Privacy Policy

01

Who We Are (Data Controller)

The data controller responsible for your personal data is:
Dongguan Vidishi Technology Co., Ltd.
No. 21, Second Street, Sha Chang Er Road, Dalang Town, Dongguan, Guangdong, China 523000
Phone: +86-135-0902-5030
Email: [email protected]
This Policy applies to wholesaleautopartsdirect.com and all related B2B quoting, ordering and account services. It covers both individual visitors and the representatives of businesses, distributors, workshops and fleets who use our services.

B2B note Business contact details you provide (your name, work email, job title, company) are personal data under PIPL, GDPR and CCPA. We treat them with the same protection as consumer data.

02

Information We Collect

2.1 Information you provide to us

• Account & profile: name, company name, business email, phone number, job role, billing and shipping address, tax/VAT ID.
• Quote & RFQ forms: part numbers / OE references, requested quantities (MOQ), target price, vehicle applications, and any message you attach.
• Orders & payments: order history, shipping destination, and payment data (handled by PCI-DSS compliant processors — we do not store full card numbers).
• Communications: support tickets, emails, and chat with our trade team.
• Marketing: your consent and email/phone when you subscribe to product or industry updates.

2.2 Information collected automatically

• IP address, device and browser type, operating system, and approximate location.
• Pages viewed, products and categories browsed, referring URL, and interaction data collected via cookies and similar technologies (see Section 7).

2.3 Information from third parties

• Payment processors, shipping carriers and fraud/verification providers.
• Analytics and advertising partners, and publicly available business directories.

03

How & Why We Use Your Information

We use your data to:

• Provide quotes, process orders, and perform our B2B supply and OEM/ODM contracts.
• Manage your account, verify identity, and provide customer and technical support.
• Arrange logistics, customs documentation, and delivery to 60+ countries.
• Prevent fraud, enforce terms, and maintain the security of our services.
• Send service messages (order status, account, legal) — these are not marketing.
• With your consent or where permitted, send product news, promotions and market insights, and measure their effectiveness.
• Comply with legal obligations and improve our website and offerings.

04

Legal Basis for Processing (PIPL / GDPR)

Where the GDPR applies, we rely on: performance of a contract (Art. 6(1)(b)); legitimate interests such as B2B relationship management and security (Art. 6(1)(f)); consent for marketing and non-essential cookies (Art. 6(1)(a)); and legal obligation (Art. 6(1)(c)).

Under China's PIPL, we process personal data on the basis of consent, performance of a contract, compliance with legal obligations, and legitimate interests necessary for our business, with separate consent obtained where PIPL requires it (e.g. cross-border transfer and sensitive information).

05

How We Share Your Information

We share personal data only with:

• Service providers: payment gateways, shipping and freight forwarders, cloud hosting, CRM, email and analytics providers — bound by data-processing agreements.
• Group companies and authorized distributors needed to fulfil your order.
• Legal & regulators: where required by law, court order, or to protect rights and safety.
• Business transfers: in connection with a merger, acquisition or asset sale, with notice to you.

CCPA / CPRA We do not sell your personal information, and we do not share it for cross-context behavioral advertising. Because we do not sell or share PI, the "Do Not Sell or Share My Personal Information" right is not triggered; you may still exercise all other rights in Section 9.

06

International Data Transfers

As a China-based company, your data may be processed in China and by service providers in other countries (for example payment, hosting and logistics partners in the EU, US and Asia).

• Out of China (PIPL): cross-border transfers are made under PIPL Article 38 mechanisms — including CAC security assessment, certification, or standard contracts — with separate consent and notice of the overseas recipient.
• Out of the EEA/UK (GDPR): transfers are protected by Standard Contractual Clauses (SCCs) or equivalent safeguards.

07

Cookies & Tracking Technologies

We use cookies and similar technologies to keep you signed in, remember preferences, secure the site, analyze traffic, and (with consent) measure marketing. You can manage or disable non-essential cookies in your browser settings; some features may not work without essential cookies. For details, contact [email protected].

08

Data Retention

We use cookies and similar technologies to keep you signed in, remember preferences, secure the site, analyze traffic, and (with consent) measure marketing. You can manage or disable non-essential cookies in your browser settings; some features may not work without essential cookies. For details, contact [email protected].

09

Your Rights & Choices

Depending on where you live, you have the following rights. To exercise any of them, email [email protected]. We respond within 30 days under GDPR and 45 days under CCPA (extendable by law).

Under GDPR (EU/UK)

• Access, rectification, erasure, restriction and portability of your data.
• Object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent at any time (without affecting prior lawful processing).
• Lodge a complaint with your local supervisory authority.

Under CCPA/CPRA (California)

• Know what personal information we collect and how we use it.
• Delete your personal information, and correct inaccurate information.
• Opt out of the sale or sharing of personal information (note: we do not sell or share — see Section 5).
• Non-discrimination for exercising your rights; use an authorized agent.

Under PIPL (China)

• Know, copy, correct and delete your personal information.
• Withdraw consent, request an explanation of processing rules, and request transfer of your data.
• File a complaint with the Cyberspace Administration of China (CAC) or other authority.

Marketing communications

Every marketing email includes an unsubscribe link, and SMS/message opt-outs are honored promptly, in line with the CAN-SPAM Act. We do not respond to browser "Do Not Track" signals as a standalone opt-out.

10

Children's Privacy

Our website and B2B services are not directed to children. We do not knowingly collect personal data from anyone under 16 (under GDPR) or under 13 (under COPPA). If you believe a child has provided us data, contact us and we will delete it.

11

Data Security

We protect personal data with technical and organizational measures: TLS encryption in transit, access controls, network segmentation, regular security testing, and staff confidentiality obligations. Payment data is handled by PCI-DSS compliant processors. Our operations are managed under an ISO 9001:2025 quality system. No method of transmission or storage is 100% secure, but we work to protect your data and notify affected users and authorities where law requires.

12

Changes to This Policy

We may update this Policy from time to time. Material changes will be posted here with a revised "Last Updated" date, and where required we will request your renewed consent. We encourage you to review this page periodically.

13

Contact Us