This policy is a draft pending review by Fijian counsel. Until finalised, treat it as a statement of intent rather than a binding compliance document.
What we collect
- Account information — your name, email, phone number, and any profile details you add.
- Content you post — listings, messages to other users, photos, CVs.
- Transaction records — invoices we issue you and payments you make.
- Technical logs — IP address, device and browser type, pages visited, for the purposes of security, debugging, and product analytics.
What we never collect
- Card details — we don't accept card payments anywhere.
- Third-party advertising profile data — we don't run third-party ads, so there's no tracker pixel selling your behaviour to anyone.
- Biometrics, location history, or device contact lists.
Where it lives
Your data is stored in a single Supabase project hosted in a Sydney AWS region. Backups are encrypted. Service-role access is restricted to the founder and named ops staff.
How long we keep it
We keep account data while your account is active. If you delete your account, we delete your personally-identifying data within 30 days and retain only the minimum required for accounting and audit (typically invoice metadata for seven years).
Your rights
- Access — request a copy of the personal data we hold about you.
- Correction — fix anything inaccurate in your profile.
- Deletion — close your account and have us delete your personal data.
- Export — download your listings, messages, and invoices.
Email support@tradesfiji.com to exercise any of these.