Privacy Policy

1. Who this policy covers

This policy explains how information is handled when you visit this website, submit an RFQ, or communicate with us about a sourcing request. The website is operated bySinoSourceLink, an independent sourcing practice based in China (“we”, “us” or “our”). Our contact email for privacy matters isinquiries@sinosourcelink.com.

A full business address and any data protection representative can be requested at the same email. This policy should be reviewed against the operator's final legal structure and the requirements of the markets it serves before launch.

2. Information we collect

Information you provide in an inquiry

The RFQ form requires your full name, business email address, country and a description of what you are looking for. You may also choose to provide your company name, WhatsApp number, product category, quantity, specifications, destination country, target price, standards, certifications, additional notes and attachments. Optional fields are not required to submit an inquiry.

Attachments may contain technical or commercial information. Please do not upload identity documents, payment card data, health information or other sensitive personal data that we do not need for a sourcing request.

Information collected automatically

When you submit an inquiry, we record the page where you submitted it, the first page of your visit, the referring website where available, and any UTM source, medium or campaign parameters used in the link that brought you here. This helps us understand which pages and campaigns generate sourcing inquiries. We do not attempt to identify you personally from this information.

The site may process basic technical information needed to serve requests and protect the service, such as browser request data, timestamps and security signals. We do not store your IP address in the inquiry record. Rate limiting uses a keyed hash that is not used to identify you.

Cookies and similar technologies

This website does not use advertising cookies or a third-party advertising pixel, and we do not operate Google Analytics. We may use Cloudflare Web Analytics, which is designed to provide aggregate traffic information without cross-site tracking or advertising cookies. Cloudflare Turnstile may set strictly necessary challenge-related data to distinguish automated traffic. These technologies are provided by Cloudflare as part of the hosting and security service.

3. Why we use information

• To review and respond to your sourcing inquiry and communicate with you about it.
• To coordinate supplier discovery, quotations and procurement support where a project proceeds.
• To keep a record of the inquiry, correspondence, attachments and sourcing status.
• To protect the website, prevent spam and abuse, and maintain service security.
• To understand which pages and campaigns generate inquiries and improve the website.
• To comply with applicable legal obligations and enforce our terms.

Where applicable, the legal bases may include taking steps at your request before entering a contract, performance of a contract, our legitimate interests in operating and improving the service, compliance with legal obligations, and consent where consent is specifically required.

4. Who we share information with

We do not sell your personal information. We may share it with service providers that help us operate the website and respond to inquiries, including:

• Cloudflare for hosting, static asset delivery, security, database, object storage, bot protection and access control.
• Resend for transactional email delivery, including inquiry confirmations and internal notifications.
• Professional advisers, payment or logistics providers, or suppliers, where this is necessary to progress an agreed sourcing project.
• Authorities or other parties where required by law or necessary to protect rights and safety.

If a sourcing project requires sharing your requirement with a potential supplier, we will limit the information to what is necessary for the supplier to respond. We do not describe a supplier as a partner merely because it has received an inquiry from us.

5. International transfers

Our service providers may process information in countries other than your own. Where required, we will use appropriate safeguards for international transfers. The specific transfer mechanism depends on the final operating entity, provider configuration and applicable law, and should be documented before launch.

6. Retention

• Inquiry records: retained for up to 24 months after the last substantive contact, unless a longer period is required for an active project or legal obligation.
• Attachments: retained for up to 12 months by default, and deleted earlier on a valid request or when no longer needed.
• Rate-limit records: short-lived rolling windows, typically 24 hours or less.
• Cleanup and security logs: retained for up to 90 days unless needed to investigate an incident.
• Database backups: retained for up to 30 days in the backup rotation, subject to the operating configuration.

Retention periods are implemented through scheduled deletion and backup processes, not only by statement in this policy. Some residual copies may remain in backups until the backup rotation expires.

7. Security

We use measures intended to protect inquiry data, including encrypted transport, private object storage for attachments, access-controlled administration, short-lived upload and download authorisation, input validation, rate limiting and secrets management. No internet service can be guaranteed completely secure. You should avoid sending sensitive personal or financial data through the RFQ form.

We do not claim to provide virus scanning, product certification or laboratory testing unless a specific service is actually engaged and confirmed in writing.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to the processing of your personal information, or to request a portable copy. You may also have the right to withdraw consent where processing is based on consent, and to complain to a data protection authority.

To make a request, email inquiries@sinosourcelink.comwith enough information to identify the inquiry. We may need to verify your identity before acting. We will respond within the period required by applicable law.

9. Children

This website is intended for business users and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has submitted information, contact us so we can review and delete it.

10. Changes to this policy

We may update this policy as the service or legal requirements change. The date at the top shows the latest revision. Material changes will be communicated in an appropriate way.

11. Contact

Privacy questions and requests can be sent toinquiries@sinosourcelink.com. A full business address and any data protection representative can be requested at the same email.