Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.
Last Updated: July 23, 2026
Table of Contents
1. Introduction
Welcome to Sumic Online. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.
By using Sumic Online, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
This policy applies to all information collected through our website, mobile application, and any related services, sales, marketing, or events (we refer to them collectively as the "Services").
2. Information We Collect
2.1 Personal Information You Provide
We collect personal information that you voluntarily provide to us when you:
- Register for an account (name, email, password, phone number)
- Make a purchase (billing address, shipping address, payment information)
- Complete your business profile (company name, business license, tax ID)
- Contact customer support (inquiry details, communication history)
- Participate in surveys or promotions (responses, preferences)
- Upload product listings or business documents (if you are a supplier)
2.2 Information Automatically Collected
When you visit or use our Services, we automatically collect certain information:
- Device information (IP address, browser type, operating system)
- Usage data (pages visited, time spent, features used)
- Location data (approximate location based on IP address)
- Cookies and tracking technologies (preferences, session data)
2.3 Information from Third Parties
We may receive information about you from:
- Payment processors (transaction status, payment verification)
- Shipping carriers (delivery status, tracking information)
- Business verification services (company registration, credit checks)
- Google Sign-In, if you choose to sign in with your Google account. Google shares your name, email address, profile photo and Google account identifier with us. We never receive your Google password.
2.4 Information Collected by the Sumic Online Mobile App
Our Android application collects the same account, order and support information described above. In addition:
- Sign-in details: your email and password, or your Google account details if you use Google Sign-In.
- Device and app information: app version, device model, operating system version and language/currency preference, used to deliver the correct content and to diagnose crashes.
- Push notification token: an identifier issued by your device so we can send you order and message alerts. Notifications are optional — you can decline the notification permission or turn notifications off in your device settings at any time, and the app continues to work.
- Data stored on your device: the app keeps a local copy of your session, recently viewed products, cart and messages so it works on a poor connection. Your session token is held in the device's encrypted secure storage. All of this is removed when you log out, delete your account, or uninstall the app.
The app requests only two Android permissions: internet access, and (optionally) permission to show notifications. It does not request access to your camera, microphone, precise location, contacts, call logs, SMS, or the files on your device.
3. How We Use Your Information
We use the information we collect for the following purposes:
4. Data Sharing & Disclosure
We may share your information in the following situations:
With Suppliers
We share your order details and shipping information with suppliers to fulfill your purchases.
With Service Providers
We work with third-party companies for payment processing, shipping, hosting, analytics, and customer service.
For Legal Reasons
We may disclose information when required by law, court order, or to protect our rights and safety.
Business Transfers
In the event of a merger, acquisition, or asset sale, your information may be transferred to the new entity.
We do not sell your personal information, and we do not share it with third parties for advertising or marketing purposes. We do not use advertising networks or third-party analytics SDKs inside the Sumic Online mobile app.
5. Data Security
We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.
Encryption
All data in transit is encrypted using SSL/TLS protocols.
PCI-DSS Compliant
Payment information is processed securely through certified processors.
Access Controls
Strict access controls limit who can view your information.
Regular Audits
We conduct regular security audits and penetration testing.
While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. Please use strong passwords and keep your account credentials confidential.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information (subject to legal requirements).
- Data Portability: Request transfer of your data to another service provider.
- Objection: Object to processing of your information for certain purposes.
- Withdraw Consent: Withdraw consent for marketing communications at any time.
To exercise these rights, please contact us at [email protected] or visit your account settings.
7. Data Retention
We keep personal information only for as long as we need it for the purpose it was collected, or for as long as the law requires us to.
- Account information: for as long as your account exists. It is removed when you delete your account.
- Orders, invoices and payment records: approximately 7 years, to meet tax, accounting and anti-fraud obligations. After account deletion these records are anonymized — your name, email, phone number and street address are removed.
- Support and dispute records: up to 3 years after the case is closed.
- Server and security logs: up to 90 days.
- Encrypted backups: overwritten within 30 days.
- Data cached on your device by the mobile app: until you log out, delete your account, clear the app's storage, or uninstall the app.
8. Deleting Your Account and Data
You can permanently delete your Sumic Online account and the personal data attached to it at any time. There are three ways to do this:
In the mobile app
Open Settings → Account → Delete Account, confirm your email address and password, and the account is deleted immediately.
On the website
Visit sumiconline.com/delete-account, sign in, and confirm. This page also explains exactly what is deleted and what is retained.
By email
If you can no longer sign in, email [email protected] from the address on the account. We will verify your identity and delete the account within 30 days.
What is deleted: your profile, saved addresses, cart, wishlist, followed sellers, reviews, RFQs and enquiries, notification preferences, business account memberships, and your sign-in credentials.
What is retained: completed order and payment records, in anonymized form, for the retention period described in section 7; and the content of messages you sent to suppliers or logistics partners, so they can service outstanding orders — with your contact details removed. Residual copies in encrypted backups are overwritten within 30 days.
Account deletion is permanent and cannot be undone. If you have orders in progress, please complete or cancel them first.
10. Children's Privacy
Sumic Online is a business-to-business and business-to-consumer trading platform intended for adults. Our Services are not directed at children, and you must be at least 18 years old to create an account, as set out in our Terms of Service.
We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at [email protected] and we will delete it.
11. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Related: Terms of Service | Delete Your Account | FAQ | Contact Support