Privacy Policy

This Privacy Policy explains how Vetted Source ("we", "our", or "us") collects, uses, stores, and protects your personal information when you visit our website or use our sourcing and supply chain services. We are committed to handling your data with transparency and in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Union and United Kingdom.

01

Who We Are

Vetted Source is a sourcing agency that connects US and Europe-based eCommerce sellers with verified Chinese manufacturers. We manage the full sourcing and supply chain process from product research to final delivery.

For the purposes of data protection law, Vetted Source is the data controller responsible for your personal information.

02

What Information We Collect

Information you provide to us

  • Submit an enquiry, contact form, or consultation request
  • Sign up for our newsletter or marketing communications
  • Engage our services as a client
  • Correspond with us by email, phone, or messaging platforms
  • Provide documents or information as part of a sourcing project
This may include your name, email address, phone number, company name, business address, product requirements, and payment information.

Information collected automatically

  • IP address and approximate geographic location
  • Browser type and version
  • Pages visited and time spent on each page
  • Referring website or source
  • Device type and operating system

Information from third parties

We may receive information about you from referral partners, business directories, or publicly available sources, where this is relevant to providing our services.

03

How We Use Your Information

PurposeDescription
Service deliveryTo provide sourcing, supplier verification, quality control, logistics, and related services you have engaged us for.
CommunicationTo respond to your enquiries, provide updates on your projects, and manage our working relationship.
Invoicing & paymentsTo process payments, issue invoices, and maintain financial records required by law.
MarketingTo send you newsletters, service updates, or relevant content — only where you have consented or where we have a legitimate interest.
Website improvementTo analyse how our website is used and improve its content, design, and functionality.
Legal complianceTo comply with applicable laws, regulations, and legal obligations including tax, customs, and trade requirements.
We will never sell your personal information to third parties or use it for purposes unrelated to our business relationship with you.
04

Legal Basis for Processing (GDPR)

If you are located in the European Union or United Kingdom, we process your personal data under one or more of the following legal bases:

Contract performance
Legitimate interests
Legal obligation
Consent
  • Contract performance — processing is necessary to deliver the services you have requested or to take steps before entering a contract with you.
  • Legitimate interests — processing is necessary for our legitimate business interests, such as improving our services and maintaining business records.
  • Legal obligation — processing is necessary to comply with a legal obligation, such as maintaining accounting records or complying with customs regulations.
  • Consent — where we rely on your consent, for example for marketing emails, you can withdraw consent at any time.
05

Who We Share Your Data With

  • Freight forwarders and logistics partners — to arrange shipping, customs clearance, and delivery of your goods.
  • Third-party quality inspection agencies — to conduct factory audits and pre-shipment inspections on your behalf.
  • Customs brokers — to prepare and submit import and export documentation.
  • Payment processors — to process invoices and payments securely.
  • IT and software service providers — including email platforms, project management tools, and website hosting providers.
  • Legal and professional advisers — where required to obtain professional advice or in connection with legal proceedings.
  • Regulatory authorities — where required by law, court order, or government authority.
We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.
06

International Data Transfers

As a sourcing agency operating between the US, Europe, and China, some of your personal information may be transferred to and processed in countries outside your home country, including China.

Where such transfers occur in connection with EU or UK personal data, we ensure appropriate safeguards are in place — including standard contractual clauses approved by relevant data protection authorities.

Supplier contact details and project specifications may be shared with manufacturers or inspection partners based in China as part of delivering our sourcing services. Only the information necessary for that specific purpose will be shared.

07

How Long We Keep Your Data

Active clients
Duration of business relationship + 7 years thereafter, to comply with accounting and legal record-keeping requirements.
Enquiries — no project
Up to 2 years from the date of your last contact with us.
Marketing communications
Until you unsubscribe or withdraw consent.
Website analytics data
Typically no longer than 26 months, in line with analytics tool retention settings.

When your data is no longer required, we will securely delete or anonymise it.

08

Your Rights

Right of access

Request a copy of the personal data we hold about you.

Right to rectification

Ask us to correct inaccurate or incomplete personal data.

Right to erasure

Ask us to delete your personal data in certain circumstances.

Right to restrict processing

Ask us to pause processing of your data in certain circumstances.

Right to data portability

Receive your data in a structured, machine-readable format.

Right to object

Object to processing for direct marketing or on legitimate interests grounds.

To exercise any of these rights, please contact us using the details in Section 13. We will respond within 30 days.
09

Cookies and Tracking

Essential cookies Analytics cookies Marketing cookies
  • Essential cookies — necessary for the website to function correctly. These cannot be disabled.
  • Analytics cookies — help us understand how visitors use our website. We use tools such as Google Analytics.
  • Marketing cookies — used to track visitors across websites to display relevant advertisements. Only set with your consent.

When you first visit our website, you will be asked to consent to non-essential cookies. You can change your preferences at any time through your browser settings.

10

Data Security

Encrypted transmission using SSL/TLS technology
Restricted access on a need-to-know basis
Regular review of data handling practices
Security-vetted third-party platforms
While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately.
11

Children's Privacy

Our website and services are intended for business use by adults. We do not knowingly collect personal information from anyone under the age of 18.

If you believe we have inadvertently collected information from a minor, please contact us and we will delete it promptly.

12

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page.

Your continued use of our website or services after any changes constitutes your acceptance of the updated policy.

13

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

We aim to respond to all privacy-related enquiries within 5 business days.