Privacy Policy

Template text. Have it reviewed by legal counsel and replace every bracketed item before publishing. Last updated: [date].

1. Who we are

This website is operated by Nanjing WeTrade for Trading & General Services Co., Ltd. (南京魏贸商贸服务有限公司, Unified Social Credit Code 91320100MAKMWPUW95), registered at Room 403-2094, Building 2, No.18 Jialingjiang East Street, Jianye District, Nanjing, Jiangsu Province, People’s Republic of China (“WeTrade”, “we”). We are the personal information handler under China’s Personal Information Protection Law (PIPL) and the controller under the EU and UK General Data Protection Regulation (GDPR). Contact for privacy matters: [privacy e-mail address].

2. What we collect and why

• Request Centre forms (sourcing requests, RFQs, service requests, partner requests): your name, company, work e-mail, phone or messaging ID if you give one, country or region, preferred language, and the details of your request. We use them only to assess and answer your request and to keep a record of it.
• Technical data: our hosting provider keeps standard server logs (IP address, time, page requested, browser type) for security and troubleshooting.
• Cookies: essential cookies remember your language and your cookie choice. Optional cookies are used only if you choose “Accept all”.

We do not ask for sensitive personal information and we do not use automated decision-making or profiling.

3. Legal basis

Under PIPL we process form data on the basis of your consent, given when you tick the consent box and send the form, and where needed to take steps at your request before entering into a contract. Under GDPR the bases are your consent (Art. 6(1)(a)), steps prior to a contract (Art. 6(1)(b)) and our legitimate interest in keeping the site secure (Art. 6(1)(f)).

4. Where your data is stored: cross-border transfer

This website is hosted on servers outside mainland China, operated by [hosting provider, country]. If you submit a form from mainland China, your personal information is therefore transferred to and stored in [country]. The consent box on each form asks for your separate consent to this transfer. Request notifications are also sent by e-mail to our staff in China. For visitors in the EEA or the UK, any transfer outside the EEA or the UK relies on [standard contractual clauses / other safeguard].

5. Who receives your data

Our own staff who handle requests; our hosting and e-mail providers acting on our instructions; and, only where needed to answer your request and with your knowledge, suppliers, inspectors or logistics partners. We do not sell personal information.

6. How long we keep it

Requests are kept for [24 months] after our last contact with you, unless a contract or the law requires longer, and are then deleted or anonymised. Server logs are kept for [30 days].

7. Your rights

You can ask us to tell you what we hold about you, give you a copy, correct it, delete it, restrict or explain how it is used, and you can withdraw your consent at any time (this does not affect processing already carried out). Under GDPR you also have the rights to data portability and to object. Write to [privacy e-mail address]; we answer within [15 working days / one month]. You may also complain to the data protection authority in your country or, in China, to the competent cyberspace administration.

8. Children

This is a business website. It is not directed at children, and we do not knowingly collect information from anyone under 14 (China) or 16 (EU).

9. Security

The site uses HTTPS, access to stored requests is limited to authorised staff, and the software is kept up to date. No system is perfectly secure; if a breach affects you, we will inform you and the authorities as the law requires.

10. Changes

We will post any changes on this page and update the date at the top. If a change affects how we use information you have already given us, we will ask for your consent again where the law requires it.