Privacy Policy

Last Updated: August 2026

This Privacy Policy explains how China Supplier Legal Verification and Due Diligence Service, operated by Yuzhao Zhang ("we", "us", or "our"), collects, uses, protects, and discloses your personal data when you visit our website, submit verification inquiries, purchase standardized reports, or utilize our legal assessment services.

We are committed to handling your personal data transparently, securely, and in compliance with applicable international privacy regulations, including the EU/UK General Data Protection Regulation (GDPR) and relevant cross-border data protection frameworks.

1. Information We Collect

To deliver legal verification and supplier due diligence reports, we collect only the necessary information:

Directly Provided Data:

Contact Details: Name, corporate/work email address, phone number, company name, and job title.

Inquiry & Supplier Information: Target Chinese company details, business registration numbers, manufacturer links, contract drafts, and correspondence provided for evaluation.

Payment & Transaction Records: Service tier selected, billing country, purchase date, and transaction IDs (we do not collect or store credit card numbers directly; all payment data is securely handled by third-party processors).

Automatically Collected Data:

IP addresses, browser type, device information, operating system, and general usage patterns via essential cookies and analytical tracking.

2. How We Use Your Information

We process your data for the following lawful business purposes:

Delivering Contracted Services: Conducting corporate registry checks, verifying factory licenses, evaluating supply agreements, and preparing your deliverable report.

Transactional Communication: Sending verification findings, deliverable PDFs, payment receipts, and responding to client inquiries.

Service Enhancement: Monitoring site functionality, diagnosing technical errors, and improving our workflow.

Legal & Regulatory Compliance: Preventing fraudulent transactions, enforcing our Terms of Service, and fulfilling tax, bookkeeping, and regulatory obligations.

3. Legal Basis for Processing (GDPR)

If you are a resident of the European Economic Area (EEA) or the UK, we process your personal data under the following legal bases:

Contractual Necessity: To fulfill our service agreement and deliver the requested due diligence reports.

Legitimate Interests: To protect our website from fraud, ensure operational security, and communicate with business clients.

Legal Compliance: To meet legal, regulatory, and financial compliance requirements.

Consent: Where you have explicitly opted in to specific non-essential communications or cookie tracking.

4. Sharing and Disclosure of Data

We do not sell, rent, trade, or monetize your personal or business data under any circumstances. We share information only with:

Payment Processors: Third-party compliant billing platforms (e.g., Stripe, PayPal) to securely process checkouts.

Infrastructure & Hosting Providers: Secure cloud servers and database hosts maintaining platform uptime.

Legal & Professional Advisors: Independent legal, tax, or auditing professionals bound by strict confidentiality duties.

Legal Authorities: Where required by court orders, government authorities, or binding legal obligations.

5. Cross-Border Data Transfers

Because our verification operations involve cross-border public records analysis and global communications, your data may be transferred to, stored, and processed in jurisdictions outside your home country. We implement standard contractual clauses and robust technical encryption to safeguard all cross-border transfers.

6. Data Security and Confidentiality

Confidentiality Commitment: Any trade secrets, draft supply contracts, pricing discussions, or factory identities shared with us are treated with strict professional confidentiality.

Technical Safeguards: We use Secure Sockets Layer (SSL) encryption, access restriction protocols, and secure cloud storage to safeguard your submitted documents from unauthorized access, loss, or alteration.

7. Data Retention

We retain your personal data and submitted inquiry materials only for as long as necessary to fulfill the purposes outlined in this Policy, satisfy warranty/clarification windows, resolve potential disputes, and maintain required accounting records.

8. Your Data Protection Rights

Depending on your jurisdiction (including GDPR and CCPA), you hold the following rights regarding your personal information:

Access & Portability: Request a copy of the personal data we hold about you.

Rectification: Request correction of inaccurate or incomplete records.

Erasure ("Right to be Forgotten"): Request deletion of your personal records, subject to statutory retention limits.

Restriction & Objection: Object to or request restriction of certain processing activities.

To exercise any of these rights, please contact us directly.

9. Third-Party Links

Our website or deliverable reports may contain reference links to third-party portals (such as official Chinese corporate registries or government data portals). We are not responsible for the privacy practices or contents of those external websites.

10. Updates to This Policy

We may modify this Privacy Policy periodically to reflect service updates or regulatory changes. The updated version will be posted on this page with a revised "Last Updated" date.