Privacy policy

Last updated: 25 October 2026

Who processes your data

Hangzhou Qiyuan Ying Technology Information Co., Ltd. (杭州起源缨科技信息有限公司), Room 401, 4th Floor, Building 3, No. 152 Haoyun Street, Liangzhu Subdistrict, Yuhang District, Hangzhou, Zhejiang, China. Contact: contact@sourcingpick.com.

Account: name, email, account type, company and registration number.
Requests and quotations: products, quantities, budget, delivery address, attached files.
Messages exchanged with our agents.
Payments: by bank transfer, on invoice. We do not collect any bank card details.

Your account data and commercial documents are kept for 5 years after the end of the relationship, the period matching our accounting obligations and the commercial limitation period. Support emails are deleted after 5 years. You can ask for your account to be deleted at any time: we then keep only what the law requires us to keep.

Vercel (hosting) and OpenSign (electronic signature). Your files are stored and our emails are sent with our own means, with no further subcontractor. Each provider only accesses the data its service requires.

Our team handles your requests from China, and some providers are located outside the European Union. These transfers are covered by the European Commission’s standard contractual clauses, backed by technical measures: encrypted exchanges, access limited to the people who need it, and logging of every consultation.

We use no advertising cookies and we never sell data. Only three families, described below.
Strictly necessary: login session, security and the language you chose. They do not require your consent and last 12 months at most.
Audience measurement: aggregated statistics on the pages visited, with no advertising identifier and no sharing with third parties. Set only after your consent, kept for 13 months at most.
Set by our electronic signature provider, OpenSign, when you sign a quotation, to authenticate the session. They serve that operation only.
The banner lets you accept, refuse or choose category by category, and refusing is as easy as accepting. Your choice is kept for 6 months, and the “Cookies” link in the footer lets you change it at any time.

Exchanges are encrypted in transit and documents at rest. Access to files is limited to the people who need it, every consultation is logged, and internal accounts are protected by two-factor authentication.
In the event of a data breach, we open an incident record, fix the flaw and assess the risk. Where a risk to your rights is likely, we notify the competent supervisory authority within 72 hours of becoming aware of it.
Where the risk to you is high, we tell you directly, describing what happened, which data is affected, what we have done and what we recommend you do.

You can request access to your data, or its rectification, erasure, restriction or portability, and you can object to its processing. Write to contact@sourcingpick.com. You can also lodge a complaint with the data protection authority in your country (in France, the CNIL, the French data protection authority).

The service is for businesses and adult individuals. We do not create accounts for anyone under 18 and do not knowingly collect their data.

Any change is published on this page with its date. If it changes the way we use your data, we tell you by email at least 30 days before it takes effect.