Privacy policy.

MessageTrade provides wholesale SMS interconnect and managed gateway services. For data submitted through our website and commercial channels we act as a data controller. For message traffic processed through our SMSC on behalf of a customer, we act as a data processor under that customer's instructions.

Contact data you provide directly: name, company, email address, phone number and the content of your enquiry.

Service data generated by use of our platform: message metadata such as originating and destination numbers, timestamps, routing decisions, delivery receipts and volume counters.

Technical data from our website: IP address, browser and device type, and aggregated page analytics.

To respond to enquiries and provide quotations. To deliver, route and troubleshoot messaging traffic. To monitor network quality, detect fraud and prevent abuse. To meet legal, regulatory and carrier reporting obligations. To send service notices about incidents, maintenance and material changes.

We set a small number of strictly necessary cookies and local storage entries so the site works: they remember your cookie choice, whether you dismissed an announcement, your accessibility preferences and your Ask AI conversation. These require no consent because the site cannot function without them.

With your consent we also use Google Analytics 4 (measurement ID G-2VWS2HHKR1) to understand which pages are useful. It sets the _ga and _ga_* cookies, which last up to 24 months, and shares usage data with Google Ireland Limited, acting as our processor. Google advertising features, Google signals and ad personalisation are switched off, and we do not send advertising or hashed personal identifiers.

Analytics only runs on the live messagetrade.com website. With your consent we record which pages are viewed and, when an enquiry, meeting request or event meeting request is saved successfully, that a submission happened. That success measurement carries only the type of form, a fixed form name, the page it was submitted from and the first page measured after you accepted analytics. It does not include your name, company, email address, phone number, message, chosen date or time, or anything else you typed. In the events we send ourselves, page addresses are limited to a fixed list of public pages, so no search terms, query strings or Ask AI conversation identifiers are included.

Google Analytics also has its own automatic measurement settings, controlled in our Google account rather than in the website code. While these are switched on, Google may record events such as scrolling and starting to fill in a form, and those events can include the full web address of the page you were on, including anything after the question mark in it. Those automatic events are Google's own, not ours, and we cannot describe their contents on Google's behalf.

To attach the page you arrived on to a successful submission, we keep that entry page and the website you came from in your browser's session storage, together with a short meaningless reference for the saved submission that is used only to avoid counting the same submission twice and is never sent to Google. This is only written after you accept analytics, is treated as expired and ignored the next time we read or update it once 30 minutes have passed without activity, is replaced by a fresh entry on your next visit in a new tab, and is deleted if you withdraw consent. Because it is session storage, your browser also discards it when you close the tab.

No analytics script is loaded and no analytics cookie is set until you press Accept analytics. If you choose Essential only, or later withdraw consent, analytics stays switched off, collection stops immediately and the analytics cookies we can reach from this site, along with the entry-page record, are removed. Data Google has already received is subject to Google's own retention settings, which we cannot delete from your browser. You can change or withdraw your choice at any time using the Cookie settings link in the footer, and a change made in one tab applies to the others.

Our legal basis is your consent for analytics cookies, and our legitimate interest in operating a secure, functioning website for strictly necessary cookies.

Message payloads transit our SMSC in order to be delivered. We do not read, mine or sell message content. Payloads are retained only for the minimum period required to complete delivery, resolve a delivery dispute or comply with a lawful request.

We share the minimum data necessary with the carriers and interconnect partners required to deliver a given message, with vetted sub-processors that support our platform, and with regulators or law enforcement where we are legally obliged to do so. We do not sell personal data.

Messaging is global by nature. Where data moves outside the UK or EEA we rely on adequacy decisions or standard contractual clauses, supported by technical measures such as encryption in transit.

Data retention depends on the contracted service, the customer's instructions, applicable network-partner requirements and local laws and regulations. There is no single retention period for every customer or service. Relevant data types, purposes, access, location, retention and deletion requirements will be confirmed during solution design, contracting and security review. Contact the team for retention information relating to website enquiries.

MessageTrade operates security and privacy controls designed to align with ISO/IEC 27001 and the SOC 2 Trust Services Criteria, and to support applicable data-protection requirements including GDPR. We are working towards ISO/IEC 27001 certification. We are not currently certified and have not yet entered the formal audit stage. Alignment with a framework is not certification and does not constitute an independent SOC 2 report. We have completed a number of customer and partner security assessments, and we can take part in reasonable security due-diligence reviews and complete customer security attestations where required. These are customer and partner assessments, not independent audits or certificates.

Subject to applicable law you may request access to, correction of, or deletion of your personal data, object to processing, or request portability. Where MessageTrade acts as a processor we will forward your request to the relevant controller.

Privacy questions and data requests can be raised through our contact page and will be routed to the responsible team.