Privacy Policy

Effective date: [DATE]. Operated by VETTOR LLC, a Texas limited liability company, registered office: [REGISTERED ADDRESS], Texas, USA. Contact: privacy@vettor.com.

1. Who we are

VETTOR LLC (“VETTOR”, “we”) operates vettor.com, a supplier-verification and trade-fraud-awareness service for international buyers sourcing from China. This policy explains what personal data we collect, why, and what rights you have over it. VETTOR LLC is the data controller.

2. Data we collect

A. Information you submit: contact details (name, email, company, country); supplier details and documents for verification orders (business names, registration numbers, and any personal data contained in documents you provide, such as names of supplier representatives); fraud-report submissions; correspondence.

B. Automatically collected: standard server logs, and — only after you consent through our cookie banner — anonymized usage analytics. We do not use hidden or obfuscated trackers.

C. Payment data: processed by our payment processor ([PROCESSOR]); we never see or store full card numbers.

3. Legal bases (GDPR, for visitors from the EEA/UK)

Contract performance (processing your verification order); consent (newsletter, optional cookies, optional anonymized case sharing); legitimate interest (site security, legal claims defense, service improvement based on aggregated data); legal obligation (tax and accounting records).

4. How we use data

To deliver verification reports and monitoring alerts; to communicate about your order; to operate the anonymized case library (published only with your explicit opt-in consent, and always stripped of identifying details); to send the newsletter you opted into; to meet legal obligations. We do not sell personal data.

5. Storage, retention, and transfers

Data is stored with our cloud providers [HOSTING PROVIDER] and retained only as long as needed: order records for [X] years (legal/accounting requirement); report submissions you opted to anonymize are stripped of identifying data before publication and the identifying original is deleted within [X] days; newsletter data until unsubscribed. Where data is transferred outside your country, we use appropriate safeguards (Standard Contractual Clauses for EEA data).

6. Your rights

EEA/UK (GDPR): access, rectification, erasure, restriction, portability, objection, and complaint to your supervisory authority. Texas residents (TDPSA): access, correction, deletion, portability, and opt-out of sale/targeted advertising (we sell nothing and run no targeted ads). California residents (CCPA/CPRA): the same rights plus non-discrimination. Email privacy@vettor.com to exercise any right; we respond within 30 days.

7. Chinese personal data (PIPL consideration)

Verification work involves registry data about Chinese companies and their legal representatives. We process the minimum necessary, never publish it, use it solely to produce your report, and keep extracts only as evidence attached to that report.

8. Security and processors

Access is limited to personnel on a need-to-know basis; documents are stored encrypted; processors are bound by data-processing agreements. A list of processors is available on request.

9. Children

Our services are for businesses. We do not knowingly collect data from anyone under 18.

10. Changes

We will post updates on this page and, for material changes, notify by email. The version date above shows the current revision.