Privacy Policy (GDPR)

This privacy policy is issued by Shenzhen Bingos Technology Co., Ltd. ("the Company", "we"), owner of the Asia Source Hub brand, acting as data controller. It is written on the basis of the internationally recognised data protection standard, the EU General Data Protection Regulation (GDPR, 2016/679). Where the data protection law of your country grants you broader rights, those rights also apply.

Address: Room B1B193, Exchange Square, No.1 South China Avenue, Pinghu Street, Longgang District, Shenzhen, Guangdong Province, China

E-mail: info@asiasourcehub.com

Phone / WhatsApp: +86 158 2048 6062

The Company provides product sourcing from China and Asia, manufacturer research, factory verification, quality control, sampling and logistics coordination. This policy covers individuals who visit our website, fill in our quote and contact forms, use the customer portal, write to us via live chat, apply for a job, or have a business relationship with us.

Depending on the service and our relationship with you, we may process:

• Identity: first name, last name, job title.

• Contact: e-mail address, phone number, WhatsApp and WeChat details, company and billing/delivery address.

• Customer transactions: inquiry, quote, order, sample and shipment records; product requirements; correspondence.

• Financial: proforma, payment and balance information, bank transfer references.

• Professional: CV, education and experience shared in job applications.

• Technical and security: IP address, session and activity logs, browser and device information, two-factor authentication records.

• Marketing: communication preferences, only with your consent.

• Cookies: strictly necessary cookies and the functional, analytics and marketing cookies you allow. See the Cookie Policy. The site's own visitor counter uses no cookies and does not identify you.

We do not ask for special categories of data (health, biometric data, etc.); please do not include such data in forms or messages.

We process your data only for the following purposes and on the legal bases of GDPR Art. 6:

• Contract (Art. 6(1)(b)): handling your quote and contact requests; manufacturer research, factory verification, sampling, quality control and logistics; quotes, proformas, orders and the customer portal.

• Legal obligation (Art. 6(1)(c)): invoicing, accounting and tax records; requests from competent authorities.

• Legitimate interests (Art. 6(1)(f)): information security, prevention of abuse and fraud, activity logs, service improvement, establishing or defending legal claims. You may object to processing based on legitimate interests.

• Consent (Art. 6(1)(a)): marketing communication and non-essential cookies. You can withdraw consent at any time; withdrawal does not affect the lawfulness of earlier processing.

• Job applications: assessing your application (Art. 6(1)(b), pre-contractual steps).

We do not make decisions based solely on automated processing, including profiling, that significantly affect you.

Your data may be shared, limited to what the purpose requires, with:

• Supply-chain partners: manufacturers, suppliers, quality control and inspection companies, as needed to fulfil your request,

• Logistics: carriers, customs brokers and insurers,

• IT service providers: hosting, business e-mail, backup and security services (as processors bound by contract),

• Financial institutions: banks and payment institutions,

• Advisers: legal, accounting and audit,

• Authorities: where required by law.

International transfers: The Company is established in China. By the nature of the service, your data is processed outside your country, mainly in China. Transfers from the European Economic Area (EEA) rely on appropriate safeguards under GDPR Art. 46 such as the European Commission Standard Contractual Clauses, or on the derogations of Art. 49 (e.g. necessity for the performance of a contract you requested). You can request a copy of the safeguards at the contact address below. Only the information needed for the service is shared with suppliers; your contact details are not given to manufacturers without your consent.

We do not sell your personal data.

We keep your data for as long as the purpose requires and as required by law: commercial records and invoices for the statutory period; quote requests that did not lead to an order for up to 3 years after the last correspondence; job applications for up to 1 year after the selection ends (longer with your consent). Afterwards the data is deleted or anonymised.

Technical and organisational measures include encrypted connections (HTTPS), role-based access, two-factor authentication, tamper-evident activity and access logs, encrypted backups, encryption of sensitive fields and virus scanning of uploaded files. If a data breach is likely to result in a high risk to you, we will inform you without undue delay.

Under GDPR Art. 15–22 you have the right to:

• Access: know which data we process about you and receive a copy,

• Rectification: have incomplete or inaccurate data corrected,

• Erasure ("right to be forgotten"): have data deleted where no legal retention obligation applies,

• Restriction of processing,

• Data portability: receive the data you provided in a common, machine-readable format,

• Object: to processing based on legitimate interests and to direct marketing,

• Withdraw consent: at any time for processing based on consent.

You also have the right to lodge a complaint with a data protection supervisory authority where you live, work or where the infringement took place. We recommend writing to us first; we can resolve most matters directly.

To exercise your rights you can:

• write to info@asiasourcehub.com with information that verifies your identity,

• send a letter to Room B1B193, Exchange Square, No.1 South China Avenue, Pinghu Street, Longgang District, Shenzhen, Guangdong Province, China.

We answer free of charge within one month. Where necessary, taking into account the complexity and number of requests, this period may be extended by two further months; we will tell you why. We may ask for additional information to verify your identity.

Our services are intended for businesses; we do not knowingly collect data from children under 16.

This policy may be updated to reflect changes in the law or in our processing activities. The current version is always published on this page, with its version and effective date shown at the top. We will inform you separately of significant changes.