Privacy Policy — Yeatru Sourcing

1. Who we are

Yeatru Sourcing (the "Company" "we" "us" "our") is a Yiwu-based sourcing agency registered as with full import and export rights. Our website operates at https://www.yeatru.com/?v=20260909k. We serve Amazon FBA sellers TikTok Shop operators and wholesale buyers globally and are the data controller for any personal information you provide to us.

2. Information we collect

We only collect information that is reasonably necessary to deliver a sourcing quote or execute a sourcing project. Depending on how you interact with us this may include:

• Contact details: your full name company name job title email address phone number WhatsApp / Telegram ID and country.
• Sourcing requirements: product names SKUs target quantities target prices quality standards packaging requirements private-label designs and any attachments (drawings images spec sheets) you submit via the inquiry form email or WhatsApp.
• Transaction data: proforma invoices payment records shipping address consignee information and customs-declaration data.
• Automatically collected website data: anonymised Google Analytics 4 data (country referral source pages visited approximate city) Microsoft Clarity session recordings and server access logs. IP addresses are never stored on our own servers beyond 7 days.

We do not ask for or store sensitive data such as passport scans credit card CVVs or government ID numbers. If a 3rd-party payment processor (e.g. T/T Wise) collects financial data they do so under their own privacy policy.

3. Why we use your information (legal basis)

We rely on the following lawful bases in order of prevalence:

• Contract performance (the primary basis): preparing a quote placing an order with factories arranging QC inspections booking freight or preparing shipping documents — all at your explicit request.
• Legitimate interest: sending a one-time follow-up after a quote (within 30 days) sending occasional seasonal catalogues (max 4 per year) detecting inquiry spam and improving our website through aggregated analytics.
• Your consent: if you voluntarily opt in to our newsletter (we do not operate a public newsletter as of August 2026) or check the NDA checkbox before disclosing private-label specs.
• Legal obligation: retaining invoices and customs documents for 5 years as required under China's Company Law and Tax Law.

4. Who we share your information with

We only share information when it is required to fulfil the sourcing work you hired us to do and never for advertising:

• Verified factories and suppliers inside our 75,000+ network — only the product specs target price and quantities needed to produce a quotation. We never share your final selling price or full customer list.
• QC laboratories and inspection agencies — shipment details and quality acceptance criteria.
• Freight forwarders shipping lines and customs brokers — consignee name address HS code and declared value for customs clearance.
• Banks and payment processors — proforma invoice data required to process T/T or wire transfers.
• Professional advisors — on a need-to-know basis with NDAs in place (accountants lawyers).
• Website tooling providers (outside EU/EEA) — Google LLC (Analytics hosted in the US via Google's EU-US Data Privacy Framework) and Microsoft Corporation (Clarity hosted in the US with Standard Contractual Clauses).

We do not sell rent or trade customer lists with any third party.

5. International transfers

When you send us inquiry data you acknowledge that the Company is based in China and that data is processed on servers located in China (primary) and may also be mirrored on GitHub Pages / Cloudflare CDN edges (US/EU/APAC) to serve the website. All cross-border disclosures to freight forwarders outside China are made under written instructions from you (contract necessity).

6. Retention

• Quote-only inquiries (no PO placed): deleted after 12 months from the last reply unless you ask us to keep your file.
• Completed orders: all sourcing records inspection photos and invoices retained for 5 years to comply with Chinese tax and customs record-keeping requirements after which we anonymise or securely delete them on request.
• Analytics logs: 14 months (configured inside Google Analytics 4).

7. Your rights

Subject to applicable law (in particular GDPR for EU users CCPA/CPRA for California users and China's PIPL) you may:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure ("right to be forgotten") subject to retention periods listed in §6.
• Request restriction of processing or object to processing based on legitimate interest.
• Request data portability of contact and sourcing data you originally submitted (provided in CSV / JSON format).
• Withdraw consent at any time (where processing was based on consent) without affecting lawfulness of prior processing.
• Lodge a complaint with a supervisory authority (e.g. ICO in the UK CNIL in France or your local DPA).

To exercise any of these rights email info@yeatru.com with the subject line "Privacy Request — [your full name]". We respond within 5 working days and complete verifiable requests within 30 days.

8. Cookies

We use a minimal set of cookies:

You can reject analytics cookies at any time by enabling "Do Not Track" in your browser or by writing to info@yeatru.com and we will honour the signal by disabling GA4 for your IP range on a best-effort basis.

9. Security

While no method of internet transmission is 100% secure we protect client data with: (a) full-site HTTPS with HSTS; (b) 2-factor authentication on all internal email and shared-drive accounts; (c) role-based internal access (QC staff never see your bank information finance staff never see your private product designs); and (d) signed NDAs with all staff and subcontractors.

10. Children

Our services are intended for businesses and business-registered buyers. We do not knowingly collect any information from individuals under the age of 18 or under the age of majority in their jurisdiction. If you believe a minor has submitted information to us contact us and we will delete it within 72 hours.

11. Changes to this policy

Material changes will be posted here with a new "Last updated" date and where reasonably practical announced via email to active clients within 14 days. The version posted on this page is always the legally binding version.

12. Contact the data controller