Privacy policy.

MessageTrade provides wholesale SMS interconnect and managed gateway services. For data submitted through our website and commercial channels we act as a data controller. For message traffic processed through our SMSC on behalf of a customer, we act as a data processor under that customer's instructions.

Contact data you provide directly: name, company, email address, phone number and the content of your enquiry.

Service data generated by use of our platform: message metadata such as originating and destination numbers, timestamps, routing decisions, delivery receipts and volume counters.

Technical data from our website: IP address, browser and device type, and aggregated page analytics.

To respond to enquiries and provide quotations. To deliver, route and troubleshoot messaging traffic. To monitor network quality, detect fraud and prevent abuse. To meet legal, regulatory and carrier reporting obligations. To send service notices about incidents, maintenance and material changes.

Message payloads transit our SMSC in order to be delivered. We do not read, mine or sell message content. Payloads are retained only for the minimum period required to complete delivery, resolve a delivery dispute or comply with a lawful request.

We share the minimum data necessary with the carriers and interconnect partners required to deliver a given message, with vetted sub-processors that support our platform, and with regulators or law enforcement where we are legally obliged to do so. We do not sell personal data.

Messaging is global by nature. Where data moves outside the UK or EEA we rely on adequacy decisions or standard contractual clauses, supported by technical measures such as encryption in transit.

Enquiry records are kept for up to 24 months after last contact. Message metadata and delivery receipts are retained for the period agreed in the applicable service contract, typically 6 to 12 months, after which records are aggregated or deleted.

We operate role-based access control, encryption in transit, segregated production environments, continuous monitoring and documented incident response, aligned to ISO 27001 and SOC 2 control expectations.

Subject to applicable law you may request access to, correction of, or deletion of your personal data, object to processing, or request portability. Where MessageTrade acts as a processor we will forward your request to the relevant controller.

Privacy questions and data requests can be raised through our contact page and will be routed to the responsible team.