Privacy Policy

Last updated: 2026-10-25

This policy explains how information is handled when you browse this website, create a buyer account or contact HEHI about sourcing services.

1. Who is responsible and how to contact us

The business operator and privacy contact details are listed below. The relevant contracting entity is also identified in any written service agreement.

Brand
HEHI
Privacy contact
[email protected]

2. Information we handle

  • Account information: name, email, password hash, verification status and, if supplied, company, country and WhatsApp number.
  • Inquiries and correspondence: product requirements, quantities, messages, relevant quotation or order references, follow-up status and communications.
  • Technical information: IP addresses or derived rate-limit keys, request and security logs, browser information and operational cookie or preference data.
  • Optional measurement data: website interactions when optional analytics or advertising measurement has been enabled and you have permitted the relevant category.

Please do not submit payment-card numbers, passwords for other services, sensitive personal information or unrelated identity documents through an inquiry.

3. Purposes and legal grounds

We use information to respond to requests, take steps toward a potential business relationship, provide agreed services, manage and protect accounts, send verification or password-reset messages, prevent abuse and meet applicable recordkeeping obligations. Where the GDPR or similar law applies, the relevant grounds may include steps requested before a contract or contract performance, legitimate interests in secure and effective business administration, legal obligations and consent for optional tracking where required. We assess these grounds against applicable rights and safeguards. Creating an account or submitting an inquiry does not opt you into unrelated marketing.

4. Service providers and other recipients

Information is accessible to authorized people who need it for these purposes. Necessary service providers may include hosting, site security and email delivery providers; this theme uses Zoho SMTP when configured. We may share the minimum relevant project information with suppliers, inspection providers, laboratories, freight providers or professional advisers where needed for your request or contract. We do not sell personal information. Disclosures may also be required by law or to establish or defend legal claims.

Clicking a WhatsApp link opens a Meta-operated service. The details you send there are also subject to that provider’s privacy terms. You can use email instead.

5. International handling

Sourcing activity can involve China and providers or recipients in other countries. Where a transfer is restricted by applicable law, an appropriate lawful transfer mechanism and safeguards must be in place before that transfer. You can contact us about the recipients and safeguards relevant to your project.

6. Retention and security

We retain account information while needed to provide and protect the account, and inquiry or transaction records for the necessary business follow-up, legal recordkeeping and claims periods. When the purpose and any required retention end, information is deleted or anonymized. The appropriate period depends on the record and applicable obligations; request details from the privacy contact. Security measures include access controls, password hashing and transport encryption where supported. No system can guarantee absolute security.

7. Cookies and optional measurement

Operational storage supports sign-in, security, language or preference choices. Optional analytics and advertising integrations supplied by this theme are disabled until you allow the corresponding category. Use “Cookie preferences” in the footer to review or withdraw your choice. The Cookie Policy explains storage and provider details. Any separately installed third-party integrations must be assessed and configured as well.

8. Your choices and rights

Depending on the law that applies, you may request access, correction, deletion, restriction, portability or objection to processing, and withdraw consent for future optional processing. You may object to direct marketing. We may verify your identity proportionately and may need to keep records required by law or for legitimate claims. You may complain to the competent data protection authority. There are no solely automated decisions producing legal or similarly significant effects in the sourcing inquiry workflow provided by this theme.

9. Requests, children and changes

Send privacy requests to the contact above and identify the account or communication concerned. Avoid sending unnecessary identity documents. The site is intended for business contacts, not children. Material policy changes are reflected on this page; the date shown is the page’s last content update.

WhatsApp