Privacy Policy

1. Who is responsible for your data

This website is operated by Runway Merchants LLP, based in Hajipur, Bihar, India. Registered under LLPIN ADC-5347. For the purposes of applicable data protection law, Runway Merchants LLP is the controller of the personal information described here.

Questions, requests and complaints about personal data go to trade@runwaymerchants.com. Mark the subject line "Data request" so it reaches the right person.

2. What we collect

We collect information in three ways.

Information you send us

Our quote, supplier and general enquiry forms ask for your name, company, email address, phone number, country and the details of your request. A quote request may also include product specifications, quantities, destination port, target price and Incoterm. A supplier application may include company details, certifications and production capacity. Anything you write in a free-text field is stored as sent.

Information from correspondence

If you email or call us, we keep the message and our reply so that the order or enquiry has a record. That includes attachments such as specifications, drawings, certificates and photographs.

Technical information

Our server records the standard request data needed to serve and secure the site: IP address, browser type, requested page, time of request and response status. We use this to keep the site available and to investigate abuse. We do not use it to build a profile of you.

3. What we do not collect

We do not run advertising or analytics trackers, we do not set marketing cookies, and we do not sell or rent personal information. Payments are not taken through this website. If you follow a link to a third-party site, that site's own privacy policy applies.

4. Why we hold it and on what basis

• To answer you. Responding to an enquiry or providing a quotation is a step taken at your request before entering a contract.
• To perform an order. Once an order is placed, we process the information needed to source, inspect, ship and document the goods.
• To run our business. We have a legitimate interest in keeping accurate commercial records, preventing fraud and understanding which enquiries became orders.
• To meet the law. Customs, tax, sanctions and anti-money-laundering rules require us to hold and, where asked, disclose certain records.
• With consent. Where we ask for consent for a specific use, you can withdraw it at any time without affecting earlier processing.

5. Who we share it with

We share only what is necessary for the purpose at hand, and only with parties bound to keep it confidential. Those parties can include:

• freight forwarders, shipping lines, airlines and customs brokers;
• inspection agencies, testing laboratories and certification bodies;
• factories and suppliers, where their quote or production depends on your specification;
• banks, insurers and trade finance providers, where a transaction requires it;
• professional advisers, auditors and IT providers who support our systems;
• courts, regulators or authorities where disclosure is legally required.

Where a supplier needs your specification, we send the technical detail rather than your contact details unless you have agreed otherwise.

6. Where your data goes

We operate from India, and our sourcing and export activities take place there. Information may therefore be processed in India and in the destination country of a shipment, whose laws may differ from yours. Where we transfer personal data from the European Economic Area or the United Kingdom, we rely on an appropriate transfer mechanism and on contractual confidentiality commitments with the recipient.

7. How long we keep it

• Enquiries that do not become orders: up to 24 months from the last contact.
• Customer and order records: seven years from the end of the financial year, to meet tax and customs requirements.
• Supplier due diligence files: seven years after the relationship ends, or longer where a certification requires it.
• Server logs: up to 30 days, unless needed to investigate a security incident.
• Marketing consent records: until consent is withdrawn, plus a short period to evidence the withdrawal.

When a retention period ends, records are deleted or irreversibly anonymised.

8. Your rights

Subject to applicable law, you may ask to see the personal information we hold about you, have it corrected, have it deleted, restrict how it is used, object to a particular use, or receive it in a portable format. You may also withdraw consent where consent is the basis for processing.

Send the request from the email address we hold for you, or include enough detail for us to identify the record. We reply within 30 days and may extend that period once where a request is complex, telling you why.

If you are not satisfied with our response, you can complain to the Data Protection Board of India or, where the General Data Protection Regulation applies to you, to the supervisory authority in your country of residence.

9. Security

Access to enquiry and order records is limited to the staff who need it. Data is transmitted over encrypted connections, administrative access is protected by individual accounts, and backups are restricted. No system is perfectly secure, but if a breach affects your rights we will notify you and the relevant authority as required by law.

10. Children

This site and our services are intended for businesses. They are not directed at anyone under 18, and we do not knowingly collect information from children.

11. Changes to this policy

We update this policy when our practices or the law change. The date at the top of the page shows the current version. Material changes affecting existing enquiries will be notified to the contact we hold.