Privacy Policy
Effective date: October 18, 2026.
1. What we collect
- Contact and order details — your name (or company name), email address, and payment reference. Payments are processed by our payment processor (a merchant-of-record platform); we never see or store your card details.
- Engagement brief — the information you give us to perform the research: the subject company’s name and registration details, benchmark products or factories, target regions, and preferences such as whether trading companies are acceptable.
- Service email — correspondence relating to your engagement.
We do not run advertising trackers, and we do not sell, rent, or trade any of the above.
2. What we do with it
Your information is used to perform the engagement you commissioned: to conduct the research, deliver the report, communicate with you about it, and handle billing and refunds. That is the whole list.
3. What we never do
- We do not contact the subject company or any person connected with it about you. Research is conducted passively in public records; the subject is never told who commissioned a check, or that one occurred.
- We do not share who our clients are. Client identities are confidential unless you choose to disclose them.
- We do not collect or sell individuals’ personal data, and we do not build profiles on private persons.
4. Retention
Order and billing records are kept as long as required for accounting and dispute handling. Engagement briefs, working notes and delivered reports are retained for 12 months after delivery (so we can handle corrections and follow-up questions), after which they are deleted unless you ask us to keep or delete them sooner.
5. Third parties
Two categories only: (a) the payment processor, which receives your payment data under its own privacy policy; (b) for the On-site Verification add-on, a vetted regional correspondent receives only the site address and visit instructions — never your identity. Email is inherently less secure than encrypted channels; do not include payment details in email.
6. Your choices and rights
You may request a copy of the personal information we hold about you, ask for corrections, or ask us to delete your engagement file early (subject to accounting retention). Email [email protected] and we will action it within 30 days. If you are in the EU/EEA or UK, you have the rights under GDPR or UK GDPR described above; we rely on performance of contract and legitimate interests as the legal bases for processing.
7. Changes
If this policy changes, the effective date above will change. The version in force at the time of your order governs that engagement.