Privacy Policy

This Privacy Policy explains how SEARCHES collects, receives, uses, stores, discloses, transfers, and otherwise processes personal data when you visit our website, create an account, publish a business profile, use our search facilities, submit a business inquiry or Request for Quotation (RFQ), communicate with other users, contact our support team, or use any other service covered by this Policy.

This Policy applies to visitors, registered users, business owners, authorized company representatives, buyers, suppliers, manufacturers, corporate clients, and other individuals whose personal data we process in connection with the Platform.

We recognize the importance of protecting personal data and aim to handle it transparently, responsibly, and securely in accordance with applicable data-protection laws.

Please read this Policy carefully. If you do not agree with our data practices, you should not provide optional personal data or use features that require such processing. Some information may nevertheless be processed where permitted or required by applicable law.

The entity responsible for the relevant processing of personal data is:

• Legal Entity Name: Searches Limited
• Trading Name: Searches
• Website: https://searches.ltd
• Business Address: Niketan Ma Garden, Flat: 502, House No: 145, Road No: 03, Block: A, Niketan Housing Society, Gulshan 1, Dhaka - 1212, Bangladesh
• Privacy Contact: [email protected]

In this Policy, “SEARCHES,” “we,” “us,” and “our” refer to the above entity.

Depending on the applicable law and the particular processing activity, SEARCHES may act as a data controller, data fiduciary, or another legally recognized responsible entity. Where we process personal data on behalf of a corporate customer or another organization under a separate agreement, our role and responsibilities will be determined by that agreement and applicable law.

If SEARCHES operates through a different legal entity in the future, this Policy will be updated to identify the relevant entity and explain any material changes in responsibility.

The information we collect depends on how you interact with SEARCHES, which features you use, and the legal requirements applicable to the relevant activity.

3.1Account and Registration Information

We may collect:

• Full name.
• Business email address and telephone number.
• Login credentials and authentication-related information.
• Country and general business location.
• Account type and selected business role.
• Account preferences and communication settings.
• Information necessary to secure, administer, or recover your account.

Passwords should be stored using appropriate secure password-hashing mechanisms rather than in readable form.

3.2Business Profile Information

When you create or manage a business profile, we may collect:

• Business or trading name.
• Business registration and licence information.
• Business address and operating locations.
• Company website and authorized business contact details.
• Industry, business category, and business description.
• Products, services, and business capabilities.
• Manufacturing, sourcing, distribution, import, or export information.
• Authorized business representatives.
• Business logo, profile image, and cover image.
• Relevant certificates or business credentials.
• Other information that you choose to submit for business discovery or networking.

Some business information may be displayed publicly if you submit it for publication. Personal information included in a business profile will be handled in accordance with this Policy and applicable law.

3.3Business Verification Information

Where business verification or document review is available, we may process information such as:

• Business registration certificates.
• Trade licences and relevant permits.
• Business address evidence.
• Information identifying authorized business representatives.
• Documents supporting specific business claims.
• Verification results, review notes, timestamps, and verification status.
• Communications concerning verification requests, corrections, or appeals.

We will seek to limit the information collected to what is reasonably necessary for the relevant verification purpose.

Identity documents, private verification records, and other sensitive information will not automatically become public merely because they were submitted for verification.

Where required by applicable law, we will obtain appropriate consent or establish another lawful basis before collecting or processing personal data for verification.

3.4Buyer, Supplier, and RFQ Information

When you contact another business, submit an inquiry, request a quotation, or respond to an RFQ, we may process:

• Your name and business contact details.
• Your company and business role.
• Product or service requirements.
• Requested quantities and specifications.
• Commercial requirements and delivery preferences.
• Inquiry messages and attachments.
• Quotations and responses submitted through the Platform.
• Relevant communication and transaction-related records.

You should not include unnecessary personal data, confidential information, financial credentials, or sensitive documents in an inquiry.

3.5Communications and Customer Support

We may process information you provide when contacting SEARCHES, including:

• Support requests and complaints.
• Emails and messages sent to our team.
• Information concerning account access, verification, or profile corrections.
• Reports of suspected fraud, infringement, or misuse.
• Records of our responses and actions taken.

We may retain appropriate records to resolve complaints, protect users, comply with legal obligations, and maintain an auditable support process.

3.6Technical and Usage Information

When you access the Platform, we may collect technical information, subject to applicable law and your privacy choices, including:

• IP address.
• Browser type and version.
• Device and operating-system information.
• Website pages visited and relevant interaction events.
• Approximate location inferred from technical information, where permitted.
• Date, time, and duration of access.
• Security logs and diagnostic information.
• Cookie identifiers and similar online identifiers.

We use this information for purposes such as website operation, security, troubleshooting, performance analysis, and service improvement.

3.7Payment and Billing Information

If SEARCHES introduces paid subscriptions, advertising, premium listings, or other paid services, we may process billing-related information such as:

• Billing contact and business information.
• Subscription status and service plan.
• Invoice and payment records.
• Payment amount, currency, and payment status.
• Relevant tax and accounting information.

Where a third-party payment provider processes card details or other payment credentials, those details may be handled directly by that provider under its own applicable terms and privacy policy.

SEARCHES should not collect or retain complete payment credentials unless necessary, lawful, and appropriately secured.

3.8Information Received from Other Sources

Where permitted by applicable law, we may receive business information from:

• Authorized company representatives.
• Public business registries.
• Official company websites.
• Business associations and authorized partners.
• Verification or service providers.
• Other users submitting legitimate business references or complaints.
• Publicly available business sources.

We will consider the source, reliability, purpose, and applicable restrictions when using such information.

Public availability does not automatically authorize every use, disclosure, or republication of personal data.

SEARCHES may process personal data for the following purposes, subject to applicable law and the relevant lawful basis:

4.1Account Administration

To create and maintain accounts, authenticate users, manage access, recover accounts, and provide requested Platform features.

4.2Business Discovery and Networking

To display authorized business profiles, support search functionality, connect users with relevant businesses, and facilitate legitimate business inquiries.

4.3Business Verification

To review submitted information, verify specific business details, maintain verification records, detect inconsistencies, and communicate verification decisions.

4.4Buyer and Supplier Communication

To deliver inquiries, support RFQ processes, enable business communication, and provide notifications related to requested services.

4.5Security and Fraud Prevention

To detect suspicious activity, prevent impersonation, investigate reported fraud, protect accounts, maintain system integrity, and address security incidents.

4.6Customer Support and Dispute Handling

To respond to questions, investigate complaints, correct inaccurate information, review appeals, and maintain appropriate case records.

4.7Billing and Commercial Administration

Where paid services are available, to manage subscriptions, invoices, payments, accounting, cancellations, and related administrative activities.

4.8Website Improvement and Analytics

To understand how users interact with the Platform, identify technical problems, improve usability, and evaluate the effectiveness of features, subject to applicable consent and privacy requirements.

4.9Marketing and Business Communications

Where permitted by applicable law, we may send service updates, business information, product announcements, or promotional communications.

You may opt out of promotional communications through the available unsubscribe mechanism or by contacting us. Opting out of promotional communications does not necessarily stop essential service, security, billing, or legal notices.

4.10Legal and Regulatory Compliance

To comply with applicable laws, lawful requests, regulatory obligations, recordkeeping requirements, and legitimate legal proceedings.

4.11Other Purposes

We may process personal data for another purpose where we have a valid lawful basis, provide any required notice, and obtain consent where required.

We will not knowingly use personal data for a materially incompatible purpose without taking the steps required by applicable law.

The lawful basis for processing depends on the type of personal data, the purpose of processing, the user's location, and the law applicable to the relevant activity.

Where applicable, we may rely on:

• Consent, where freely given, specific, informed, and valid under the applicable law.
• Performance of a contract or steps requested before entering into a contract.
• Compliance with a legal obligation.
• Legitimate interests, where recognized by applicable law and subject to any required necessity and proportionality assessment.
• Another lawful basis expressly permitted by the relevant legislation.

Where consent is required, we will seek it before the relevant processing begins, subject to applicable legal exceptions.

Where consent is the basis for processing, you may withdraw it through the available mechanism or by contacting us. Withdrawal does not make prior lawful processing invalid, and it does not prevent processing that has another valid lawful basis.

We will not treat consent as freely given merely because a user accepts general Terms of Service if separate consent is required for a specific purpose.

SEARCHES is designed to help businesses become discoverable by other businesses.

If you submit information for publication in a public business profile, certain details may be visible to website visitors, registered users, search engines, and other parties, depending on the profile settings and the applicable service.

Public business information may include:

• Business name and business description.
• Business category and operating location.
• Business website and designated business contact details.
• Products, services, and authorized promotional materials.
• Verification indicators and information about the scope of verification.
• Business updates and other content you choose to publish.

Please do not publish personal or confidential information unless you are authorized to do so and understand the potential consequences.

We aim to distinguish public business information from private account information and verification records.

Private verification documents, passwords, authentication secrets, and confidential support records must not be displayed publicly by default.

Information that has been made public may be copied, indexed, cached, or retained by third-party services. Removing information from SEARCHES may not immediately remove copies held by external websites or search engines.

Where applicable, you may request correction or removal of personal information through the procedures described in this Policy.

SEARCHES does not treat personal data as a commodity to be sold indiscriminately. We may disclose or make information available in the following circumstances, subject to applicable law.

7.1With Other Platform Users

Where necessary to provide a requested business inquiry, networking feature, or other service, we may share relevant business and contact information with the intended recipient.

For example, when you submit an inquiry to a supplier, the supplier may receive the information necessary to respond to that inquiry.

We aim to limit such disclosure to information relevant to the requested interaction.

7.2With Service Providers and Processors

We may engage service providers to support:

• Website hosting and cloud infrastructure.
• Database administration and secure storage.
• Authentication and account security.
• Email and notification delivery.
• Business verification.
• Customer support.
• Analytics and performance monitoring.
• Payment processing and billing, where applicable.
• Security monitoring and technical maintenance.

Where required by applicable law, we will use appropriate contractual safeguards, access restrictions, and data-processing arrangements.

Service providers should process personal data only for authorized purposes and in accordance with the applicable agreement and law.

7.3With Corporate Customers and Business Partners

Where necessary to deliver a requested service or business collaboration, we may share relevant information with an authorized corporate customer or partner, subject to the agreed purpose, applicable privacy requirements, and any required consent.

We will not assume that a business partner is automatically entitled to all information associated with an account or business profile.

7.4For Legal and Regulatory Reasons

We may disclose information where reasonably necessary and legally permitted or required to:

• Comply with applicable law or a lawful order.
• Respond to competent regulatory or law-enforcement authorities.
• Investigate suspected fraud or unlawful activity.
• Protect the rights, safety, security, and property of users or SEARCHES.
• Establish, exercise, or defend legal claims.

We will assess the legitimacy and scope of such requests in accordance with applicable law.

7.5Business Transfers and Corporate Restructuring

If SEARCHES undergoes a merger, acquisition, restructuring, financing, or sale of relevant business assets, personal data may be transferred as part of that process, subject to applicable law and appropriate safeguards.

Where required, we will provide notice or obtain consent before a material change in data processing takes effect.

7.6With Your Direction or Consent

We may disclose information when you direct us to do so or where you have provided valid consent for the relevant disclosure.

7.7No Unrestricted Sale of Personal Data

SEARCHES does not intend to sell personal data indiscriminately to third parties.

If a future service involves data sharing, targeted advertising, or another activity that qualifies as a sale, sharing, or comparable disclosure under applicable law, we will assess the relevant requirements, provide necessary notices, and obtain consent or offer opt-out rights where required.

SEARCHES is designed to support business discovery across countries. As a result, personal data may be accessed, stored, or processed in more than one jurisdiction, depending on the Platform's infrastructure and service providers.

International transfers may involve hosting providers, technical service providers, business communication features, or other authorized recipients.

Where applicable law restricts international transfers, SEARCHES will use an appropriate lawful transfer mechanism and any required safeguards before making the transfer.

Depending on the applicable legal framework, safeguards may include:

• An adequacy decision or recognized equivalent.
• Standard Contractual Clauses or other approved contractual mechanisms.
• Binding corporate rules or another recognized transfer mechanism.
• Specific consent or another lawful derogation, where applicable.
• Additional technical and organizational safeguards required by law.

For example, transfers of personal data protected by EU/EEA data-protection law to a country outside the EEA may require an appropriate mechanism under the GDPR. The applicable mechanism depends on the transfer circumstances and the recipient jurisdiction.

Where required, users may request further information about relevant transfer safeguards by contacting our Privacy Contact.

We will not assume that a user's consent to the general Terms of Service automatically satisfies every legal requirement for an international data transfer.

SEARCHES retains personal data only for as long as reasonably necessary for the purposes described in this Policy, subject to applicable law, contractual obligations, and legitimate recordkeeping requirements.

Retention periods depend on the type of information and why it is processed.

• Account information: While the account remains active and for a necessary period after closure
• Public business profile: While the profile is active or otherwise lawfully published
• Verification documents: For the period necessary to complete verification, address disputes, and meet applicable legal requirements
• Inquiries and communications: For the period necessary to provide the service, resolve complaints, and maintain required records
• Billing and accounting records: For the period required by applicable financial, tax, and recordkeeping laws
• Security and access logs: For a defined period proportionate to security and operational needs
• Privacy requests and complaints: For the period necessary to investigate, document, and resolve the matter and meet legal obligations
• Marketing preferences: For as long as needed to respect and demonstrate the user's communication choices

The specific retention periods will be determined and documented in SEARCHES' internal retention schedule.

When personal data is no longer necessary, we will delete, anonymize, or otherwise dispose of it in accordance with applicable law and our retention procedures.

Some records may need to be retained after account closure to comply with legal obligations, establish or defend legal claims, investigate fraud, or maintain security. Where appropriate, such records will be restricted from ordinary use.

Backup copies may remain for a limited period until they are securely overwritten or deleted through the applicable backup lifecycle.

SEARCHES aims to implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss, destruction, or misuse.

Depending on the nature and risk of the processing, these measures may include:

• Secure authentication and password hashing.
• Role-based access controls.
• Multi-factor authentication for privileged accounts.
• Encryption in transit and, where appropriate, at rest.
• Secure storage of verification documents.
• Access logging and administrative audit trails.
• Security updates and vulnerability management.
• Regular backups and recovery testing.
• Staff confidentiality obligations and appropriate access training.
• Incident detection, investigation, and response procedures.
• Periodic review of security risks and service providers.

Access to personal data should be limited to personnel and service providers who require it for authorized purposes.

No website, database, communication system, or storage method can be guaranteed to be completely secure. However, SEARCHES will take measures appropriate to the risks and applicable legal requirements.

Users should protect their account credentials, use secure devices, and report suspected account compromise promptly.

If SEARCHES becomes aware of a personal data breach affecting information under its responsibility, we will investigate the incident and take reasonable steps to contain, assess, and mitigate the impact.

Where required by applicable law, SEARCHES will notify the relevant authority, affected individuals, corporate customers, or other appropriate parties within the applicable time limits.

Depending on the incident, response measures may include:

• Restricting unauthorized access.
• Resetting credentials or revoking compromised access.
• Securing affected systems.
• Preserving relevant evidence.
• Assessing the categories and volume of data affected.
• Determining the potential consequences for affected individuals.
• Providing appropriate guidance and notifications.
• Taking corrective action to reduce the risk of recurrence.

Users who suspect a data breach or unauthorized disclosure should contact:

Security Contact: [email protected]

Do not include passwords, payment credentials, or unnecessary identity documents in a security report.

Depending on the applicable law, you may have rights concerning your personal data, including the right to:

• Request information about whether we process your personal data.
• Request access to relevant personal data.
• Request correction of inaccurate or incomplete information.
• Request deletion or erasure where legally available.
• Withdraw consent where processing is based on consent.
• Object to or request restriction of certain processing where applicable.
• Request portability of certain data where legally available.
• Opt out of certain marketing communications.
• Challenge certain decisions or seek review where provided by law.
• Submit a complaint to a competent data-protection authority.

These rights are subject to applicable legal conditions, exceptions, and restrictions.

For example, SEARCHES may need to retain particular records to comply with a legal obligation or establish, exercise, or defend a legal claim. In such circumstances, a deletion request may not result in immediate or complete erasure.

Where required by law, we will explain the basis for refusing or limiting a request.

How to Submit a Privacy Request

Send your request to:

Privacy Contact: [email protected]

Please include:

• Your name and relevant account or business details.
• A description of the personal data or processing activity concerned.
• The specific action you are requesting.
• Information reasonably necessary to verify your identity or authority.

We may request additional information where reasonably necessary to verify your identity or prevent unauthorized disclosure.

We aim to respond within the period required by applicable law. Where the request is complex or an extension is legally permitted, we will provide any required notice.

You may also have the right to lodge a complaint with the competent authority in the jurisdiction applicable to your personal data.

SEARCHES may use cookies, local storage, pixels, and similar technologies to operate the website, maintain sessions, protect accounts, remember preferences, and understand website performance.

Depending on the technology used, such tools may collect identifiers, device information, interaction events, or other technical information.

Cookies may be categorized as:

• Strictly Necessary: Technologies required for essential functions, such as authentication, security, or maintaining a session.
• Functional: Technologies that remember preferences or improve the user experience.
• Analytics: Technologies used to understand traffic, performance, and usage patterns.
• Advertising or Marketing: Technologies used for advertising measurement, audience analysis, or promotional purposes.

Non-essential cookies or similar technologies will be handled in accordance with the consent and privacy requirements applicable to the relevant user and jurisdiction.

Where consent is required, you will be provided with an appropriate choice mechanism. You may change your preferences through the available cookie settings.

Deleting or blocking cookies may affect the availability or functionality of some Platform features.

Further information will be provided in our Cookie Policy and cookie-preference interface.

SEARCHES may send service-related communications necessary to operate your account, deliver requested services, notify you about security matters, or provide important legal updates.

Where permitted by applicable law, we may also send promotional communications about Platform features, business opportunities, events, or services.

You may unsubscribe from promotional emails through the unsubscribe link or by contacting [email protected].

Unsubscribing from promotional messages will not necessarily stop essential account, security, legal, or service communications.

We will process marketing preferences in accordance with applicable law and maintain appropriate records of opt-out requests.

The Platform may contain links to external websites, social media services, verification providers, payment services, or other third-party resources.

SEARCHES does not control the independent privacy practices of those third parties.

When you visit an external website or use a third-party service, that provider's own privacy policy and terms may apply.

We encourage you to review the relevant policies before providing personal data to an external service.

The presence of a third-party link does not necessarily mean that SEARCHES endorses the provider or guarantees its data-protection practices.

Where SEARCHES provides services to a corporate client or works with a business partner, relevant personal data may be processed under a separate contract or service arrangement.

Such arrangements may specify:

• The purposes and scope of processing.
• The roles and responsibilities of each party.
• Permitted data access and disclosure.
• Confidentiality and security requirements.
• Retention and deletion obligations.
• International transfer safeguards.
• Procedures for responding to privacy requests and security incidents.

Where SEARCHES processes personal data on behalf of a corporate customer, the relevant contract and applicable law will determine the respective responsibilities of SEARCHES and that customer.

Corporate customers remain responsible for ensuring that they have the necessary authority or lawful basis to provide personal data to SEARCHES.

A corporate account does not automatically authorize unrestricted access to the personal data of employees, representatives, or other individuals.

SEARCHES is primarily intended for business users and is not designed as a service for children.

We do not knowingly seek to collect personal data from children in circumstances where doing so is prohibited by applicable law.

If you believe that a child has provided personal data to SEARCHES without the required authorization or lawful basis, please contact [email protected].

We will review the request and take appropriate action in accordance with applicable law.

The applicable age threshold and any consent requirements will be determined according to the relevant jurisdiction and service.

SEARCHES may serve businesses and users in multiple countries. Privacy laws differ by jurisdiction and may apply depending on the user's location, the nature of the service, and the processing activity.

Users located in the European Economic Area, the United Kingdom, the United States, or other jurisdictions may have additional rights under the applicable local law.

Where a specific law applies, SEARCHES will provide the notices, mechanisms, safeguards, and rights required by that law.

This Policy is not intended to exclude or reduce any mandatory privacy rights available under applicable law.

Where required, we may provide additional jurisdiction-specific privacy notices, representative contact information, or mechanisms for exercising local rights.

We may update this Privacy Policy to reflect changes in:

• Our services or business model.
• The categories of personal data processed.
• Our technology, security measures, or service providers.
• Applicable laws or regulatory requirements.
• Our retention, disclosure, or international transfer practices.

The current version will be published on the Platform with its effective date or last-updated date.

If a change materially affects the way we process personal data, we will provide notice or obtain renewed consent where required by applicable law.

Where a new purpose requires consent, publication of an updated Policy alone will not replace that consent.

We encourage users to review this Policy periodically.