This Privacy Policy explains what personal data we collect through this website, why we collect it, how long we keep it and the rights you have over it. It applies to the website operated by the company named below and to the enquiries you send us through the contact forms.
1. Data controller
The controller responsible for this website and the data submitted through it is:
- 深圳市寰桥咨询有限责任公司
- Shenzhen Huanqiao Consulting Co., Ltd.
- 深圳市宝安区沙井街道共和社区家和路15号206
- Room 206, No. 15 Jiahe Road, Gonghe Community, Shajing Street, Bao'an District, Shenzhen, China
- Unified Social Credit Code （统一社会信用代码）: 91440300MAKMNFCG7E
- Email: sourcing@heglobalbridge.com
We have not yet appointed a representative in the European Union. For any data protection request, please contact us directly at sourcing@heglobalbridge.com.
2. What personal data we collect
We only collect the data you actively give us when you complete a contact or enquiry form:
- Full name
- Company (optional)
- Email address
- Product category (selected from the form)
- Supplier name or link, where you provide one
- Your message and any documents or details you choose to include in it
The form-processing service that delivers your message to us may also collect limited technical data needed to deliver the message, such as your IP address and basic server logs. Details: Formspree, Inc. stores submitted form data in the United States; its privacy policy is available at https://formspree.io/legal/privacy-policy/.
3. How we use your data and the legal basis
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Name, company | Identifying you and addressing our reply | Pre-contractual steps, Art. 6(1)(b) |
| Email address | Replying to your enquiry and following it up | Pre-contractual steps, Art. 6(1)(b) |
| Product category, supplier name, message | Understanding the request, assessing scope and preparing a quotation | Pre-contractual steps, Art. 6(1)(b) |
| Form submission itself | You explicitly agreed to us processing the submitted data | Consent, Art. 6(1)(a) |
We use this data only to respond to enquiries, prepare quotations and carry out the services you ask us for. We do not use it for marketing to you unless you separately ask us to, and we do not make automated decisions that produce legal effects about you.
4. Consent and withdrawal
The contact form asks for your explicit consent before it can be sent. The consent checkbox is never pre-ticked. You can withdraw consent at any time with effect for the future by emailing sourcing@heglobalbridge.com. Withdrawal does not affect the lawfulness of processing carried out before you withdrew.
5. Who receives your data
- Form-processing service: your message is delivered through Formspree, Inc., which stores the data in the United States. Its privacy policy: https://formspree.io/legal/privacy-policy/.
- Email hosting: we read and answer enquiries using Zoho Mail, operated by Zoho Corporation, with data stored in Japan. Its privacy policy: https://www.zoho.com/privacy.html.
- Authorised staff of our company who need the data to handle the enquiry.
We never sell your data. We never share your enquiry, your supplier's name or your commercial details with suppliers or other third parties for their own purposes. Disclosures only happen if we are legally obliged to do so.
6. International data transfers
We are based in China and your enquiry is processed there. The providers named above store data in the United States (Formspree, Inc.) and in Japan (Zoho Mail). The European Commission has adopted an adequacy decision for Japan, meaning that Japan ensures an adequate level of protection for personal data; transfers of personal data to Japan therefore do not require additional safeguards. For data stored in the United States, which does not benefit from an adequacy decision, we rely on an appropriate safeguard such as Standard Contractual Clauses, together with supplementary measures where needed. Details are available on request.
7. How long we keep your data
We keep enquiry records for 24 months from our last contact with you, unless you ask us to delete them earlier. After that, records are deleted or anonymised, unless a longer period is required by law or needed to establish or defend legal claims.
8. Your rights under GDPR
If the GDPR applies to you, you have the following rights:
- Access — ask whether we process your data and receive a copy (Art. 15).
- Rectification — have inaccurate or incomplete data corrected (Art. 16).
- Erasure — ask us to delete your data in the situations of Art. 17.
- Restriction — limit how we process your data in the situations of Art. 18.
- Data portability — receive the data you gave us in a structured, machine-readable format (Art. 20).
- Objection — object to processing based on legitimate interests (Art. 21).
- Withdraw consent at any time (Art. 7(3)).
- Lodge a complaint with a supervisory authority, in particular in the EU country where you live or work (Art. 77).
To exercise any right, email sourcing@heglobalbridge.com. We may ask you to verify your identity before acting. We usually respond within one month.
9. Cookies and tracking
This website does not use cookies. In particular, we use no advertising or analytics cookies, no third-party tracking scripts and no CAPTCHA services, and submitting the contact form does not set cookies.
10. Security
Access to enquiries is limited to authorised staff, and we use the access controls and encryption provided by the form-processing and email services above. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security, but we process your data with appropriate technical and organisational measures.
11. Changes to this policy
We may update this policy, for example when our services or legal obligations change. The updated version is published on this page with a new “last updated” date.
12. Contact
Questions about this policy or your personal data: sourcing@heglobalbridge.com.