Legal
Data processing
Effective date:
July 2026
Introduction
This Data Processing Agreement ("DPA") is entered into between Shenzhen Rizkallah Trading Co. Ltd., operating as 360TradeX ("360TradeX," "we," "us," or "our"), and the client that has agreed to our Terms of Service ("Client," "you").
This DPA applies where 360TradeX processes personal data on behalf of the Client in the course of providing sourcing, warehousing, shipping, and customs clearance services. It sets out the obligations and rights of both parties with respect to that processing.
By using our services, you agree to be bound by this DPA. If you are entering into this DPA on behalf of a company, you represent that you have the authority to bind that company to these terms.
Section 1: Definitions
"Personal Data" means any information relating to an identified or identifiable individual, such as a client's staff, end customer, or order recipient.
"Processing" means any operation performed on Personal Data, including collection, storage, use, transfer, and deletion.
"Sub-processor" means any third party engaged by 360TradeX to process Personal Data on the Client's behalf, including our factory partners, warehousing facilities, and logistics providers.
Section 2: Roles of the Parties
For the purposes of this DPA, the Client acts as the data controller and 360TradeX acts as the data processor with respect to order, shipping, and logistics data processed on the Client's behalf. Each party is responsible for complying with its own obligations under applicable data protection law.
Section 3: Scope of Processing
360TradeX processes Personal Data only as necessary to provide sourcing, warehousing, shipping, and customs clearance services, and only in accordance with the Client's instructions as set out in our Terms of Service or a specific service agreement.
Section 4: Sub-processors
360TradeX may engage sub-processors, including verified factory partners, warehousing providers, freight forwarders, and customs brokers, to perform services on the Client's behalf. We remain responsible for ensuring these sub-processors provide an adequate level of data protection.
Section 5: International Data Transfers
Because our sourcing and logistics operations involve factories and shipping routes across multiple countries, Personal Data may be transferred outside the Client's home country. We take reasonable steps to ensure such transfers are protected by appropriate safeguards.
Section 6: Security Measures
360TradeX maintains reasonable administrative, technical, and physical safeguards designed to protect Personal Data against unauthorized access, loss, misuse, or alteration.
Section 7: Data Subject Requests
If 360TradeX receives a request from an individual seeking to exercise their data protection rights, we will promptly notify the Client and provide reasonable assistance in responding to that request.
Section 8: Data Retention and Deletion
360TradeX retains Personal Data only for as long as necessary to provide our services and to comply with legal, tax, and customs recordkeeping obligations. Upon request, we will delete or return Personal Data, subject to any retention required by law.
Section 9: Contact Us
If you have questions about this Data Processing Agreement, please contact us at privacy@360tradex.com.