—Legal
Privacy Policy
This page explains what we collect when you contact us, why we hold it, who else sees it, and how to get it deleted. It is written to be read, not to protect us — if anything here is unclear, ask and we will answer plainly.
1. Who is responsible for your data
SourcioX is a sourcing agency based in Hangzhou, Zhejiang, China. We act as the data controller for the information described below.
No. 401, Hongxing Road, Qiaonan Block, Economic & Technological Development Zone, Xiaoshan District, Hangzhou, Zhejiang, China
For any question about this policy, or to exercise any right described in section 7, write to eric@sourciox.com. We answer within 30 days.
2. What we collect
When you send the enquiry form: your name, your company, your work email, the destination market, the product category, an optional spend range, and the text of your brief. Name, email and brief are required; everything else is optional.
When you email or call us: whatever you choose to send, which normally means the same information plus any drawings, specifications or purchase documents you attach.
Automatically, when you visit the site: the IP address your request comes from, your browser's user agent string, the time of the request and the page requested. Our hosting provider records these in standard server logs, and derives an approximate country from the IP address. We use this only to keep the site running and to spot abuse.
What we do not collect: no payment card details — you pay the factory directly wherever possible. No advertising identifiers, no cross-site tracking, no profile building. We do not knowingly collect information from anyone under 16.
3. Why we hold it, and on what legal basis
- To answer your enquiry and prepare a quote. If you are asking us to do something before any contract exists, the basis is steps taken at your request prior to entering a contract (GDPR Art. 6(1)(b)).
- To run a project you have engaged us for — purchase orders, inspection reports, shipping documents. Basis: performance of a contract (Art. 6(1)(b)).
- To keep business records and defend legal claims. Basis: our legitimate interest in running the business (Art. 6(1)(f)).
- To keep the site secure. Basis: legitimate interest in preventing spam, scraping and abuse (Art. 6(1)(f)).
We do not use your details for advertising, we do not add you to a mailing list, and we do not sell or rent data to anyone.
4. Who else sees it
We keep the list short, and every one of them is a processor acting on our instructions:
- Tencent EdgeOne — hosts and serves this website through a global edge network, and therefore sees every request, including IP addresses.
- Google Fonts — supplies the typefaces used on this site. Your browser requests the font files from Google's servers, which means Google sees your IP address.
- Our email provider — receives and stores the enquiry emails we exchange with you.
We may also disclose information where we are legally required to, or to establish or defend a legal claim.
5. Where your data goes
Our team works from China, so enquiry and project data is accessed there. Our hosting and email providers operate globally and may store data outside your country, including in the United States and the European Union. Where data leaves the EEA or the UK we rely on the providers' standard contractual clauses.
6. How long we keep it
Enquiries that do not turn into a project are deleted 24 months after the last exchange. Project records — orders, invoices, inspection reports — are kept for as long as Chinese accounting and tax law requires, currently ten years. Server logs are kept for a short period by our hosting provider and then discarded. If you ask us to delete your enquiry earlier, we will, unless we are legally required to keep it.
7. Your rights
Depending on where you live, you may have the right to:
- ask for a copy of the data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to how we use it;
- receive your data in a portable format;
- withdraw any consent you gave, at any time;
- complain to your local data protection authority.
To exercise any of these, email eric@sourciox.com from the address you contacted us with, or tell us what to look for. There is no form and no fee.
8. Cookies
This site sets no cookies of its own. We run no analytics, no advertising pixels and no session recording. If that ever changes, this page will say so before the change takes effect.
9. Security
The site is served over HTTPS only, and access to enquiries is limited to the people who answer them. No system is perfect, so if you ever need to send something highly sensitive — an identity document, for example — ask us first and we will suggest a safer route.
10. Changes to this policy
If we change how we handle data, we will update this page and change the date at the top. Material changes affecting people we are already in contact with will be sent to them by email.