Privacy Policy

Last updated: [2026-10-30]  ·  Version 1.0

Applies to visitors and business contacts in the EU/EEA, the UK and Switzerland

1. Who we are

This website is operated by Guangzhou Guan Su Ge Technology Co., Ltd., a company registered in China under registration number 91440101347407221M, with its registered office at Room 1403, Lingnan V Valley Industrial Control Sci-Tech Building, No.9 Jinsha Road, Haizhu District, Guangzhou, Guangdong Province, China.

For the purposes described in this notice we act as the data controller. That means we decide why and how your personal data is used, and we are responsible for handling it lawfully.

2. Scope of this notice

This notice explains how we handle personal data when you:

• visit this website, including the pages you view and the forms you open;
• send us a wholesale inquiry through the contact form, email, WhatsApp, a marketplace message or an exhibition;
• ask for a quotation, samples or a product catalogue;
• subscribe to new-product or price updates;
• communicate with our sales team about an existing order or account.

It does not cover the privacy practices of third-party platforms you use to reach us, such as a marketplace or a messaging app. Those platforms apply their own policies.

Business contacts. Most of the people we deal with are companies, but the contact details of the individuals who work there are still personal data. We treat them exactly as described here.

3. Personal data we collect

We keep collection to what we actually need to respond to you and to run our business. We do not buy contact lists, and we do not collect special-category data such as health, religious or political information.

4. Why we use your data, and on what legal basis

Under the GDPR every use of personal data needs a legal basis. The table below shows ours.

Our legitimate interests

Where we rely on legitimate interests, we have balanced our interest against your rights. Our interests are: responding to business requests addressed to us, keeping commercial records, protecting our systems from abuse, and defending legal claims. We use the minimum data needed and you may object at any time (see section 10). We do not rely on legitimate interests for advertising to you.

5. Consent — and how to withdraw it

We only ask for consent for one thing: sending you new-product and price updates. Everything needed to answer your inquiry or to fulfil an order is handled on the other legal bases shown above, so you never have to agree to marketing in order to get a quotation.

How we collect consent

• Marketing is a separate, unticked checkbox on the inquiry form. It is never bundled with the terms of service or with the "send inquiry" button.
• You choose the channel: email, WhatsApp, or both. Agreeing to email updates does not mean we may message you on WhatsApp.
• We record the time, the exact wording you agreed to and the page you agreed on, so we can prove consent if asked.
• WhatsApp updates are only sent from our verified WhatsApp Business account, and only to numbers that opted in.

How to withdraw consent

Withdrawal is free, needs no reason and is as easy as giving consent. Any of these works:

• click "Unsubscribe" at the bottom of any marketing email — the link takes effect immediately;
• reply "STOP" to any WhatsApp message, or tell your contact that you no longer wish to receive updates;
• email admin@iyesido.com with the subject "Withdraw marketing consent";
• use the rights request form in section 17.

We action withdrawals within 72 hours for email and WhatsApp sends, and always within one month at the latest. Withdrawing consent does not affect the lawfulness of anything we sent before you withdrew, and it does not affect your inquiry or your order.

6. Who we share your data with

We do not sell your personal data, and we do not rent or trade contact lists. We share data only with service providers who help us operate, and only as far as needed.

Where a service provider processes data on our behalf, we have a written data processing agreement in place that limits them to our instructions and requires appropriate security.

7. International transfers

We are based in China, and some of our service providers are located outside the EU/EEA, including in [China / United States / other]. When personal data leaves the EU/EEA, the UK or Switzerland, we make sure a lawful transfer mechanism is in place:

• an adequacy decision of the European Commission, where one exists for the destination country; or
• the European Commission’s Standard Contractual Clauses (2021/914), together with a transfer impact assessment and, where needed, supplementary technical measures such as encryption in transit and at rest.

You can ask us for a copy of the safeguards we rely on by writing to admin@iyesido.com. Please note that in some destination countries, public authorities may have access rights that differ from those in the EU.

8. How long we keep your data

We keep personal data only as long as we need it for the purpose it was collected for, or as long as the law requires.

When we delete data, it is removed from our live systems and from our processors’ systems in line with their agreements. Residual copies in encrypted backups are overwritten within the backup rotation cycle of [90] days and are not used for any other purpose.

9. How we protect your data

• Encrypted connections (HTTPS) across the website and forms.
• Access limited to the sales and finance staff who need it, with individual accounts and two-factor authentication.
• Role-based permissions in our CRM, so that a sales representative in one region cannot see another region’s contacts.
• Regular software updates, backups and staff guidance on handling personal data.
• A documented process for detecting, investigating and, where required, notifying a personal data breach to the supervisory authority within 72 hours.

No system is perfectly secure, but we take these measures to reduce risk to your data.

10. Your rights

If you are in the EU/EEA, the UK or Switzerland, you have the following rights over your personal data:

• Access. You can confirm whether we hold data about you and receive a copy of it.
• Rectification. You can have inaccurate or incomplete data corrected.
• Erasure. You can ask us to delete your data where we no longer need it, or where you withdraw consent and no other legal basis applies.
• Restriction. You can ask us to pause using your data while we check a dispute about its accuracy or lawfulness.
• Objection. You can object to processing based on our legitimate interests, and to direct marketing at any time.
• Portability. You can receive the data you gave us in a structured, machine-readable format, or have it sent to another controller.
• Withdraw consent. You can withdraw marketing consent at any time, without affecting what happened before.
• No automated decisions. You will not be subject to a decision based solely on automated processing that has legal effects on you.

How to exercise them

• Email admin@iyesido.com or use the request form in section 17.
• Tell us which right you are exercising and, if possible, which email address or WhatsApp number you contacted us with.
• We may ask for one piece of information to confirm your identity — usually a reply from the email address or WhatsApp number we already hold. We will not ask for your ID document unless the request is unusually sensitive.
• It is free of charge, and we respond within one month. If a request is complex or you have made several, we may extend this by up to two further months and will tell you why within the first month.
• If we cannot fulfil a request — for example because we must keep an invoice for tax purposes — we explain why and tell you how to complain.

11. Complaining to a supervisory authority

If you think we have handled your data unlawfully, please contact us first so we can put it right. You also have the right to lodge a complaint with a data protection authority — in the EU country where you live, where you work, or where the alleged infringement took place. In [Germany] this is [name and address of the competent authority]. The list of EU authorities is published by the European Data Protection Board. In the UK, the authority is the Information Commissioner’s Office (ico.org.uk).

12. Do you have to give us your data?

You are never legally obliged to give us personal data. However:

• if you do not give us a name and a working email address, we cannot reply to your inquiry;
• if you do not give us a delivery address and contact details when ordering, we cannot perform the contract;
• if you do not give us an invoice address and tax number where required, we cannot issue a compliant invoice;
• giving us a WhatsApp number is always optional — email is enough.

We do not make decisions about you by automated means, and we do not build profiles for advertising.

13. Automated decision-making and profiling

We do not use automated decision-making that produces legal or similarly significant effects on you, and we do not carry out behavioural profiling for advertising purposes. Analytics are used in aggregate to understand site performance.

14. Cookies and similar technologies

We use strictly necessary cookies to run the site. Analytics and marketing cookies are set only after you agree via the cookie banner, where "Reject all" is offered on the same layer and is exactly as easy to click as "Accept all". You can change your choice at any time via "Cookie settings" in the footer. For the full list of cookies, their purpose and duration, see our Cookie Policy.

15. Children

Our website and services are aimed at businesses. We do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

16. Changes to this policy

We review this notice at least once a year and whenever our tools, providers or legal obligations change. The "Last updated" date at the top always shows the current version. If a change materially affects how we use your data, we will notify subscribers by email before it takes effect, and where the law requires it we will ask for your consent again.

17. Contact us

For any question about this notice, or to exercise a right:

• Email: admin@iyesido.com
• Post: Guangzhou Guan Su Ge Technology Co., Ltd., attn: Privacy Team, Room 1403, Lingnan V Valley Industrial Control Sci-Tech Building, No.9 Jinsha Road, Haizhu District, Guangzhou, Guangdong Province, China
• Response time: within one month of receiving your request
• Privacy request form: [/pages/privacy-request]