B2B Privacy Policy & Data Safeguards

Maple & Sand operates a B2B procurement-intelligence platform connecting buyers and suppliers across North America and the GCC. This policy explains how we handle personal data and applies alongside the data-protection law of your jurisdiction — including GDPR (EU), PIPEDA (Canada), the Saudi PDPL, and the UAE PDPL.

When you register we collect business-contact details (name, company, industry, email, phone, and address) and any capability document you choose to upload (PDF/DOC/DOCX). We also process limited technical data such as IP address and request metadata to operate and secure the service. We do not collect special-category personal data.

We process your data to create your profile, match buyers with suppliers, and provide the services you request. Our lawful bases are: performance of a contract (delivering the platform), your consent (where required, e.g. uploads and marketing), and legitimate interests (securing the service and preventing abuse). You may withdraw consent at any time.

Your business profile may be shared with verified counterparties on the platform as part of a match, and with vetted service providers (e.g. hosting) acting under contract on our instructions. We never sell personal data. Disclosure to authorities occurs only where legally required.

Because we operate across the North America–GCC corridor, your data may be transferred between Canada, the EU, and GCC states. Each transfer is mapped to an appropriate safeguard — standard contractual clauses, your explicit consent, or local-residency handling — so protection travels with the data.

We retain registration records and uploaded documents only as long as needed to provide the service or meet legal obligations. When a record is deleted, the associated on-disk attachment is removed with it. You may request earlier deletion at any time.

Subject to applicable law, you may request access to, correction of, deletion of, or a portable copy of your personal data, and you may object to or restrict certain processing. To exercise any right, contact us at info@mapleandsand.com — we respond within the timeframes set by GDPR, PIPEDA, and the relevant PDPL.

We protect data with TLS encryption in transit, least-privilege admin access via short-lived signed tokens, isolated upload storage with signature validation, rate limiting, and hardened HTTP security headers. Our full security posture and certification roadmap are on our Trust & Compliance page.

The public site runs without third-party advertising or tracking cookies. We use strictly-necessary browser storage only to keep an administrator signed in. We do not build advertising profiles and we honour browser do-not-track / Topics opt-outs.

For privacy questions or to reach our data-protection contact, email info@mapleandsand.com or use the WhatsApp button. You also have the right to lodge a complaint with your local supervisory authority (e.g. the OPC in Canada, your EU DPA, or SDAIA in Saudi Arabia).