The data controller is Next Trade Global Limited, a company incorporated in Hong Kong (registration no. 77231298), operating commercially under the LeanZupply brand. Registered office: Unit 19B, Golden Star Building, 20–24 Lockhart Road, Wan Chai, Hong Kong. Contact: admin@leanzupply.com.

Identification and contact data (name, email, company, role); tax and registration data required to operate (VAT-ID, EORI where applicable, fiscal address); data derived from use of the site (IP, browser type, pages visited); and commercial information needed to facilitate operations between users.

We process data to: (a) manage registration and user accounts and execute requested operations — basis: performance of a contract; (b) comply with legal, tax and anti-money-laundering obligations — basis: legal obligation; (c) secure the Platform and improve the service — basis: legitimate interest; (d) send commercial communications, only where the user has opted in — basis: consent, revocable at any time.

Data is shared only where necessary to execute each operation: with the counterparty (manufacturer or buyer), the payment gateway (Stripe), the logistics and customs operators for the order, technology providers supporting the Platform, and authorities where legally required. We do not sell personal data.

Next Trade Global Limited is established in Hong Kong, so data may be processed outside the European Economic Area. For data subject to the GDPR (Regulation (EU) 2016/679), we apply the safeguards provided for in that regulation, including standard contractual clauses approved by the European Commission with providers processing data on behalf of LeanZupply.

We retain data while the account is active and, after closure, for the periods required by applicable legal, tax and contractual obligations.

Users may exercise their rights of access, rectification, erasure, objection, restriction and portability by writing to admin@leanzupply.com. Users subject to the GDPR may also lodge a complaint with the supervisory authority of their Member State.

We apply reasonable technical and organisational measures to protect personal data. Changes to this policy will be published on the website with their update date.