ChinaTradia ("we," "us," "our") operates the trademark professional network at chinatradia.com. We are the data controller for personal data you provide to us, except where a professional you engage independently controls data you share with them directly.
When you sign up, we collect your email address, username, password (stored as a one-way hash), and your selected account type (brand owner, professional, freelancer, or firm). If you sign in with Google, we receive your name, email, and profile picture from Google.
If you create a public profile (typically for professionals), you may add: bio, firm name, website URL, business email, languages spoken, jurisdictions you practice in, specializations, photo, and pricing packages. This information is public on your profile page.
For professional verification, we confirm your business website ownership and verify your business email via a one-time code. We do not require bar membership numbers or government IDs.
Trademark requests, quotes, proposals, comments, questions, answers, hashtags, news posts, and any photos you upload are stored on our servers. Public posts appear in feeds; private messages are visible only to you, the recipient, and (under audit) our moderation team in cases of reported abuse.
Messages between users on the platform, content of contact form submissions, and your interaction history (sent quotes, accepted quotes, conversation threads) are stored to provide the service.
We automatically collect: IP address, browser type and version, operating system, device type, referrer URL, pages visited, and timestamps. We use IP address to infer your country (not city) so we can display the right currency, language, and your country flag. We use Cloudflare's CF-IPCountry header where available, or a reverse-IP lookup as fallback.
If you purchase credits or use paid features, payment processors (Stripe, PayPal) collect and process your payment information. We never see or store your full card number; we only receive a transaction reference.
| Purpose | Legal basis (GDPR) |
|---|---|
| Provide the marketplace (matching brand owners with pros, sending quotes, processing payments) | Contract performance |
| Verify professional credentials | Contract performance / legitimate interest in marketplace integrity |
| Operate moderation and abuse prevention systems | Legitimate interest in safety / legal obligation |
| Send transactional emails (signup, password reset, quote received, message received) | Contract performance |
| Send product updates and announcements | Consent (you can opt out anytime) |
| Detect and prevent fraud, spam, and platform abuse | Legitimate interest |
| Aggregate analytics on platform usage (no personal IDs) | Legitimate interest |
| Comply with legal obligations (tax, court orders) | Legal obligation |
We share data only in these specific situations:
We do not sell your personal data. We do not share your data with advertisers. We do not run third-party advertising trackers.
We use a minimal set of cookies:
We do not use Google Analytics, Facebook Pixel, or third-party advertising trackers.
| Data type | Retention |
|---|---|
| Account data (active accounts) | Until you delete your account |
| Account data (deleted accounts) | Soft-deleted for 30 days, then permanently erased except for legal/audit records |
| Trademark search logs | 90 days for telemetry, then auto-purged |
| Geolocation cache | 24 hours |
| Moderation audit log (DM reads, account actions) | 7 years (legal defense and dispute resolution) |
| Payment records | 7 years (tax law) |
| Public posts and comments | Until you delete them or your account |
We protect your data with: TLS encryption in transit, bcrypt hashing for passwords, SQL injection protection via prepared statements, CSRF tokens on all state-changing forms, rate limiting on sensitive endpoints, isolated server environments, and regular security reviews. No system is 100% secure — if we detect a breach affecting your data, we will notify you within 72 hours as required by law.
You can: log in to view, edit, or delete your profile and content; export your data on request; close your account at any time.
You have the right to: access your data; rectify inaccurate data; erase your data ("right to be forgotten"); restrict processing; object to processing based on legitimate interest; data portability; and lodge a complaint with your local data protection authority.
You have the right to: know what personal information we collect, sell, or disclose; request deletion of your personal information; opt out of any "sale" of personal information (note: we do not sell). California residents can also designate an authorized agent to make these requests on their behalf.
To exercise any of these rights, email privacy@chinatradia.com from the email address associated with your account. We respond within 30 days.
Our servers are located in regions selected for performance and compliance. If you access ChinaTradia from outside our hosting region, your data crosses international borders. For EU/UK users, transfers to non-adequate jurisdictions are protected by Standard Contractual Clauses (SCCs) with our service providers.
ChinaTradia is not directed to children under 16, and we do not knowingly collect data from anyone under 16. If you believe a child has signed up, please contact privacy@chinatradia.com and we will delete the account promptly.
We may update this policy as the platform evolves or as the law requires. Material changes will be announced via in-app notification and email at least 14 days before they take effect. The "Last updated" date at the top reflects the most recent revision.
For privacy questions, exercising your rights, or to report a privacy concern: privacy@chinatradia.com
For general support: support@chinatradia.com