Privacy notice

Version 1.0 · Last updated 25 July 2026

1. Who we are

Invenio Mercantile Limited ("we", "us", "the company") is a private company limited by shares registered in Ireland, with its registered office at 24A Baggot Street Upper, Dublin, D04 N528, Ireland. We are the data controller for the personal data described in this notice.

For any question about this notice or about your personal data, contact us at info@inveniomercantile.com or on +353 1 539 4969.

2. What this notice covers

This notice applies to personal data we handle through this website, through correspondence with us, and in the course of trading with suppliers, buyers, agents and service providers. It does not apply to third-party websites we link to, which operate their own policies.

3. The personal data we collect

Information you give us

• Your name, employer or trading name, job title, email address and telephone number
• The content of your enquiry, including commodity, volume, destination and commercial terms
• Correspondence, quotations, contracts and instructions exchanged with us
• Where we trade with you, information needed to verify a counterparty and to settle payment, including company registration details, VAT and EORI numbers, bank identifiers and, where required, identity documents for anti-money-laundering checks

Information collected automatically

Our hosting provider records standard technical information when a page is served, including IP address, browser type and the page requested. This is used to operate and secure the site. We do not use it to identify individual visitors.

4. Why we use it, and our legal basis

Purpose	Legal basis under the GDPR
Responding to your enquiry and preparing a quotation	Steps taken at your request before entering a contract, and our legitimate interest in conducting business correspondence
Performing a contract of purchase or sale	Performance of a contract
Verifying counterparties and preventing fraud	Our legitimate interest in trading safely, and legal obligation where anti-money-laundering rules apply
Customs, tax, accounting and waste shipment records	Compliance with a legal obligation
Securing and operating this website	Our legitimate interest in keeping our systems available and secure
Sending commercial updates where you have asked for them	Your consent, which you may withdraw at any time

5. Who we share it with

We share personal data only where it is necessary, and only with:

• Service providers who process data on our instructions, including Google Ireland Limited for email and productivity, and Netlify for website hosting
• Parties required to move a consignment, such as freight forwarders, shipping lines, customs agents, warehouse operators and cargo insurers
• Banks and payment providers, for settlement
• Our professional advisers, including accountants, solicitors and auditors
• Regulators, customs and revenue authorities where we are legally required to disclose

We do not sell personal data, and we do not share it for third-party advertising.

6. Transfers outside the European Economic Area

Some of our providers, including our website host, are established in the United States, and trading counterparties in our lanes are located outside the EEA, including in Pakistan. Where personal data is transferred outside the EEA we rely on an adequacy decision where one exists, or on Standard Contractual Clauses approved by the European Commission together with appropriate supplementary measures. You may request details of the safeguards applied to a particular transfer.

7. How long we keep it

• Enquiries that do not lead to business: up to 24 months from the last contact, so that we can pick up a conversation you may return to
• Contract, accounting and tax records: six years from the end of the relevant accounting period, as required by Irish tax and company law
• Customs and shipment documentation: for the period required by the applicable customs and waste shipment rules
• Website technical logs: a short period set by our hosting provider, typically measured in weeks

8. Cookies

This website sets no cookies and uses no advertising or tracking technologies. Nothing is stored on your device by us, and no consent banner is therefore required. If that changes we will update this notice and seek consent where the law requires it.

9. Your rights

Under the GDPR you have the right to:

• Request a copy of the personal data we hold about you
• Have inaccurate data corrected
• Ask us to erase data where we no longer have grounds to keep it
• Ask us to restrict how we use it while a concern is resolved
• Receive certain data in a portable format, or have it transmitted to another controller
• Object to processing carried out on the basis of our legitimate interests
• Withdraw consent at any time, where consent is the basis we rely on

To exercise any of these, write to info@inveniomercantile.com. We will respond within one month. We may need to verify your identity first, and some rights are qualified where we are legally required to retain records.

10. Complaints

If you are unhappy with how we have handled your personal data, please tell us first so that we can put it right. You also have the right to complain to the Data Protection Commission, the Irish supervisory authority, at dataprotection.ie.

11. Changes to this notice

We review this notice as our operations develop and will publish any updated version on this page with a revised date. Material changes affecting how we use your data will be brought to your attention directly where we hold contact details for you.