Website and Buyer Data Privacy

Controller and contact

Shenzhen Yang Squared International Trading Co., Ltd. is the controller for this website, buyer enquiries and the Track Order service. Its registered address is Room 6231, 6/F, Building 2, Yongxinhui, No. 4078 Dongbin Road, Liwan Community, Nanshan Subdistrict, Nanshan District, Shenzhen, Guangdong, China. Guangxi Xiangbaiji Trading Co., Ltd. supports product work in Yulin.

Privacy questions and requests can be sent to sales@yangsquared.com.

Information we collect

An enquiry may include your name, business email, telephone number, company, product and form, quantity, destination, intended use, specification, packing, testing and Incoterm requirements, and message. The public form does not accept file uploads; if a private document transfer is arranged after our reply, we process only the documents needed for the request.

Track Order may contain an order reference, authorised business email, approved milestones, representative sample or lot references, quality and packing evidence, documents, shipment references, next actions and publication history. Security records may include time, network address, device or browser information, access outcome and rate-limit or abuse events.

Why we use the information

We use the information to answer and assess a request, take steps toward a quotation or contract, coordinate product, testing, packing, documents and shipment, operate private buyer access, protect the services, keep necessary business records and meet applicable legal obligations.

Depending on the interaction, this processing is based on your requested pre-contract steps, performance of a contract, our legitimate interests in secure and effective business operations, legal obligations, or consent for optional analytics. We do not sell personal information.

Enquiries, uploaded files and email

Website forms use Cloudflare security checks before a request is accepted. Text enquiry details are sent to our business inbox through Resend. For security, the public form rejects file uploads; after we reply, we can arrange an appropriate private document-transfer method. Resend is also used for transactional Track Order email.

Private Track Order records

Track Order uses a private Cloudflare D1 database and R2 document storage. The authorised email is encrypted for staff use and separately transformed into a one-way lookup value for access checks. Single-use links expire after 15 minutes; customer sessions are limited and can be revoked.

Only an approved customer publication is shown to the buyer. Internal purchasing costs, supplier identities and internal notes are excluded from customer publications. Staff access is protected separately through Cloudflare Access.

Service providers and processing locations

Cloudflare provides website hosting, security, Turnstile, Workers, D1, R2 and staff access controls. Resend provides email transmission. Google Tag Manager and Google Analytics 4 operate only after analytics consent; Google Search Console provides aggregated search-performance information.

Cloudflare operates a global network and data may be processed where its services and subprocessors operate. Resend primarily processes service data in the United States and through its documented subprocessors. Where required, international transfers are handled under the providers’ data-processing terms and applicable transfer safeguards.

Retention

Expired single-use links and expired or revoked sessions are removed after a seven-day diagnostic period. Hashed access attempts and abuse events are removed after 30 days. Identifying recipient and email-provider delivery metadata for completed or skipped notifications is redacted after 90 days; pending or failed notifications remain until resolved.

A customer Track Order workspace is normally kept available during the order and for up to 12 months after completion, then customer access is closed and buyer-facing documents are removed from the active portal or restricted.

Commercial, accounting, invoice, customs and export records that must support the transaction are retained in a restricted business archive for up to 10 years where applicable law requires it, or longer only for an unresolved dispute or another specific legal obligation. Other enquiry and personal data is deleted, anonymised or restricted when it is no longer needed.

Audience measurement and consent

We use Google Tag Manager to operate Google Analytics 4. Analytics storage remains denied until you agree. No advertising tools are enabled: advertising storage, advertising user data and advertising personalisation remain denied. Your choice is saved on this device and can be changed at any time.

We also use Cloudflare Web Analytics on every page. It does not use cookies, does not track you across sites or over time, and stores no personal information; it does not depend on your Analytics choice.

Google Search Console provides aggregated information about performance in Google Search; it does not depend on the Analytics preference stored by this website.

Your rights and choices

Depending on the law that applies, you may ask to access, correct, delete, restrict or export personal information, object to certain processing, or withdraw consent. You may also complain to the competent data-protection authority. Send a request to sales@yangsquared.com; we may need to verify your identity before acting.

Effective date

This notice is effective from 3 September 2026 and will be updated when the services or processing arrangements materially change.