Privacy Policy

FactoryWitness, operated by FLORAL STREAM COMPANY LIMITED

Version 1.0. Effective [date].

Who we are

FactoryWitness is operated by FLORAL STREAM COMPANY LIMITED, a company incorporated in Hong Kong ("we", "us"). We provide supplier sourcing, verification and factory audit services to buyers outside China.

We are the data controller for personal data collected through this website and in the course of providing our services.

What we collect

Information you give us. Your name, business email address, company name, country, and any business information you send us in a brief, enquiry or form — including product specifications, vendor names and contact details of people at your company or at suppliers you ask us to research.

Payment information. If you pay by card, your payment is processed by Stripe. We receive confirmation of payment and the last four digits of the card, but we do not receive or store your full card number.

Information we gather in the course of an engagement. Business information about suppliers and their representatives that is publicly available or that you provide to us.

Technical information. Our hosting provider records standard server logs, including IP address and browser type, for security and reliability purposes.

How we use it

We use personal data to:

• respond to your enquiry and provide a quotation
• deliver the services you engage us for
• take payment and issue invoices
• keep records of our engagements
• meet our legal and accounting obligations

We do not use your personal data for advertising, and we do not sell it.

Legal basis

If you are in the European Economic Area or the United Kingdom, we process personal data on these bases:

• Contract — to provide the services you have engaged us for.
• Legitimate interests — to respond to business enquiries, and to carry out verification work that is inherent to the service. We balance this against your rights and use only business information.
• Legal obligation — to keep accounting and tax records.

Who we share it with

We share personal data only with service providers that help us operate, and only as far as needed:

• Stripe — payment processing.
• Google Workspace — business email and documents.
• Cloudflare — website hosting and delivery.

We may also disclose information where we are legally required to do so.

We do not sell personal data, and we do not resell purchased trade databases.

International transfers

We are based in Hong Kong and our service providers may store data outside your country. Where personal data of individuals in the EEA or UK is transferred internationally, we rely on appropriate safeguards with those providers.

How long we keep it

• Enquiry correspondence that does not lead to an engagement: 12 months.
• Engagement records and deliverables: 7 years, to meet accounting and legal requirements.
• Payment records: as required by Hong Kong law.

Your rights

Depending on where you are, you may have the right to access, correct, delete or restrict the use of your personal data, to object to processing, and to receive your data in a portable format.

To exercise any of these rights, email us. We will respond within 30 days. If you are in the EEA or UK, you also have the right to complain to your local data protection authority.

Cookies

This website does not use tracking cookies, advertising cookies or third-party analytics. It uses no cookies at all. If that changes, this section will be updated before any cookie is set.

Suppliers and third parties

When you ask us to research a supplier, we work with publicly available business information and information you provide. We do not gather personal data about individuals beyond what is necessary to complete the work and report it.

Changes

We may update this policy. The version in force is the one published on this page, with its effective date.

Contact

Email: hello@factorywitness.com

FactoryWitness, operated by FLORAL STREAM COMPANY LIMITED, Hong Kong.