organization, ownership, authority, licensing, and profile information; identity and KYC documents; sanctions, fraud, and compliance information; directory publication choices; communications and support records; quotations, shipment references, tracking events, transaction instructions, invoices, and payment status; event and community participation; marketing preferences; and device, browser, IP, authentication, cookie, and security-log information.

We seek to limit sensitive information to what is reasonably necessary. Payment-card details are handled by approved payment providers rather than stored in ordinary GTC application records. Do not send passwords, complete payment-card data, or unnecessary identity documents by ordinary email or WhatsApp.

We may receive personal data directly from an individual; the individual’s organization; Members, applicants, customers, vendors, carriers, logistics providers, and commercial counterparties; payment, identity, compliance, sanctions, fraud-prevention, tracking, hosting, analytics, and communications providers; event partners; professional advisers; public corporate, professional, government, and sanctions records; and website technologies.

An organization that provides personal data about its personnel, customers, vendors, or representatives is responsible for having authority to do so and for providing any notice required by applicable law.

We use personal data to review applications; create and secure accounts; administer membership, billing, directories, badges, events, and communities; verify identity, authority, licensing, and eligibility; prevent fraud and sanctions violations; provide support; operate tracking and workflow tools; prepare and administer quotations and transactions; process payments and settlements through approved providers; maintain records; enforce agreements; investigate disputes or security incidents; protect GTC, Members, and counterparties; comply with law; and improve our services.

Where a law requires a legal basis, we rely as appropriate on performance of a contract or requested steps before a contract, legal obligations, legitimate interests in operating and protecting a B2B network, and consent where we specifically request it. We do not use consent where another legal basis is more appropriate merely because a person viewed a notice.

GTC may use internal criteria and approved service providers to assist with identity, document, sanctions, fraud, licensing, and commercial-risk review. GTC personnel remain responsible for final membership and Verified-status decisions under the applicable workflow.

If applicable law grants rights concerning a decision based solely on automated processing that produces legal or similarly significant effects, an individual may request information, human review, and an opportunity to contest the decision. GTC does not represent that ordinary membership scoring is a governmental license determination.

Company and contact information designated for an approved directory profile may be visible to Members or the public according to the selected publication setting. Public information can be copied or indexed by others. GTC therefore limits publication to fields approved through the applicable workflow and recommends using business contact details rather than private personal details.

Community participants may see the name, phone number, profile information, messages, and other information made visible by the relevant third-party platform and the participant’s settings. Optional WhatsApp or marketing participation is separate from required membership communications.

We may disclose personal data as reasonably necessary to GTC personnel and contractors; the individual’s organization; Members, customers, vendors, carriers, customs brokers, warehouses, and transaction counterparties; hosting, security, communications, support, KYC, sanctions, fraud, tracking, analytics, document, and payment providers; insurers and professional advisers; event partners; corporate transaction participants; and governmental, regulatory, law-enforcement, or judicial authorities where lawfully required or permitted.

Service providers may use protected data only to provide the contracted service, secure it, comply with law, and perform other processing expressly authorized by the applicable agreement. GTC does not authorize a service provider to sell protected GTC or Member personal data or use it for the provider’s unrelated advertising.

Payment providers receive the information needed to create checkout sessions, process payments, prevent fraud, handle refunds or chargebacks, and maintain legally required financial records. GTC receives payment status and transaction references, but ordinary GTC records should not contain complete card credentials.

Tracking providers may receive a shipment identifier, carrier, mode, and other minimum information needed to return events. GTC seeks to avoid sending unnecessary Member, customer, or cargo data. Tracking information may be processed in countries where the relevant provider operates.

GTC operates a global network and may process personal data in the United States and in other countries where Members, counterparties, or service providers operate. Privacy protections may differ between countries.

Where applicable law requires a transfer safeguard, GTC will use an available lawful mechanism appropriate to the transfer, such as an adequacy decision, approved contractual clauses, or another permitted mechanism. Contact us for information about the safeguard applicable to a specific transfer. This notice does not claim that GTC has appointed a European or United Kingdom representative or data-protection officer unless GTC separately publishes verified appointment details.

We retain personal data only as long as reasonably necessary for the purpose collected and for legitimate membership, transaction, KYC, licensing, accounting, tax, security, fraud-prevention, dispute, litigation, sanctions, and regulatory records. Retention depends on the record type, relationship, transaction lifecycle, legal requirements, limitation periods, and active disputes or legal holds.

When a record is no longer required, GTC deletes, anonymizes, or securely restricts it. A limited suppression record may be retained after a marketing opt-out so the preference can be honored. Backup and audit records may persist for a limited period before secure rotation.

GTC uses administrative, technical, and organizational safeguards designed for the nature of the information, including access controls, authentication, encryption in transit, private document storage, activity logging, least-privilege review, and vendor controls where appropriate. No system is completely secure.

GTC investigates suspected incidents and will notify affected parties and authorities when and within the time applicable law requires. Report a suspected security or privacy issue promptly to membership@globaltradecollective.com with “Security” or “Privacy” in the subject line.

GTC uses necessary cookies for authentication, security, fraud prevention, and preferences. Optional analytics is disabled until the visitor accepts analytics through the cookie banner. A visitor can decline analytics and can reopen Cookie Settings from the website footer.

If a browser sends a recognized Global Privacy Control signal, GTC treats that signal as a request to keep optional analytics disabled for that browser. As of this version, GTC does not sell personal data for money or use personal data for cross-context behavioral advertising. If that practice changes, GTC will update this notice and provide legally required choices before the change applies.

Optional marketing consent is separate from acceptance of the Membership Terms. Marketing recipients may unsubscribe using the link in a qualifying message or by contacting GTC. An opt-out does not stop necessary application, account, security, compliance, billing, transaction, or service communications.

GTC may communicate with business contacts where permitted by applicable law and will honor applicable identification, unsubscribe, and suppression requirements.

Depending on location and applicable law, an individual may have rights to access, know, correct, delete, restrict or object, obtain portability, withdraw consent, opt out of qualifying sale, sharing, targeted advertising, or profiling, request human review of qualifying automated decisions, appeal a request decision, or complain to a regulator.

Submit a request to membership@globaltradecollective.com with “Privacy Request” in the subject line. Include enough information to identify the relationship and request, but do not send unnecessary identity documents by ordinary email. GTC may verify identity, authority, jurisdiction, and the relevant organization before acting. Rights may be limited by legal obligations, security, fraud prevention, privileged material, transaction records, legal claims, or other lawful exceptions.

GTC will respond within the time applicable law requires and will not unlawfully discriminate or retaliate because an individual exercised a privacy right. An authorized agent may submit a request where applicable law permits, subject to appropriate proof of authority.

GTC provides B2B services for organizations and adult business representatives. The services are not directed to children, and GTC does not knowingly collect personal data directly from children in violation of applicable law. Contact us if you believe a child provided personal data improperly.

GTC may update this notice as services, vendors, or legal requirements change. The current version and effective date appear at the top. Material changes will be communicated where applicable law requires notice or consent. Prior versions will be retained for audit and made available on request where appropriate.

Privacy questions and requests may be sent to membership@globaltradecollective.com. Use “Privacy Request” for a rights request, “Privacy Appeal” for an appeal where available, or “Security” for a suspected incident.