Privacy Policy

EFFECTIVE 4 NOVEMBER 2026

Straiit is operated by ATBH LTD, a private company limited by shares registered in England and Wales under company number 17555128, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom ("Straiit", "we", "us"). ATBH LTD is the controller of the personal data described here under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what we collect on straiit.com, why, and what you can do about it. The platform is not open yet, so today the site does three things with your details: it keeps a waitlist, it keeps a list of what buyers are looking for (the buyer demand list), and it takes your details before you book a call with us.

1. What we collect

• Waitlist details. When you join the waitlist we collect your work email address, the side you choose (you have stock, you need stock, or you broker stock), the date and time you joined and, if you choose to write to our team, your message.
• Buyer demand details. When you post a request on the buyer demand list we collect your work email address, whether you are a wholesaler or a store, the brands and categories you are looking for, the quantity, the delivery country, your target price per unit and currency, your notes, the language of the page you used and the date and time of the request. Our team reads these to find matching stock; suppliers never see who you are.
• Call request details. When you book a call we collect your name, your company if you give it, your work email address, your phone number and country if you give them, the side you choose, what you want to talk about, the language of the page you used and the date and time. We use them to prepare the call and to check who we are talking to. The call itself is scheduled on Calendly, which has its own privacy policy. Each form also sends one email with what you entered to our team's mailbox.
• Technical data. Like most websites, our hosting provider automatically records basic request data such as your IP address, browser type, the pages requested and the time, to run and protect the site.
• Language. On your first visit our host reads the country of your connection from your IP address and we open the site in English, French or Turkish accordingly; the country is not stored. The language you pick in the menu is kept in a cookie named lang for one year. That cookie holds only the language, is needed for the site to work as you asked, and tracks nothing.
• Anti-spam. When you send a form we keep a salted hash of your IP address for one day, to limit how many forms one connection can send. The hash cannot be turned back into your address.
• Audience measurement without cookies. Our host, Vercel, counts page views with its Web Analytics service. It sets no cookie and stores nothing on your device; it tells visitors apart with a hash of the request that is discarded after 24 hours, and we only see totals (pages, the sites visitors come from, countries, device types, browsers and operating systems), never who you are. You can object at any time with this button, which keeps a small note in your browser (not a cookie) so that your visits are no longer sent to Vercel: Do not count my visits
• Analytics, only if you accept. When you first visit, a banner asks whether we may use Google Analytics. If you accept, Google Analytics (Google LLC, United States) sets its own cookies and receives your page views, the device and browser you use and a truncated address, so that we can count visits and see which pages help. If you refuse, nothing from Google loads. Your choice is kept in a cookie named consent for six months, and the Cookies link in the footer lets you change it at any time.

The language cookie is the only cookie we set without asking. We do not use advertising cookies, and we do not ask for payment details. Our typefaces are served from straiit.com itself.

2. How we use it

• To write to you when Straiit opens to your side of the market, and about your access.
• To answer the message you sent us.
• To run, secure and improve the site.
• To meet our legal obligations.

We do not sell your personal information, and we do not share it for advertising.

3. Who we share it with

Only with service providers that help us run the site, under their own confidentiality and security commitments: our website host (Vercel Inc., United States), our database provider (Neon Inc., United States), the email service that delivers each form to our team (Resend Inc., United States), Google LLC (United States) if you accept Google Analytics, and, if you book a call, Calendly LLC (United States), which has its own privacy policy. WhatsApp conversations are handled by WhatsApp under its own terms. We may also disclose information if the law requires it, or to a successor if our business is merged, sold or reorganized.

4. How long we keep it

We keep your waitlist details, your buyer demand requests and your call requests until you ask us to remove them, or until they are no longer needed. Technical logs are kept by our providers for limited periods.

5. Your rights

Under UK data protection law you have the right to see the details we hold about you, to have them corrected or deleted, to restrict or object to our use of them, and to receive them in a portable format. Where we rely on your consent, you can withdraw it at any time; this does not affect what we did before you withdrew it. You can also ask us at any time to take you off the waitlist. To use any of these rights, write to contact@straiit.com from the address you signed up with. A request is free. We answer within one month; for complex or numerous requests the law allows two more months, and we will tell you if we need them.

6. Legal bases, transfers and complaints

We use your details on these legal bases under the UK GDPR: your waitlist details on the basis of your consent, which you can withdraw at any time by writing to us; your buyer requests and call requests on the basis of the steps you ask us to take before any contract and our legitimate interest in answering you; the language cookie on the basis of our legitimate interest in showing the site in the language you chose; technical and anti-spam data on the basis of our legitimate interest in running a secure site; audience measurement without cookies on the basis of our legitimate interest in knowing how the site is used, which you can object to with the button in section 1; and Google Analytics only on the basis of your consent, asked for before any of its cookies is set, as the Privacy and Electronic Communications Regulations (PECR) require.

Some of our providers process your details outside the United Kingdom, mainly in the United States. These transfers rely on the UK Extension to the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.

If you are unhappy with how we handle your details, please write to us first. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk. If you live in the European Economic Area, you may also complain to the data protection authority of your country, such as the CNIL in France.

7. Security

We use reasonable technical and organizational measures to protect your information. No website or database can be guaranteed fully secure.

8. Children

Straiit is a service for businesses. The site is not directed to children, and we do not knowingly collect information from anyone under 16.

9. Changes

If we change this policy we will post the new version here with a new effective date. When the platform opens, this policy will be updated to cover it.

10. Contact

ATBH LTD, trading as Straiit. Registered in England and Wales, company number 17555128. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Email: contact@straiit.com.