This platform attaches great importance to the data security and privacy rights of our global users. In cross-border bulk B2B trade, data includes not only basic personal contact information but also core business secrets, supply chain networks, proprietary design drawings, and strategic procurement price benchmarks. We are committed to strictly complying with the EU General Data Protection Regulation (GDPR), various state privacy acts in the US, and major global cybersecurity and data compliance regulations, building an impregnable digital security line of defense for you.
This policy transparently discloses how we collect, store, use, and share your personal and enterprise information. By registering, logging in, and using the various cross-border procurement services on this platform, you are deemed to have fully trusted and agreed to this Privacy Policy. We will perform our duties diligently, employing industry-leading digital encryption and isolation technologies to safeguard the security of your digital assets.
To maintain the smooth flow of the global B2B supply chain, complete necessary cross-border anti-money laundering compliance checks, and provide precise commodity matching, the platform collects data across the following dimensions with your informed consent and authorization:
We understand that in international bulk customized trade, product structural drawings and design schemes are the foundation of a buyer's business. To this end, the platform has established a stringent enterprise anti-leakage control system:
Compliance Protection Statement: All data on this platform is hosted on infrastructure provided by top-tier cloud service providers with international highest-standard security certifications (such as ISO 27001, SOC 2). We engage external independent international cybersecurity experts annually to conduct high-intensity penetration testing and data leakage compliance audits to ensure the platform's security is foolproof.
We retain data within reasonable legal limits to safeguard the completeness of the cross-border trade evidence chain while upholding the user's "Right to be Forgotten":
The platform will never sell your privacy to external third parties arbitrarily. Data sharing required for contract performance follows the principle of minimal disclosure:
| Third-Party Provider Type | Shared Data Scope | Sole Legitimate Purpose | Security Level |
|---|---|---|---|
| International Financial & Escrow Banks (e.g., Clearing banks, Acquirers) |
Payment enterprise headers, partial bank card numbers, wire transfer vouchers | Verify receipt of bulk deposits/balances, intercept money laundering risks | Compliant with PCI-DSS highest financial-grade encryption standards |
| Professional Logistics & Shipping (e.g., DHL, Major shipping lines) |
Consignee name, destination enterprise address, customs declaration contact phone | Print bill of lading, arrange space, customs declaration, and destination delivery | Signed strict data-only-for-use agreements |
| International Inspection Agencies (e.g., SGS, TUV) |
Customized technical drawings, sample inspection requirements | Assist in arbitration inspections when buyers encounter major quality disputes | Independent third-party lab proprietary secure hosting |
If you are a purchaser from jurisdictions with high-privacy protection legislation such as the EU, UK, Canada, or California (CCPA), you enjoy the following fully autonomous statutory data rights on this platform:
In an open cross-border network environment, "Man-in-the-Middle" phishing targeting enterprise commercial emails and fake collection account fraud are emerging endlessly. We have established a 24/7 data fuse defense system:
Once the platform's risk control center intercepts attempts within milliseconds by unknown, non-trusted regions IP addresses to forcibly brute-force login to your transaction dashboard, or abnormal downloads of bulk product drawings within a short time, or frequent changes to settlement account information, the system will instantly trigger an [Emergency Fuse Mechanism], temporarily forcibly locking the account and suspending all in-transit transactions. At this time, the system will forcibly require the user to perform Multi-Factor Authentication (MFA/2FA).
The platform has a dedicated independent "Data Protection Officer (DPO)" seat. If you have concerns about any clause details in this privacy protection policy, or believe your enterprise core drawing assets have been accessed non-compliantly, or if you need to exercise the statutory right to withdraw consent granted to you by GDPR:
We warmly welcome and strongly recommend that you do not go through long and costly complaints via external third-party agencies. You can click the [Contact Customer Service] button at the top or bottom of the webpage and explain your specific privacy protection demands to our professional customer service team. After verifying your enterprise and buyer identity, our legal and information security compliance team will do their utmost to provide you with a detailed response, correction, or corresponding digital erasure processing at the first opportunity during business hours.
