Privacy Policy

1. Scope

This Privacy Policy applies to information collected through the Portal, including its Home, Bank Information, Supplier Record, Agreements, Updates, Job Center, and Contact pages.

2. Information We Collect

Depending on how you use the Portal, we may collect:

• Business and supplier information:company name, registration details, business type, address, tax or company identifiers, products or services supplied, warehouse requirements, and supporting documents.
• Contact information:name, position, business email address, phone number, and authorized representative details.
• Bank and payment information:bank name, branch, account name, account number, and information needed to verify and process legitimate business payments.
  We do not request online-banking passwords, PINs, card security codes, or one-time passwords through the Portal.
• Agreement information:accepted terms, electronic signature, signer name and position, date and time of acceptance, and documents associated with the agreement.
• Inquiry information:messages, attachments, and other information submitted through the Contact page.
• Technical and security information:IP address, browser and device information, timestamps, authentication records, and system logs required to operate, secure, and troubleshoot the Portal.
• Information provided by another person:if you submit personal information about an authorized representative or another individual, you must have permission to provide it and should make this Privacy Policy available to that person.

Please provide only information that is accurate, necessary, and authorized for the relevant business purpose.

3. How We Use Information

We may use the information to:

• register, verify, and manage suppliers and business partners;
• maintain supplier, product, service, and warehouse-request records;
• verify bank information and process authorized payments;
• prepare, sign, store, and administer agreements;
• communicate about submissions, approvals, payments, agreements, updates, and support requests;
• respond to questions and inquiries;
• operate, maintain, secure, audit, and improve the Portal;
• detect or prevent fraud, misuse, unauthorized access, and other security incidents;
• maintain financial, contractual, and audit records; and
• comply with applicable legal, regulatory, accounting, and contractual requirements.

4. Legal and Business Grounds

We process information when it is necessary to take steps requested by you, establish or perform a business agreement, administer our legitimate business operations, comply with applicable obligations, protect the Portal and its users, or when you have provided consent. You may withdraw consent for future processing where processing relies on consent, but this will not affect processing already completed or records we must retain for another valid reason.

5. How We Share Information

Access is limited to authorized Ziwa Thukha personnel and departments that need the information for finance, procurement, warehouse, legal, audit, IT support, management, or related business operations.

We may also share limited information with:

• technology and hosting providers that help us operate, store, secure, or maintain the Portal;
• banks, payment-service providers, auditors, professional advisers, or contracting parties where necessary for an authorized transaction or agreement;
• government authorities, regulators, courts, or law-enforcement bodies when disclosure is required or permitted by applicable law; and
• another organization involved in a merger, restructuring, or transfer of relevant business operations, subject to appropriate confidentiality and legal safeguards.

Service providers may process information only for the services they provide to us and are expected to protect it appropriately.

6. International Storage and Processing

The Portal may use cloud infrastructure, including Vercel and Supabase. As a result, information may be stored or processed on servers outside Myanmar. We use reasonable contractual, organizational, and technical safeguards when engaging service providers and transferring information for Portal operations.

7. Data Security

We apply reasonable safeguards appropriate to the nature of the information, including role-based access, authentication, secure connections, access logging, database controls, backups, and administrative procedures. Access to bank and agreement information is restricted to personnel with a business need.

8. Data Retention

We retain information only as long as reasonably necessary for the purposes described in this Policy, including the duration of our business relationship and any period required for finance, tax, audit, contractual, dispute-resolution, security, backup, or legal purposes. Retention periods may differ depending on the type of record and applicable requirements. When information is no longer required, we will delete, anonymize, or securely restrict it, as appropriate.

9. Cookies and Similar Technologies

The Portal may use essential cookies or similar technologies for login, security, session management, and core functionality. If optional analytics or other non-essential technologies are introduced, we will provide appropriate notice or choices where required.

10. Your Choices and Requests

Subject to applicable requirements and necessary identity verification, you may request that we:

• confirm whether we hold personal information about you;
• provide access to relevant personal information;
• correct inaccurate or incomplete information;
• update supplier, contact, or bank details;
• delete information that is no longer required;
• restrict or object to certain processing; or
• address a concern about how information has been handled.

Some requests may be limited where information must be retained for payment, accounting, audit, contractual, security, or legal reasons. For security, changes to bank information may require additional verification before they take effect.

11. Third-Party Links

The Portal may contain links to third-party websites or services, including the Ziwa Thukha Job Center. We are not responsible for the privacy practices of third parties. Please review the privacy notice of the relevant service before submitting information.

12. Children's Privacy

The Portal is intended for suppliers, service providers, business partners, applicants, and authorized representatives. It is not designed to collect personal information from children through its finance and supplier functions.

13. Changes to This Policy

We may update this Privacy Policy when the Portal, our practices, or applicable requirements change. The revised version will be posted on this page with an updated "Last updated" date. Material changes may also be communicated through the Portal or another appropriate channel.