Privacy Policy

SourceBay operates as an international e-commerce and buying-agent platform, facilitating the purchase and shipment of products from China to customers worldwide. This policy applies to all personal data collected through our website, mobile application, and any related services or communications.

We are committed to complying with applicable data protection laws, including the Bangladesh Data Protection Act and, where applicable, the General Data Protection Regulation (GDPR).

We use the information we collect for the following purposes:

• Processing and fulfilling your orders, including sourcing, payment, and shipping coordination
• Creating and managing your account
• Sending order confirmations, shipping updates, and important service notifications
• Providing customer support and resolving disputes
• Personalizing your shopping experience and product recommendations
• Improving our platform, services, and overall user experience
• Detecting, preventing, and investigating fraud, abuse, or security incidents
• Complying with legal obligations, including customs and import documentation
• Sending promotional communications (with your consent, where required by law)
• Conducting analytics and research to improve our business

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information in the following limited circumstances:

• Suppliers & Logistics Partners: We share necessary order details (e.g., product specifications) with Chinese suppliers and shipping carriers to fulfill your order. Minimal personal data is shared on a need-to-know basis.
• Payment Processors: Payment information is shared with our payment gateway providers (e.g., SSLCommerz) to process transactions securely. These providers are PCI-DSS compliant.
• Customs & Government Authorities: We are required to share shipment details with customs authorities in the origin and destination countries as part of legal import/export requirements.
• Service Providers: We engage trusted third-party companies for hosting, analytics, email delivery, and customer support. These providers process data only as instructed by us.
• Legal Requirements: We may disclose information if required by law, court order, or government regulation, or to protect the rights and safety of our users and the public.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to equivalent data protection commitments.

We use cookies and similar technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us:

• Keep you logged in to your account
• Remember your preferences such as language and currency
• Maintain your shopping cart between sessions
• Analyse how you use our platform to improve performance
• Deliver relevant product recommendations

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our platform. We do not use cookies to track you across unrelated third-party websites for advertising purposes.

We implement industry-standard technical and organizational measures to protect your personal information, including:

• SSL/TLS encryption for all data transmitted between your device and our servers
• Encrypted storage of sensitive data at rest
• Regular security audits and vulnerability assessments
• Access controls ensuring only authorized personnel handle personal data
• Secure payment processing through PCI-DSS compliant providers

While we strive to use commercially acceptable means to protect your information, no method of internet transmission or electronic storage is 100% secure. If a data breach occurs that affects your rights, we will notify you as required by applicable law.

We retain your personal data for as long as necessary to fulfill the purposes described in this policy, or as required by law. Specifically:

• Account data is retained for the duration of your account and for up to 5 years after account deletion for legal and audit purposes
• Order and transaction records are retained for 7 years for tax and accounting compliance
• Communication records are retained for 2 years
• Analytics data is anonymized and retained indefinitely

You may request deletion of your account and associated data at any time, subject to our legal retention obligations.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Data Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing of your data for direct marketing purposes
• Withdrawal of Consent: Withdraw consent for processing where consent is the legal basis, without affecting past processing

To exercise any of these rights, please contact us at support@sourcebay.com.bd. We will respond to your request within 30 days.

Our platform may contain links to third-party websites, including supplier product pages, social media platforms, and payment gateways. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the content or privacy practices of third-party websites.

Our platform is not directed to children under the age of 18. We do not knowingly collect personal information from minors. If you believe that a child has provided us with personal information, please contact us immediately at support@sourcebay.com.bd and we will promptly delete such information.

As an international platform, your information may be transferred to and processed in countries other than your own, including China (for supplier coordination), Bangladesh (our headquarters), and other countries where our service providers operate. These countries may have different data protection standards than your country of residence.

By using our services, you consent to such transfers. We take steps to ensure that any international transfers are subject to appropriate safeguards consistent with this Privacy Policy.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. We will notify you of material changes by posting the updated policy on our platform and updating the "Last updated" date at the top of this page.

We encourage you to review this policy periodically. Your continued use of our services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.