DuaQi

Legal

Privacy Policy

Last updated: 07 June 2026

This Privacy Policy explains how DUAQI Limited ("DuaQi", "we", "us") collects, uses, discloses and safeguards your personal data when you use the DuaQi B2B marketplace and related services at duaqi.com (collectively, the "Platform"). We act as the data controller for personal data we process about you, in accordance with the EU General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Irish Data Protection Act 2018.

1. Who we are

DUAQI Limited
69 Maudlin Street, Kilkenny R95 C8PP, Ireland
Tax ID: 3672470TH
Phone: +353 86 0877427
General enquiries: hello@duaqi.com
Privacy enquiries / data subject requests: privacy@duaqi.com

2. Personal data we collect

We collect personal data you provide directly, data generated through your use of the Platform, and data we receive from third parties (e.g., our payment processor).

  • Account & profile data — full name, email address, encrypted password, account role (Supplier / Agent / Reseller), phone number, language preference.
  • Business / verification data (suppliers) — company name, registration number, legal and factory addresses, contact person details, uploaded documents (business licences, certificates).
  • Business / verification data (agents) — full name, portrait photo, phone number, contact email, expertise, target countries, experience notes, LinkedIn URL.
  • Marketplace activity — offers posted, applications sent or received, conversations and messages, deal activity, reviews, ratings, badges, favourites.
  • Billing & transaction data — subscription status, billing period, credits-wallet balance and transactions, invoice records. Card details are not stored on our servers — they are processed and held by Stripe (see §6).
  • Technical data — IP address, device and browser type, language, time-zone, pages viewed, session timestamps. Set via essential cookies and server logs.
  • Communications — emails you send us, transactional email metadata (delivery, bounces).

3. How we use your data & lawful basis

  • To provide the Platform (create your account, authenticate you, show and route applications and deals, deliver messages). Lawful basis: performance of a contract (Art. 6(1)(b) GDPR).
  • To verify suppliers and agents (KYC review of uploaded documents and profile data). Lawful basis: legitimate interests (Art. 6(1)(f)) in operating a trusted marketplace, and where applicable, legal obligations.
  • To process payments and credits. Lawful basis: performance of a contract and legal obligation (tax, accounting).
  • To send transactional emails (registration received, account verified, password reset, deal updates, message digest, billing reminders). Lawful basis: performance of a contract and legitimate interests.
  • To prevent fraud and abuse, comply with applicable law, defend our rights, and enforce our Terms. Lawful basis: legitimate interests and legal obligation.
  • To improve the Platform via aggregated, non-identifying analytics. Lawful basis: legitimate interests.

4. Cookies

We use a small number of essential cookies (session, locale preference, CSRF) without which the Platform cannot function; these do not require consent. Where we use any non-essential cookies (e.g., analytics), we ask for your consent through the cookie banner on first visit, and you can change your choice at any time by clearing the cookie-consent cookie in your browser.

5. Who we share your data with

  • Other marketplace participants. Information you choose to publish on the Platform (profile data, offers, reviews, messages addressed to a counter-party) is shared with the relevant users. Guests browsing the marketplace see limited public fields only.
  • Service providers (processors). We use carefully selected processors that act under our instructions and are bound by data-processing agreements, including:
    • Stripe Payments Europe, Limited — payment processing, billing-descriptor management, fraud screening. See Stripe's privacy notice.
    • Hosting & mail infrastructure — our servers are operated in the EU; outbound email is sent from our own infrastructure.
  • Authorities where required by law, court order, or to comply with a binding legal request.

6. International transfers

The Platform serves both EU and Chinese users, so personal data may be transferred outside the European Economic Area (e.g., to a Chinese supplier you correspond with). Where we transfer personal data to a country without an EU adequacy decision, we rely on Standard Contractual Clauses adopted by the European Commission and, where appropriate, supplementary safeguards.

7. Retention

  • Active accounts — for as long as your account is active.
  • Closed accounts — we retain core profile and transaction records for up to 6 years after closure to comply with Irish accounting and tax law, then delete or anonymise them.
  • Marketplace messages and deal records — kept for as long as either party retains an active account, then anonymised or deleted.
  • KYC documents — retained for the duration of the account plus the period required by anti-money-laundering law.

8. Your rights

Subject to applicable law (including GDPR), you have the right to:

  • access your personal data and obtain a copy;
  • have inaccurate data rectified;
  • have personal data erased ("right to be forgotten");
  • restrict or object to certain processing;
  • receive your data in a portable format;
  • withdraw consent at any time (where processing is based on consent);
  • lodge a complaint with your local supervisory authority. The Irish supervisory authority is the Data Protection Commission.

To exercise any of these rights, contact privacy@duaqi.com. We respond within 30 days.

9. Security

We apply appropriate technical and organisational measures to safeguard personal data, including TLS in transit, password hashing, access controls, encrypted backups, and limited employee access on a need-to-know basis. No system is perfectly secure; in the unlikely event of a personal-data breach, we will notify affected users and, where required, the supervisory authority within 72 hours.

10. Children

DuaQi is a business-to-business platform and is not intended for children. We do not knowingly collect data from anyone under 18.

11. Changes to this policy

We may update this Policy to reflect changes in our services or in applicable law. Material changes will be announced on the Platform and (where significant) by email. The "Last updated" date at the top reflects the most recent revision.

12. Contact

For any privacy question or to exercise your rights, write to privacy@duaqi.com or by post to DUAQI Limited, 69 Maudlin Street, Kilkenny R95 C8PP, Ireland.