This policy explains how ADS Global Limited (“ADS Global”, “we”) handles personal data when you use this website or contact us. It is written to meet the Nigeria Data Protection Act 2023 (NDPA), China's Personal Information Protection Law (PIPL) and, for visitors in the EU/UK, the GDPR.
This policy is a starting draft and should be reviewed by a qualified lawyer before launch. Items marked [CONFIRM: …] need company details.
Who is responsible
ADS Global operates through Shenyang Sadiq International Trade Co., Ltd. — Shenyang, China; Liangshan, Shandong, China and Abubakar Dahiru Sadiq Global Ltd. (RC 8079004) — Abuja, Nigeria; Kano, Nigeria. Each company is the data controller for enquiries handled by its offices. Contact for privacy matters: globalltdads@gmail.com [CONFIRM: dedicated privacy contact / Data Protection Officer, if appointed].
What we collect
- Enquiry details you send us through the quote, contact or partner forms: name, company, email, phone/WhatsApp, country, product and shipping details, and any files you attach.
- Technical data needed for security: a one-way, salted hash of your IP address (used for rate limiting — we don't store the address itself), browser user-agent, and the result of the Cloudflare Turnstile anti-spam check.
- Admin accounts: for our staff only — email, name and sign-in records.
We don't use advertising or analytics cookies, and we don't sell personal data.
Why we use it (lawful basis)
- To answer your enquiry and prepare quotations — steps you ask for before entering a contract (NDPA section 25; PIPL article 13; GDPR art. 6(1)(b)), and your consent where the law requires it.
- To protect the website from spam and abuse — our legitimate interests (NDPA section 25; GDPR art. 6(1)(f)).
- To keep business records required by law, such as tax and customs records — legal obligation.
Who we share it with
Only with service providers that process data on our behalf under contract, and only as needed:
- Supabase (database and staff sign-in) — hosting region [CONFIRM: Supabase project region]
- Vercel (website hosting)
- Resend (sending enquiry emails)
- Cloudinary (private storage of files you attach)
- Cloudflare Turnstile (spam protection)
- Sentry (error monitoring; configured not to collect form contents)
When you request a quotation, we may share the product specification (not your contact details unless needed) with prospective suppliers and logistics partners to obtain prices.
International transfers
ADS Global operates in both Nigeria and China, and our service providers may process data in other countries (for example the EU or USA). Your enquiry may therefore be accessed by our team in China and in Nigeria. We rely on appropriate safeguards for these transfers, such as standard contractual clauses, and for personal information leaving China we follow the PIPL cross-border requirements [CONFIRM: PIPL mechanism used, e.g. standard contract filing]. Under the NDPA we transfer data abroad only where an adequate level of protection or another lawful basis applies.
How long we keep it
Enquiries that don't lead to business: up to 24 months, then deleted. Records linked to orders: as long as the law requires for commercial and tax records [CONFIRM: retention periods]. Rate-limit records: up to 2 days.
Your rights
Depending on where you live, you can ask to access, correct, delete or receive a copy of your data, object to or restrict processing, and withdraw consent at any time. Email globalltdads@gmail.com. We reply within the time the applicable law requires. You can also complain to the Nigeria Data Protection Commission (NDPC), the Cyberspace Administration of China, or your local data protection authority.
Security
Data is encrypted in transit (HTTPS). Database access is restricted with row-level security so only authorised staff can read enquiries; attachments are stored privately and opened via short-lived signed links.
Cookies and local storage
See our cookie notice.
Changes
We'll post any changes on this page and update the date above.