Privacy Policy
1. Scope and acceptance
This document governs your access to and use of the DadaGoods platform, including the website, mobile interfaces, application programming interfaces and related services (together, the "Platform"). DadaGoods is a business-to-business-to-consumer wholesale marketplace that connects verified suppliers with business and consumer buyers in seven storefront languages with a United States dollar ledger.
By registering an account, browsing the Platform, publishing a listing, placing an order or otherwise using the Platform, you confirm that you have read, understood and agreed to be bound by this document together with the DadaGoods Privacy Policy, Cookie Policy and Platform Rules. If you do not agree, you must stop using the Platform.
Where you use the Platform on behalf of a company or other legal entity, you represent that you are authorised to bind that entity, and "you" means that entity.
2. Definitions
"Buyer" means a registered user who places an order, whether a business buyer purchasing at tiered wholesale prices or a consumer buyer purchasing single units. "Seller" means a merchant admitted to the Platform under the Seller Onboarding Agreement. "Listing" means any product page, offer, price tier, stock statement or media published by a Seller.
"Content" means text, images, video, specifications, documents and any other material uploaded to the Platform. "Order" means a confirmed purchase of one or more Listings. "Tiered Price" means the unit price that applies once a stated quantity threshold is reached. "MOQ" means the minimum order quantity set by the Seller for a Listing.
"Business Day" means any day other than a Saturday, Sunday or public holiday in Hong Kong, China. "Platform Commission" means the fee retained by DadaGoods on a completed Order as published in the Seller Onboarding Agreement.
3. Personal data
DadaGoods processes personal data as a data user under the Personal Data (Privacy) Ordinance of Hong Kong, China and, in relation to individuals in the European Union, as a controller for its own purposes and as a processor for data processed on a Seller's behalf under the GDPR.
We collect the data needed to create an account, verify identity, process and settle orders, prevent fraud, handle disputes, meet tax and anti-money-laundering obligations and improve the service. We do not sell personal data. Data is processed on the legal bases of performance of a contract, compliance with a legal obligation, our legitimate interests in operating a secure marketplace and, where required, consent.
Retention periods are set by record type: order, payment, tax and settlement records are kept for the period required by applicable accounting and tax law; fraud and dispute records are kept for the period needed to defend legal claims; marketing data is kept until consent is withdrawn. Personal data is not retained for longer than necessary for those purposes.
4. Cross-border transfers
DadaGoods operates from Hong Kong, China and uses service providers in other jurisdictions for hosting, email delivery, payment processing and analytics. Where personal data of individuals in the European Economic Area is transferred outside that area, the transfer is protected by appropriate safeguards, including the standard contractual clauses of the European Commission together with a transfer-impact assessment, and by supplementary technical measures such as encryption in transit and at rest.
Where a transfer is made to a jurisdiction that does not benefit from an adequacy decision, we obtain the safeguards described above and, where relevant, the explicit consent of the data subject. A list of the categories of recipients and the countries involved is available on request from the data-protection contact published in this document.
5. Your data rights
Subject to applicable law, you may request access to the personal data we hold about you, request correction of inaccurate data, request erasure where there is no overriding legal ground for retention, restrict or object to certain processing, receive the data you provided in a structured machine-readable format, and withdraw consent at any time without affecting processing already carried out.
Requests may be made through your account settings or to the data-protection contact published in this document. We respond within the period required by applicable law, which is forty days under the PDPO and one month under the GDPR, and we may extend that period once where a request is complex, telling you why. Where we cannot comply, we explain the legal basis for the refusal and the route to complain to the relevant authority.
Where processing is based on your consent, withdrawing consent stops further processing; it does not make earlier processing unlawful. You will not be discriminated against for exercising these rights. Sellers that process buyer data must provide equivalent rights and must act on our instructions when we handle such requests.
6. Cookies and similar technologies
Strictly necessary cookies are required for the site to function: they maintain your session, keep your cart together, remember your selected language and protect forms against cross-site request forgery. These cookies are set on the basis of our legitimate interest in operating a secure and functional service and cannot be switched off through the banner.
Analytics and advertising cookies are set only after you give consent, and no analytics or advertising script is loaded before that consent is recorded. Market, functional and payment providers may set their own cookies when you interact with their component, and their policies apply to those cookies.
Consent is recorded with a timestamp and the set of categories accepted. You can withdraw or change your consent at any time from the cookie settings link in the footer, after which the affected scripts are no longer loaded on subsequent page views. Because withdrawal is stored in a cookie, deleting all cookies causes the banner to be shown again on your next visit.
7. Accuracy of information
You must provide information that is true, current and complete, and must update it without undue delay when it changes. Sellers must ensure that descriptions, specifications, images, certifications, prices, stock levels and shipping commitments are accurate and not misleading, and must be able to substantiate any comparative, environmental or origin claim they make.
DadaGoods may request supporting documentation for any Listing or account, and may withhold, edit or remove material that cannot be substantiated. Repeated inaccuracy is treated as a violation under the Platform Rules and may attract demerit points.
8. Notices and records
A notice is validly given to a user when it is sent to the email address recorded on the account or posted to the account message centre, and is treated as received on the next Business Day after sending. A notice is validly given to DadaGoods when it is sent to the contact address published in this document.
Electronic records created and stored by the Platform, including acceptance records, order and payment records, communications and audit entries, are admissible evidence of the matters they record. Each acceptance of a document is stored with the document version, the date and time, the locale in which it was presented and the originating network address.
9. Compliance contacts
DadaGoods publishes the following points of contact and answers correspondence in English and in any of the seven storefront languages. Rights holders, data subjects, regulators and law-enforcement authorities should use the address that matches the subject of the enquiry.
Legal and compliance enquiries: legal@dadagoods.com. Intellectual property and DMCA complaints: ip@dadagoods.com. Data-protection and GDPR enquiries, including data-subject requests: gdpr@dadagoods.com. Digital Services Act and content-moderation enquiries: dsa@dadagoods.com. Written notices may be addressed to the contracting entity named in the footer of this site.
A request from a competent authority is acknowledged on the same Business Day, recorded in the compliance register and answered within the period stated in the request or, where no period is stated, within ten Business Days. We do not disclose personal data in response to an informal request that does not have a lawful basis.