Privacy Policy

This policy explains how Corridorway Minerals Trade Office ("Corridorway", "we", "us") handles personal data collected through corridorway.com. It is written to align with the EU and UK General Data Protection Regulation (GDPR).

1. Who is responsible for your data

The data controller is Corridorway Minerals Trade Office, Berbera, Somaliland. Contact: info@corridorway.com.

2. What data we collect

We collect only what you enter in our forms:

• Buyer Requirement form: first and last name, business email, phone, company name, country, mineral, material form, target volume and frequency, specification requirements, destination port or region, delivery basis and timeline.
• Supply Opportunity form: first and last name, business email, phone, company or entity name, country, mineral, estimated volume, general origin region, and ownership or authority-to-sell details.
• Contact form: first and last name, email, company name (optional), subject (optional) and message.
• All forms: your consent choice, your optional marketing choice, the date and time of submission, and a one-way hash of your IP address used for spam and rate-limit protection.

Please do not send sensitive personal data (for example, health data) through our forms.

3. Why we use it and our lawful basis

• Responding to your enquiry and assessing a trade requirement or supply opportunity: steps taken at your request before entering into a contract (GDPR Article 6(1)(b)).
• Keeping the website secure and preventing spam: our legitimate interest in operating a secure website (Article 6(1)(f)).
• Sending occasional trade updates: only with your consent, given through a separate, unticked checkbox (Article 6(1)(a)). You can withdraw consent at any time.

4. How long we keep it

Enquiry records are kept for 24 months after our last contact with you, then deleted. If an enquiry leads to a contract, the related records are kept for as long as the contract and applicable law require. Marketing consent records are kept until you withdraw consent.

5. Who processes it for us

Our website and email are hosted by Namecheap, Inc., which acts as our hosting processor. Form submissions are emailed to our team and stored on that hosting account, outside the public website. We do not use analytics, advertising or social-media tracking tools on this website.

Where data is processed outside your country, we rely on the safeguards offered by our provider, such as standard contractual clauses where applicable.

6. No sale of data

We do not sell, rent or trade your personal data.

7. Your rights

You have the right to:

• access the personal data we hold about you;
• rectification, to correct inaccurate data;
• erasure, to have your data deleted;
• restriction, to limit how we use your data;
• portability, to receive your data in a commonly used format;
• objection, to object to processing based on legitimate interests;
• withdrawal of consent, at any time, where we rely on consent. This does not affect processing already carried out.

You may also complain to your local data protection authority.

8. How to make a request

Email info@corridorway.com with the subject line "Privacy request". Please include your form reference number (REQ-, SUP- or MSG-) if you have one. We will reply within one month.

9. Cookies

This website uses only what is essential for it to work. It sets no analytics, advertising or tracking cookies, so no cookie banner is needed. If we add analytics in future, we will update this policy and ask for your consent first.

10. Changes to this policy

We will post any changes on this page and update the "Last updated" date above.