Legal
Privacy policy
Last updated 10 October 2026. This policy explains what personal data we collect, why, and the rights you have over it.
Who we are
This website belongs to Shenzhen Royal International Logistics Co., Ltd. (深圳市皇家物流有限公司), trading as China Factory Sourcing ("CFS", "we", "us"), a PFC Group company. We are the controller of the personal data described here.
Address: 3rd Floor, Building D, Minle Industrial Park, Meiban Road, Longhua, Shenzhen, Guangdong, China 518131.
Company registration: Unified social credit code 91440300595694653B (Shenzhen, China).
Privacy questions: sales@chinafactorysourcing.com (subject "Privacy request").
What we collect
When you contact us or send a sourcing brief: your name, company, email address, phone or WhatsApp number, country, the details of the product you need, any files you attach, and our correspondence with you.
When you become a client: order, supplier, shipping and invoicing details. For compliance services (VAT, EPR, authorised representative, trademarks) we also collect the company and product information each registration requires.
When you visit the website: our hosting provider, Cloudflare, processes your IP address and basic request data to deliver the site and protect it from attacks. We do not use advertising trackers or analytics cookies. If we add analytics, we will update this policy first and ask for your consent where the law requires it.
We do not need, and ask you not to send, sensitive data such as health information.
Why we use it, and our legal basis
- To answer your enquiry and prepare a quote: steps you ask us to take before a contract, and our legitimate interest in replying to business enquiries.
- To deliver the services you buy: performance of our contract with you or your company.
- To keep accounting and tax records: legal obligation.
- To send occasional updates about our services or rule changes to business contacts: legitimate interests. Every email has an unsubscribe link, and you can opt out at any time.
- To keep the website and our systems secure: legitimate interests.
Who we share it with
We share only what each party needs to do its part:
- PFC Group companies, including ParcelFromChina, which handles warehousing and freight.
- Factories and suppliers, which receive product specifications and, where production or shipping needs them, your brand and delivery details.
- Freight forwarders, carriers and customs brokers moving your goods.
- Our specialist compliance partner, for VAT, EPR, authorised representative and trademark services.
- Service providers that run our systems: Cloudflare (website hosting), Resend (delivery of messages sent through our website forms), our email provider, and WhatsApp (Meta) if you contact us that way.
- Authorities, such as customs or tax offices, where the law requires it.
We do not sell personal data.
Where your data is stored
We keep enquiry and client records on servers in the EU (Ireland). Our team in China works on them from there, and only the people handling your project can see them. Everyone on the team is bound by confidentiality. Because our team is in China, UK and EU law treats that access as an international transfer, and we apply the protections described in this policy to it.
Messages you send by website form, email or WhatsApp are also handled by those providers, which may process them in other countries.
How long we keep it
- Enquiries that don't lead to an order: 24 months after our last contact.
- Client and order records: 6 years after our work for you ends, to meet tax and legal requirements.
- Security logs: as long as Cloudflare's standard retention.
Your rights
Under UK and EU data protection law you can ask us to:
- give you a copy of the personal data we hold about you;
- correct data that is wrong or incomplete;
- delete your data, where we no longer need it;
- restrict or object to how we use it, including for marketing;
- send your data to you or another company in a common format.
Email sales@chinafactorysourcing.com with the subject "Privacy request". We reply within one month.
Complaints
Please tell us first so we can put it right. You can also complain to a regulator: in the UK, theInformation Commissioner's Office; in the EU, the data protection authority in your country, such as Ireland'sData Protection Commission.
Our representatives in the UK and EU
Because we are based outside the UK and the EU, we have appointed representatives you can contact about data protection:
UK representative: Noel Murphy, St Albans Road, Bridlington, East Yorkshire, YO16 7SS, United Kingdom.
EU representative: Noel Murphy, Corrovorrin Green, Ennis, Co. Clare, Ireland.
Changes to this policy
We will post any changes here and update the date at the top. If a change affects how we use data you have already given us, we will tell you directly.