Privacy Policy - Sequoia Group

1. Introduction

Sequoia Solutions Group («Sequoia,» «we,» «us,» or «our») is a business that buys and sells used mobile phones, tablets, and computers. This Privacy Policy explains how we collect, use, store, and protect personal information in the course of our operations, and describes the rights individuals have regarding their personal data.

Our business is primarily business-to-business (B2B); however, we may also transact with individual consumers (B2C) and apply the same privacy standards to all personal data we handle.

By engaging with us — whether as a business client, individual customer, supplier, or website visitor — you acknowledge the practices described in this Policy.

2. Scope of This Policy

This Policy applies to all personal information collected and processed by Sequoia Solutions Group, including information relating to:

Business contacts and representatives of corporate clients and suppliers
Individual consumers who purchase or sell devices directly
Visitors to our website(s) and digital properties
Job applicants, contractors, and other individuals whose data we handle in the ordinary course of business

3. Information We Collect

3.1 Information You Provide Directly

We collect personal information you provide when you:

Enquire about, purchase, or sell devices
Create an account or register with us
Complete contracts, agreements, or order forms
Contact us by email, phone, or in person
Apply for employment or a contractor role

This may include: name, job title, company name, postal address, email address, telephone number, billing and payment information, and government-issued identification where required for transaction verification or legal compliance.

3.2 Information Collected Automatically

When you visit our website(s), we may automatically collect technical data such as IP address, browser type, pages viewed, and referring URLs. This data is used for security, analytics, and improving our online services.

3.3 Information from Third Parties

We may receive information about you from credit reference agencies, fraud prevention databases, logistics and shipping partners, or publicly available business directories, solely to the extent necessary for conducting transactions or verifying identity.

4. How We Use Your Information

We use personal information only for legitimate business purposes, including:

Processing and fulfilling purchase or sale transactions
Managing accounts, contracts, and invoicing
Communicating with you about orders, services, and enquiries
Verifying identity and preventing fraud
Complying with legal, regulatory, and tax obligations
Conducting credit checks or due diligence where appropriate
Improving our services, website, and internal processes
Responding to legal requests or law enforcement inquiries where required by law

We do not use personal information for automated decision-making that produces significant legal effects without human review.

5. Sharing of Personal Information

Sequoia Solutions Group does not sell, rent, or trade personal information to third parties for their own marketing or commercial purposes.

We may share personal information with third parties only where strictly necessary to operate our business, including:

Payment processors and financial institutions to process transactions
Logistics and courier providers to arrange device shipment or collection
IT service providers and cloud storage operators who process data on our behalf under confidentiality obligations
Professional advisors such as accountants, auditors, and legal counsel
Government authorities, regulators, or law enforcement where required by applicable law or legal process

Any third party acting on our behalf is contractually required to process personal information only for the specified purpose and to maintain appropriate security standards.

6. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this Policy, or as required by law. Typical retention periods include:

Transaction and contractual records: 7 years (to meet common tax and accounting obligations)
Customer and supplier account data: duration of the relationship plus a reasonable period thereafter
Website analytics data: up to 24 months
Job application data for unsuccessful applicants: up to 12 months unless you consent to longer retention

When personal information is no longer required, we securely delete or anonymise it.

7. Data Security

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, loss, alteration, or disclosure. These include access controls, encrypted storage where applicable, staff training, and regular security reviews.

No method of electronic transmission or storage is entirely secure. In the event of a data breach that is likely to result in risk to individuals, we will notify affected parties and relevant authorities as required by applicable law.

8. Data on Traded Devices

Sequoia Solutions Group enforces strict protocols regarding residual data on hardware:

Fail-Safe Processing & Sanitization: In the event that any device is received by Sequoia without prior data erasure, or fails verification of a complete factory reset, Sequoia subjects the device to a rigorous, certified data-wiping process prior to any downstream distribution or resale. This sanitization is performed in strict accordance with recognized global data destruction standards (e.g., NIST SP 800-88 Rev. 1 or equivalent).
Zero-Access Policy: Sequoia does not intentionally access, view, extract, copy, or utilize any personal data or user accounts that may temporarily reside on inbound traded devices.
Upstream Obligations: We advise and expect all supply partners and original device users to perform comprehensive data backups and initiate factory resets prior to transferring ownership of any device to Sequoia Solutions Group.

9. Your Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information, which may include:

The right to access the personal information we hold about you
The right to request correction of inaccurate or incomplete information
The right to request deletion of your personal information, subject to legal retention obligations
The right to object to or restrict certain processing activities
The right to data portability in a structured, machine-readable format
The right to withdraw consent where processing is based on consent

To exercise any of these rights, please contact us using the details in Section 12. We will respond within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before processing certain requests.

10. International Data Transfers

Where personal information is transferred outside your country of residence, we take steps to ensure it receives an adequate level of protection, including through contractual safeguards or other appropriate transfer mechanisms recognized under applicable law.

11. Cookies and Website Tracking

Our website may use cookies and similar tracking technologies to improve functionality and understand how visitors use the site. You may configure your browser to refuse or delete cookies; however, some features of the website may not function correctly as a result.

We do not use cookies for advertising or cross-site tracking purposes.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a concern about how we handle your data, please contact us at:

Sequoia Solutions Group
Privacy Officer / Data Controller Contact
Email: technology@sequoiagrp.com

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or operational requirements. The updated Policy will be posted with a revised effective date. For significant changes, we will notify relevant parties directly where practicable.

We encourage you to review this Policy periodically to stay informed about how we protect your information.