Privacy Policy
How we collect, use, and protect your personal information
Last Updated: February 24, 2026
1. Overview
Cosmic Trading ("CosmicTRD", "we", "us") operates multiple platforms including cosmictrd.com, cosmictrd.io, dropship.cosmictrd.com, formation.cosmictrd.com, automation.cosmictrd.com, university.cosmictrd.com, blog.cosmictrd.com, and chinawholesale.com.bd.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use any of our platforms. We are committed to protecting your privacy and we never sell your personal data to third parties.
2. Information We Collect
2.1 Information You Provide
| Data Type | Examples | Purpose |
|---|---|---|
| Identity | Name, email, phone, profile photo | Account creation & authentication |
| Financial | Payment records, wallet transactions, bank transfer proofs | Processing payments & invoicing |
| Order Data | Product queries, order details, shipping addresses | Fulfilling sourcing requests |
| Communication | Support messages, query discussions, feedback | Customer service & coordination |
| Business Documents | Government ID, business registration (for formation services) | Business formation compliance |
| Store Data | Shopify store URLs, product listings (for dropshipping) | Dropshipping integration |
2.2 Information Collected Automatically
| Data Type | Examples | Purpose |
|---|---|---|
| Device Info | Browser type, OS, screen resolution | Platform optimization |
| Usage Data | Pages visited, features used, timestamps | Improving user experience |
| Network Data | IP address, approximate location | Security & fraud prevention |
3. How We Use Your Information
- Provide Services: Process queries, fulfill orders, manage shipping, business formations, and payments
- Communicate: Send order updates, shipping notifications, and payment confirmations via email, SMS, Telegram, or WhatsApp
- Improve Platforms: Analyze usage patterns to enhance features and fix issues
- Security: Detect fraud, prevent unauthorized access, and protect our platforms
- Legal Compliance: Meet regulatory requirements for international trade and financial services
- Customer Support: Respond to inquiries and resolve issues
We will never use your personal information for unsolicited marketing to third parties.
4. Information Sharing
We do not sell, rent, or trade your personal information. We may share information with:
- Chinese Suppliers: Order details necessary for sourcing (name, shipping address, product specs). We do not share your email or phone with suppliers.
- Shipping Carriers: Delivery information required for international and domestic shipping.
- Payment Processors: Payment details processed through EPS gateway (bKash/Nagad). We do not store your mobile banking credentials.
- Government Authorities: Business registration data submitted to Companies House (UK), state authorities (US), as required for formation services.
- Marketplace Platforms: Order and product data shared with Amazon, Shopify, or other connected platforms for fulfillment services.
- Our Team: Internal admin staff who manage your queries, orders, QC, and deliveries.
- Legal Authorities: When required by law, court order, or to protect our rights and safety.
5. Data Storage & Security
Storage: Data is stored on secured servers hosted by Hostinger with infrastructure protection by Cloudflare. Databases are encrypted and access is restricted to authorized personnel.
Security Measures:
- SSL/TLS encryption for all data transmission (HTTPS)
- HSTS (HTTP Strict Transport Security) with preload
- Content Security Policy (CSP) headers
- WAF (Web Application Firewall) via Cloudflare
- Rate limiting and brute-force protection
- Role-based access control for admin operations
- Regular security audits and monitoring
Breach Notification: In the event of a data breach affecting your personal information, we will notify you via email and/or platform notification within 72 hours.
6. Cookies & Tracking
| Type | Provider | Purpose | Duration |
|---|---|---|---|
| Essential | Clerk | Authentication & login session | Session |
| Essential | Cloudflare | Security & DDoS protection | Session |
| Functional | CosmicTRD | Currency preference, settings | 1 year |
| Analytics | Google Analytics | Usage statistics | 2 years |
| Marketing | Meta Pixel | Ad performance tracking | 90 days |
You can control cookies through your browser settings. Disabling essential cookies may prevent platform functionality.
7. Third-Party Services
Our platforms integrate with the following third-party services, each with their own privacy policies:
- Clerk — User authentication and account management
- Cloudflare — CDN, security, and DDoS protection
- EPS Payment Gateway — bKash/Nagad payment processing
- Shopify — Dropshipping store integration
- Telegram — Order notification delivery
- Google Analytics — Platform usage analytics
- Meta (Facebook) — Advertising and Conversions API
- Hostinger — Web hosting infrastructure
8. Your Rights
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your data, subject to legal retention obligations.
- Data Portability: Request your data in a machine-readable format.
- Withdraw Consent: Opt out of non-essential communications through notification settings.
- Restrict Processing: Request that we limit how we use your data in certain circumstances.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
9. Data Retention
| Data Type | Retention Period | Reason |
|---|---|---|
| Account Information | Until account deletion | Service operation |
| Order & Transaction Records | 7 years | Legal & tax compliance |
| Payment Records | 7 years | Financial regulations |
| Communication Logs | 3 years | Dispute resolution |
| Usage Analytics | 2 years | Platform improvement |
| Business Formation Documents | 5 years | Regulatory compliance |
10. Children's Privacy
Our platforms are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will delete it promptly.
11. International Data Transfers
As a China-to-Bangladesh trading platform, your data may be processed in multiple jurisdictions:
- Order and shipping data is shared with our operations team in China for fulfillment.
- Business formation data may be processed in the UK or US as required.
- Authentication data is processed by Clerk (United States).
- CDN and security data is processed by Cloudflare (global network).
We ensure all international data transfers are conducted with appropriate safeguards.
12. Changes to This Policy
We may update this Privacy Policy periodically. Significant changes will be communicated through platform notices, email notification, and updating the "Last Updated" date. Continued use constitutes acceptance.
13. Contact Us
For privacy-related questions or requests:
- Company: Cosmic Trading (CosmicTRD)
- Address: 3rd Floor, Ramzannessa Super Market, Pallabi, Mirpur 12, Dhaka, Bangladesh
- Email: [email protected]
- Phone: +8801739393868
We aim to respond to all privacy inquiries within 30 business days.