Privacy Policy

1. Applicable Laws

We comply with all applicable data protection laws, including but not limited to:

• The Personal Information Protection Law of the People’s Republic of China (“PIPL”);
• The European Union General Data Protection Regulation (“GDPR”);
• Other relevant local laws and regulations governing privacy and data security.

2. Personal Data We Collect

We collect personal data that you voluntarily provide and data automatically collected when you use our Site. The types of personal data include:

2.1 Information You Voluntarily Provide

• Identity information: full name, company name, job title;
• Contact information: email address, phone number, instant messenger ID, mailing address;
• Transaction information: order details, product inquiries, shipping information, payment records (we do not store full credit card details);
• Account information: username, password, account preferences;
• Communication content: messages, emails, feedback, and support tickets you send to us.

2.2 Automatically Collected Information

• Device information: IP address, browser type, operating system, device model, unique device identifiers;
• Usage data: pages visited, time spent, clickstream, search queries, referral URLs, exit pages;
• Location data: approximate geographic location derived from IP address (if you do not disable location access);
• Cookie and tracking data: see Section 8 for details.

2.3 Sensitive Personal Data

We do not intentionally collect sensitive personal data (such as race, religion, health, biometrics, financial account passwords). If you voluntarily provide sensitive data, you explicitly consent to our processing of such data for the purposes stated in this Policy.

3. How We Collect Your Data

• Directly from you: when you register an account, submit inquiries, place orders, contact support, or fill out forms;
• Automatically: through cookies, server logs, and analytics tools when you browse our Site;
• From third parties: trusted partners (e.g., payment providers, logistics companies) who share limited data with us to fulfill our Services, subject to their own privacy policies.

4. Purposes of Processing Your Personal Data

We process your personal data only for specific, legitimate purposes:

• To provide, maintain, and improve our procurement agency Services;
• To process orders, arrange logistics, and complete transactions;
• To communicate with you: respond to inquiries, provide support, send service updates and order notifications;
• To verify your identity and prevent fraud or unauthorized access;
• To optimize our Site: analyze user behavior, troubleshoot technical issues, and enhance user experience;
• To comply with legal obligations (e.g., tax, accounting, regulatory requirements);
• With your explicit consent: send marketing emails or newsletters (you may opt out at any time).

5. Legal Basis for Processing (GDPR & PIPL)

We rely on the following legal bases:

• Consent: you have given explicit consent to process your data (e.g., marketing emails, cookies);
• Performance of a contract: processing necessary to perform our procurement agency contract with you;
• Compliance with legal obligations: processing required by law (e.g., retaining transaction records for tax purposes);
• Legitimate interests: processing for our legitimate business interests (e.g., improving Services, security), balanced against your privacy rights.

6. Sharing & Disclosure of Personal Data

We do not sell, trade, or rent your personal data to third parties for commercial purposes. We may share your data only in the limited circumstances below:

6.1 Service Providers

• Payment processors (to process payments);
• Logistics and shipping companies (to deliver orders);
• IT and hosting providers (to maintain the Site);
• Customer support tools (to assist with inquiries);
• Analytics providers (to optimize the Site).

6.2 Legal Requirements

We may disclose your data if required to do so by law or in response to valid requests by public authorities (e.g., court orders, regulatory investigations).

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our assets, your personal data may be transferred as part of the transaction. We will notify you via email or a prominent notice on our Site before any such transfer.

7. Data Retention

• Account and transaction data: retained for 7 years after your last interaction;
• Communication data: retained until your inquiry is resolved, then archived for 7 years;
• Usage and cookie data: retained for 12 months, then anonymized or deleted;
• When your data is no longer necessary, we securely delete or anonymize it.

8. Cookies & Tracking Technologies

We use cookies and similar tracking technologies (web beacons, pixels) to improve your experience on our Site.

• Necessary cookies: required for the Site to function (cannot be disabled);
• Analytical cookies: track usage to optimize the Site (you may disable these);
• Marketing cookies: for personalized advertising (you may disable these).

You can control or disable cookies through your browser settings.

9. Data Security

We take reasonable and industry-standard measures to protect your personal data from unauthorized access, loss, theft, alteration, or destruction:

• Encryption: SSL/TLS encryption for data in transit;
• Access control: role-based access, password protection, and multi-factor authentication;
• Regular audits: security scans, vulnerability testing, and data protection audits;
• Breach notification: in the event of a personal data breach that risks your rights, we will notify you and relevant authorities as required by law.

However, no electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

10. International Data Transfers

Our Services involve cross-border data transfers. We comply with PIPL and GDPR requirements for international data transfers using approved mechanisms.

By using our Services, you consent to the international transfer of your data as described in this Policy.

11. Your Rights

Depending on your location, you have the following rights under PIPL, GDPR, and applicable laws:

• Right to Access: request a copy of your personal data we hold;
• Right to Rectification: request correction of inaccurate or incomplete data;
• Right to Erasure (“Right to be Forgotten”): request deletion of your data;
• Right to Restriction: request restriction of processing;
• Right to Data Portability: request transfer of your data;
• Right to Object: object to processing for direct marketing;
• Right to Withdraw Consent: withdraw any consent you previously gave;
• Right to Lodge a Complaint: contact a data protection authority if you believe we have violated privacy laws.

To exercise your rights, contact us at successfulzgy@gmail.com.

12. Children’s Privacy

Our Site and Services are intended for users aged 18 and older. We do not knowingly collect personal data from children under 18. If you become aware that a child has provided us with personal data, contact us immediately, and we will delete such data.

13. Updates to This Privacy Policy

We may update this Policy from time to time. The updated version will be posted on this page with a revised “Last Updated” date. Your continued use of the Site after updates constitutes acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:

Email: successfulzgy@gmail.com
WhatsApp: +86 18889605489
Telegram: @buyagentchina
Company: Hainan Qionglu Industry and Trade Co.,ltd (Buy Agent China / BAC)
Address: No. 039033, First Horizontal Road, Yeli Village, Haixiu Town, Xiuying District, Haikou City