Privacy Policy

Alliance Star Business Group PLC (“ASBG”, “we”, “us”) is committed to protecting your personal data. This Privacy Policy explains what information we collect when you use https://www.alliancestarbg.com(the “Site”), how we use it, and what rights you have over it.

1. Who we are

ASBG is a diversified Ethiopian trading and investment company, registered in Ethiopia, with head office at Century Executive Building 6th Floor, Bole Atlas Road, Addis Ababa, Ethiopia. You can reach our data team at privacy@alliancestarbg.com.

2. Information we collect

We collect the following categories of data:

• Information you give us — when you submit our Contact form, Newsletter signup, or chat with our AI assistant: your name, company, email, phone (optional), commodity of interest, and the content of your message.
• Technical information— anonymized server logs (HTTP method, path, response code), a SHA-256 hash of your IP address used solely for rate-limiting (we do not store raw IPs), and the locale auto-detected from your browser's Accept-Language header.
• Cookies — see our Cookie Policy for the full list.

3. How we use your data

• To respond to your inquiries and provide quotes (contract necessity).
• To send the periodic newsletter you opted into (consent).
• To improve the Site and our AI customer-service assistant (legitimate interest).
• To prevent abuse, fraud, and spam (legitimate interest).
• To comply with our legal obligations under Ethiopian and applicable foreign law.

We do not sell your personal data. Ever.

4. Who we share data with

We share data only with the processors required to run the Site:

• Vercel — hosting and serverless functions.
• Supabase — database for contact submissions and newsletter subscribers.
• Resend — transactional email delivery.
• Future: an AI provider (Anthropic / OpenAI) for the customer-service assistant.

Each of these is contractually bound to handle your data only on our instructions.

5. International transfers

ASBG operates from Ethiopia. Our hosting and database providers process data in their respective regions (typically EU and US). Where data is transferred outside Ethiopia, we rely on standard contractual clauses and the providers' certifications (SOC 2, ISO 27001) as appropriate safeguards.

6. How long we keep data

• Contact submissions: 5 years from last interaction (commercial necessity).
• Newsletter subscribers: until you unsubscribe.
• AI chat sessions: 24 months, then deleted.
• Rate-limit IP hashes: 1 hour, automatically purged.

7. Your rights

If you are in the European Economic Area, the United Kingdom, or California, you have the right to: access your data, correct it, delete it, restrict its processing, object to processing, port it to another service, and withdraw consent. To exercise any of these rights, email privacy@alliancestarbg.com. We respond within 30 days. You also have the right to lodge a complaint with your local data-protection authority.

8. Security

We use HTTPS site-wide, Postgres Row Level Security on all tables, rate limiting on all forms, and IP hashing instead of raw IPs. Write access to the database is restricted to server actions running with a service-role key never exposed to the browser.

9. Children

The Site is intended for B2B users. We do not knowingly collect personal data from anyone under 16. If you believe we have, contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision.

Contact

Questions about this Policy? Email privacy@alliancestarbg.com or write to: Data Protection, Alliance Star Business Group, Century Executive Building 6th Floor, Bole Atlas Road, Addis Ababa, Ethiopia.