Privacy Policy

Device Exchange ("we", "us", "our") operates a business-to-business wholesale platform for phones. This policy explains what data we collect from trade applicants and customers, how we use it, and the rights you have over it.

1. Data we collect

• Trade account details: company name, registration number, VAT ID, trading address, contact name, email and phone.
• Verification documents you submit for approval.
• Order, quote, invoice and shipping information.
• Payment metadata (we do not store full card details).
• Usage data: pages viewed, IP, device and browser, for security and analytics.

2. How we use it

• To approve trade accounts and prevent fraud.
• To fulfil orders, arrange shipping and provide support.
• To meet legal, tax and export-control obligations.
• To send transactional emails and, where you opt in, product updates.

3. Legal bases

We process data on the bases of contract performance, legitimate interest (running and securing the platform), and legal obligation (tax, AML, sanctions and export controls).

4. Sharing

We share data only with providers that help us run the service — hosting, payments, email, shipping carriers — and with authorities where legally required. We do not sell personal data.

5. Retention

We retain account and transaction records for as long as required by tax and commercial law (typically 6–10 years), then delete or anonymise them.

6. Your rights

You may request access, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interest. Contact us to exercise these rights.

7. Security

We use encryption in transit, access controls and audited infrastructure. No system is perfectly secure — report suspected issues to us immediately.

8. Contact

Questions about this policy or your data? Reach us on Telegram via the link in the footer.