Privacy Policy

Scope and who controls the data

This policy applies to personal data processed by ABD Trading LLC through this website, product inquiries, the catalogue chatbot, and related order or customer-support communications. It does not control a third-party marketplace or website that has its own privacy notice.

ABD Trading LLC is the controller of the personal data described here. Privacy questions and requests may be sent to purchase@abdtradingllc.com.

Personal data we collect

We collect data you provide, data generated when you use the site, and limited data received from service providers involved in security and communications.

• Identity and contact data, such as name, email address, phone number, company, country, and delivery or billing details provided during an inquiry or order process.
• Inquiry, transaction, and support data, including selected products, quantities, messages, quote and order details, correspondence, and records needed for fulfillment, accounting, warranty, fraud prevention, or dispute handling.
• Chatbot data, including prompts, recent conversation history, assistant responses, product or page context, and feedback or error information associated with a chat session.
• Technical and security data, such as IP address, approximate country, browser and device information, user-agent, timestamps, requested pages, request identifiers, security results, and rate-limit events.
• Browser-storage data described in the Cookie Policy, including the inquiry list, chatbot transcript, and short-lived verification state.

Data we do not request through this site

This website does not currently collect payment-card details or complete checkout. Do not place passwords, government identification numbers, financial-account details, health information, precise location, confidential business information, or other sensitive personal data in a contact form or chatbot prompt.

How we use personal data

• Respond to inquiries, prepare quotes, verify details, communicate about products, and provide customer support.
• Accept, fulfill, document, and support orders formed through a separate confirmation or marketplace.
• Operate product search and the chatbot, provide relevant catalogue answers, preserve session continuity, and troubleshoot failures.
• Protect the site and users through bot detection, abuse prevention, rate limiting, authentication, logging, and fraud or security investigation.
• Maintain business, tax, accounting, warranty, compliance, and dispute records.
• Measure reliability and improve site content and operations using service logs and aggregated or deidentified information where practical.

Chatbot and automated processing

When you use the chatbot, your prompt, recent chat history, and relevant catalogue or page context may be sent to Anthropic to generate an answer. Search text may be sent to Voyage AI to create a numerical representation used to find relevant products. These providers process the data to supply services to us under their applicable terms and safeguards.

The chatbot is an informational product-discovery tool. It does not make decisions that create legal or similarly significant effects about you. Do not rely on it as confirmation of live inventory, price, compatibility, warranty, or acceptance of an order; verify material details with us before purchasing.

Categories of sources

We receive personal data directly from you; automatically from your browser, device, and interactions with the site; from security and infrastructure providers; and, when needed to support a transaction, from a marketplace, carrier, supplier, payment or banking channel, or business representative involved in that transaction.

How we disclose personal data

We disclose only the data reasonably necessary for the recipient's role. Categories of recipients may include hosting and database providers; email and notification providers; Cloudflare for bot and security verification; Upstash for rate limiting; Anthropic and Voyage AI for chatbot and search processing; cloud media, diagnostics, and deployment providers; carriers, suppliers, service centers, marketplaces, and professional advisers involved in a request or order.

We may also disclose data to comply with law or legal process, investigate fraud or security incidents, protect rights and safety, or support a merger, financing, sale, or reorganization subject to appropriate confidentiality and notice requirements.

Sale, targeted advertising, and sensitive data

We do not sell personal data. We do not process personal data for targeted advertising across unrelated websites, and we do not use it for profiling that produces legal or similarly significant effects. We do not knowingly collect sensitive personal data through this site and ask that you not submit it.

If these practices change, we will update this notice and provide any consent or opt-out mechanism required before using data for the new purpose.

Retention

We retain server-side inquiry, correspondence, quote, order, warranty, security, and compliance records only for as long as reasonably necessary for the stated purpose and applicable legal, tax, accounting, fraud-prevention, or dispute requirements. Retention varies by record type, and data may be preserved longer when required by law or a legal hold.

The inquiry list is stored in your browser until you clear or submit it or clear site storage. Chat transcripts are stored in session storage and are designed to end with the browser session. The public chatbot verification cookie lasts about 20 minutes, and rate-limit counters and operational logs are retained for limited security and reliability periods. Deleting browser storage does not delete a message or inquiry already sent to our systems or a service provider.

Maryland privacy rights

Subject to verification, scope, and exceptions under the Maryland Online Data Privacy Act and other applicable law, a Maryland resident may ask whether we process their personal data; access it; correct inaccuracies; delete data provided by or obtained about them; receive a portable copy of automatically processed data; and obtain a list of the categories of third parties to which personal data was disclosed.

Maryland residents may also opt out of a sale of personal data, targeted advertising, or profiling in furtherance of solely automated decisions with legal or similarly significant effects. We do not currently engage in those activities. We will not discriminate against a consumer for exercising a privacy right.

Submitting a privacy request

Email purchase@abdtradingllc.com with the subject "Maryland Privacy Request." Describe the right you want to exercise and identify the email address or interaction involved. We may request only the additional information reasonably necessary to authenticate you and protect data from unauthorized access. An authorized agent may submit an opt-out request where permitted, and we may reasonably verify the agent's authority.

We will respond within 45 days after receiving a valid request. If reasonably necessary because of complexity or volume, we may extend the response period once by up to 45 additional days and will explain the extension during the initial period. Information is provided without charge once in any 12-month period; the law may allow a reasonable fee or refusal for requests that are manifestly unfounded, excessive, technically infeasible, or repetitive.

Appealing a privacy decision

If we decline a request, our response will explain why and how to appeal. Send the appeal to purchase@abdtradingllc.com with the subject "Privacy Appeal" and identify the original request. We will respond in writing within 60 days. If an appeal is denied, we will provide an available method to contact the Maryland Office of the Attorney General's Consumer Protection Division.

Security and incident response

We use reasonable administrative, technical, and physical safeguards appropriate to the nature of the data, including HTTPS, authenticated administrative access, access restrictions, bot protection, rate limiting, and service-provider controls. No transmission or storage system is guaranteed to be completely secure.

We investigate suspected security incidents and provide notices required by the Maryland Personal Information Protection Act or other applicable breach-notification law.

Children

The site is not directed to children under 13, and we do not knowingly collect personal data from a child under 13. If you believe a child supplied personal data, contact us so we can investigate and delete it when required. A parent or legal guardian may exercise applicable privacy rights for a child.

Changes to this policy

We may update this policy when our practices, providers, or legal obligations change. The date above identifies the current version. If a change materially affects how previously collected data is used, we will provide additional notice or obtain consent when required.