Privacy Policy

Last updated: 1 May 2026

1. Introduction

GSR ASEAN ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use the GSR ASEAN platform, including our website, marketplace, compliance tools, and related services (collectively, the "Platform"). This policy applies to all users of the Platform, including sellers, buyers, and visitors.

2. Information We Collect

We collect the following types of information:

Account Information: When you register, we collect your name, email address, and authentication details provided through our OAuth login system.

Business Information: When you register as a seller, submit a membership application, or request assistance, we collect your company name, business type, country, phone number, and product/service descriptions.

Form Submissions: When you complete compliance forms, contact forms, or inquiry forms, we collect the information you provide in those forms, including names, addresses, product details, and supporting documents.

Payment Information: When you purchase a membership, payment processing is handled by Stripe. We do not store your credit card number, CVV, or full card details. We retain only the Stripe customer ID and subscription ID for account management.

Usage Data: We automatically collect information about how you use the Platform, including pages visited, features used, and interaction patterns. This data is collected through analytics tools and is used to improve the Platform.

3. How We Use Your Information

We use your information to: (a) provide and maintain the Platform and its features; (b) process membership applications and subscriptions; (c) facilitate marketplace transactions and buyer-seller communications; (d) respond to your inquiries and assistance requests; (e) send you service-related notifications, including application status updates and compliance alerts; (f) improve the Platform based on usage patterns; and (g) comply with legal obligations.

4. Information Sharing

We do not sell your personal data. We may share your information with: (a) approved sellers or buyers when you submit a product inquiry or marketplace communication; (b) payment processors (Stripe) to process subscription payments; (c) email service providers (Resend) to deliver transactional emails; (d) government authorities or certification bodies when required to process your compliance applications (only with your explicit consent); and (e) law enforcement or regulatory authorities when required by law.

5. Data Storage and Security

Your data is stored on secure cloud infrastructure. We implement industry-standard security measures including encrypted connections (HTTPS/TLS), secure session management, input sanitisation, rate limiting, and access controls. File uploads are stored in encrypted cloud storage (S3). Despite our efforts, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account data for as long as your account is active. Form submissions and assistance requests are retained for a minimum of three (3) years for audit and compliance purposes. Payment records are retained as required by applicable tax and financial regulations. You may request deletion of your account and associated data by contacting us (see Section 10).

7. Cookies and Analytics

The Platform uses essential cookies for authentication and session management. We use privacy-focused analytics to understand how the Platform is used. We do not use third-party advertising cookies or tracking pixels.

8. Your Rights

Depending on your jurisdiction, you may have the right to: (a) access the personal data we hold about you; (b) request correction of inaccurate data; (c) request deletion of your data; (d) object to or restrict processing of your data; (e) request data portability; and (f) withdraw consent where processing is based on consent. To exercise any of these rights, please contact us using the details in Section 10.

9. International Data Transfers

As a platform serving the ASEAN region and international buyers, your data may be transferred to and processed in countries outside your country of residence. We ensure that any such transfers comply with applicable data protection laws and that appropriate safeguards are in place.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically. Your continued use of the Platform after changes are posted constitutes acceptance of the revised policy.