Privacy Statement
Southern Sourcing Supply Pte. Ltd. is committed to protecting the personal and business data of all platform users. This Privacy Statement explains how we collect, use, store, and protect your information, and how you can exercise your data rights. It applies to our website, platform, mobile application, and all associated services including SMS communications.
1. Overview
Southern Sourcing Supply ("we", "us", "our") is the data controller for personal data collected through our platform at southernsourcingsupply.com. We operate a B2B global sourcing marketplace connecting buyers and verified suppliers across warehousing, logistics, and industrial supply sectors.
This Privacy Statement governs data collected from: registered buyers and suppliers, visitors to our website, individuals who subscribe to SMS or email communications, and participants in sourcing events, webinars, or surveys we host.
We comply with Singapore's Personal Data Protection Act 2012 (PDPA), the EU General Data Protection Regulation (GDPR), the US Telephone Consumer Protection Act (TCPA), the California Consumer Privacy Act (CCPA), and CTIA A2P 10DLC messaging guidelines.
2. Data We Collect
We collect the following categories of data:
| Category | Examples | How Collected |
|---|---|---|
| Account Data | Name, email, password, company name, job title | Registration form |
| Business Data | Company registration, tax ID, industry, trade licences | Onboarding & KYB process |
| Contact Data | Mobile phone number, address, country | Account settings, opt-in forms |
| Transaction Data | RFQs, orders, payment records, trade documents | Platform activity |
| Communication Data | Messages, emails, SMS opt-in/out records | In-platform messaging, SMS consent |
| Usage Data | Pages visited, search queries, features used, session duration | Cookies, analytics tools |
| Technical Data | IP address, browser type, device ID, location (general) | Automatic collection |
| Marketing Data | Email/SMS preferences, campaign responses | Consent forms, unsubscribe actions |
We do not knowingly collect sensitive personal data (e.g. biometric data, health records, racial or ethnic origin) unless required for specific compliance checks such as sanctions screening.
3. SMS Data Collection & Use
This section specifically addresses how we collect and use your mobile phone number and associated data for SMS communications, in compliance with TCPA, CTIA guidelines, and PDPA requirements.
What SMS Data We Collect
- Mobile phone number — collected when you provide it during registration, account setup, or by opting in via a web form or keyword SMS
- Opt-in date, time, and method — recorded as proof of consent for regulatory compliance
- Opt-out date and method — recorded when you reply STOP or withdraw consent
- Message delivery status — whether messages were delivered, failed, or bounced
- Inbound SMS responses — your replies such as STOP, START, HELP, or conversational responses to transactional threads
How We Use SMS Data
| Purpose | Description | Legal Basis |
|---|---|---|
| Transactional Alerts | Order confirmations, RFQ updates, payment receipts, shipment tracking | Contract performance |
| Account Security | 2FA codes, login alerts, password reset notifications | Legitimate interest / Security |
| Platform Notifications | Supplier match alerts, tender deadlines, document status | Contract performance |
| Service Messages | Maintenance windows, compliance reminders, critical updates | Legitimate interest |
| Promotional SMS | New features, sourcing events, market reports (separate opt-in) | Explicit consent (TCPA/PDPA) |
We do not sell, rent, or share your mobile phone number or SMS opt-in data with third parties for their own marketing purposes. Your phone number is used exclusively for the communications described above and is shared only with our SMS delivery provider (under strict data processing agreements) to facilitate message sending.
SMS Consent & Opt-In
We obtain explicit consent before sending any SMS messages. Consent is collected via:
- A checkbox on registration or account setup forms with clear disclosure language
- Keyword opt-in (e.g., texting JOIN to our designated number)
- Written agreement for enterprise accounts
Consent to receive SMS is not a condition of purchasing or using our services. Promotional SMS requires a separate opt-in from transactional messages.
Message and data rates may apply. Standard messaging rates charged by your mobile carrier may apply to SMS messages you receive from us. Southern Sourcing Supply does not charge additional fees for SMS delivery.
SMS Opt-Out
Reply STOP to any SMS from us at any time. You will receive one confirmation message and no further SMS will be sent. To re-subscribe, reply START or update your preferences in your account settings under Notifications. Opting out of SMS does not affect your email notifications or platform access.
4. Contacting Us About SMS
If you have questions, concerns, or requests relating specifically to our SMS communications or how we handle your phone number and messaging data, please contact us through any of the following channels:
We aim to respond to all SMS-related privacy enquiries within 5 business days. For urgent matters such as unauthorised messages or suspected misuse, please call our helpline directly.
Opt-out requests via STOP are processed immediately and automatically. Data access or deletion requests are responded to within 30 days in accordance with PDPA and GDPR requirements. Complaints are acknowledged within 2 business days.
5. How We Use Your Data
We use collected data for the following purposes:
- Service Delivery: To operate the platform, process RFQs, manage supplier listings, and facilitate buyer-supplier connections
- Account Management: To authenticate users, manage permissions, and maintain account security
- Payments & Transactions: To process subscription fees, escrow transactions, and issue invoices
- Communications: To send transactional emails, SMS alerts, platform notifications, and (with consent) promotional content
- Verification & Compliance: To conduct KYB (Know Your Business) checks, supplier audits, and sanctions screening
- Analytics & Improvement: To analyse usage patterns, improve platform features, and personalise user experience
- Legal Obligations: To comply with applicable laws, respond to legal requests, and enforce our Terms
- Fraud Prevention: To detect, investigate, and prevent fraudulent or abusive activity on the platform
7. Data Retention
We retain data only as long as necessary for the purposes described:
| Data Type | Retention Period |
|---|---|
| Active account data | Duration of account + 3 years |
| SMS opt-in/out records | 5 years (regulatory compliance) |
| Transaction records | 7 years (tax / financial regulations) |
| Communication logs | 2 years from last interaction |
| Usage analytics (anonymised) | Up to 5 years |
| KYB / verification documents | 7 years post account closure |
| Fraud investigation records | Up to 7 years |
| Website visitor data (cookies) | 13 months |
8. Security Measures
We implement industry-standard security measures to protect your data:
- AES-256 encryption for data at rest; TLS 1.3 for data in transit
- Two-factor authentication (2FA) for all platform accounts
- Regular penetration testing and vulnerability assessments by accredited third parties
- Role-based access controls limiting employee access to data on a need-to-know basis
- ISO 27001 aligned information security management practices
- AWS infrastructure hosted in Singapore (ap-southeast-1) with multi-zone redundancy
- Automated anomaly detection and intrusion prevention systems
- Annual security awareness training for all staff
In the event of a data breach affecting your personal data, we will notify you and relevant regulatory authorities within 72 hours of discovery, in accordance with PDPA and GDPR requirements.
10. Your Rights
Depending on your jurisdiction, you have the following rights regarding your personal data:
To exercise any of these rights, contact our Data Protection Officer at dpo@southernsourcingsupply.com. We will respond within 30 days. We may need to verify your identity before processing your request.
11. International Data Transfers
Southern Sourcing Supply operates globally and may transfer your data to countries outside Singapore, including the United States, European Union, Australia, and other regions where our service providers operate.
Where data is transferred internationally, we ensure adequate protection through: (a) standard contractual clauses approved by relevant data protection authorities; (b) adequacy decisions; (c) binding corporate rules; or (d) the recipient country's data protection laws being deemed adequate by Singapore's PDPC.
12. Children's Privacy
Our Platform is designed exclusively for business use by individuals aged 18 and over. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact privacy@southernsourcingsupply.com and we will take prompt steps to delete that information.
13. Changes to This Policy
We may update this Privacy Statement from time to time to reflect changes in our practices, legal requirements, or platform features. Material changes will be notified by email to registered users and by a prominent notice on our website at least 14 days before taking effect.
The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this page periodically. Your continued use of the Platform following the effective date of any changes constitutes acceptance of the updated Privacy Statement.
14. Contact & Data Protection Officer
For all privacy-related enquiries, data subject requests, or concerns about how we handle your information: