Privacy Policy.

This Privacy Policy explains how Koivu Ventures Pte. Ltd. (“BridgeTrace”, “we”, “us”) handles personal data when you visit bridgetrace.com, submit a sourcing request, apply as a supplier, or work with us on a sourcing and verification engagement.

The data controller is Koivu Ventures Pte. Ltd., 11 Collyer Quay #05-06C The Arcade, Singapore 049317. Privacy inquiries can be sent to kari@bridgetrace.com.

1. Data we collect

1.1 Information you provide

• Sourcing requests: Name, work email, company, requested material, quantity, destination, specifications, timing, and notes.
• Supplier applications: Contact and company details, production location, materials, capacity, export experience, technical-document status, and information you choose to submit.
• Engagement and transaction records: Quotes, invoices, payment status, shipping details, technical documents, laboratory and custody records, and correspondence.
• Communications: Emails, messages, meeting notes, support requests, and feedback.

1.2 Information collected automatically

Our hosting and security providers may process basic technical data such as IP address, browser and device information, requested pages, timestamps, referring page, and diagnostic or security logs.

2. How we use data

• to evaluate and respond to sourcing requests;
• to identify and communicate with suppliers and service providers;
• to prepare quotes, coordinate sampling, testing, documentation, payment, and shipment;
• to maintain evidence, custody, audit, accounting, and legal records;
• to secure, diagnose, and improve the website and service; and
• to comply with law and protect legal rights.

3. Legal bases for EEA and UK data

• Contract: To take steps at your request and perform an agreed engagement.
• Legitimate interests: To operate a B2B sourcing service, maintain supplier and buyer relationships, prevent fraud, secure systems, and improve operations, where those interests do not override your rights.
• Consent: Where we specifically ask for consent, including any non-essential cookies or optional marketing.
• Legal obligation: For tax, accounting, sanctions, customs, regulatory, and other legal requirements.

4. Who receives data

We do not sell personal data.

We may share only the data reasonably needed with:

• relevant suppliers, buyers, laboratories, inspectors, couriers, freight forwarders, customs professionals, insurers, banks, and payment providers involved in a requested engagement;
• Vercel for website hosting and Supabase for database infrastructure;
• email, document, accounting, and professional advisers used to operate the service; and
• authorities or other parties when required by law or necessary to establish, exercise, or defend legal rights.

We do not publish personal supplier contact details, bank details, or buyer contact details in public passports.

5. Cookies and analytics

The public website does not use advertising cookies. Technical cookies may be used for security or authenticated administrative and supplier areas. If non-essential analytics or marketing cookies are introduced, we will update this policy and obtain consent where required.

6. Retention

We retain sourcing inquiries and supplier applications for as long as reasonably needed to assess and follow up the relationship, normally no longer than 24 months without meaningful activity. Engagement, transaction, tax, accounting, evidence, and dispute records may be retained for up to seven years or longer where law or an unresolved claim requires it. Security logs are retained for shorter operational periods set by the relevant provider.

7. Your rights

Depending on your location, you may have rights to access, correct, erase, restrict, or receive your personal data; object to processing; and withdraw consent. These rights can be limited by legal retention duties and other lawful grounds.

Send requests to kari@bridgetrace.com. We may need to verify your identity before acting on a request.

8. International transfers

BridgeTrace is operated by a Singapore company and uses providers that may process data in Singapore, the European Economic Area, the United Kingdom, the United States, Indonesia, and other locations relevant to a transaction. Where required, we use appropriate transfer safeguards such as adequacy decisions or standard contractual clauses.

9. Security

We use reasonable technical and organizational measures, including encrypted transport, access controls, and restricted handling of non-public evidence and contact information. No system is completely secure.

10. Children

BridgeTrace is a business-to-business service and is not directed to children. We do not knowingly collect personal data from anyone under 18.

11. Changes and complaints

We may update this policy as the service and providers change. The date above identifies the current version. You may complain to the data-protection authority in your country if you believe your rights have been infringed.

12. Contact

Koivu Ventures Pte. Ltd.
11 Collyer Quay #05-06C The Arcade, Singapore 049317
Email: kari@bridgetrace.com