Privacy Policy

Section 00Introduction and the Developer Behind This Policy

Global Tec Factory runs as the factory direct sourcing and supplier marketplace arm of MarketMatePro Limited, a company registered at Rm 7B ONE CAPITAL PLACE, 18 LUARD RD, Wan Chai, Hong Kong (HK). The website and its supporting systems were designed and developed by the developer team MarketMatey, and the same team maintains the technical platform that stores or transmits personal data collected across this site. When this policy says the Company or MarketMatePro Limited, it refers to the legal operator named above. When it says the developer, it refers to MarketMatey, who exercises engineering control over the systems rather than decisions about the data itself.

The Company respects privacy and believes honest data handling should be as visible as a machine spec card on the showroom floor. This policy sets out the categories of data collected, why each category is needed, who can access it, how long it is kept, and what rights a visitor can exercise. Reading the whole document takes about eight minutes. A short summary sits at the top of each section for anyone in a hurry, followed by the detail that matters when a legal question arrives.

Section 01Information We Collect

This section describes the personal information that can flow through the site during a normal visit, an enquiry, a quote request, a booking or a programme agreement. Not every field applies to every visitor, and the Company collects only what a given interaction reasonably needs.

• Identity details. Name, job title, department and the name of the organisation a buyer represents.
• Contact details. Email address, telephone number, postal address and country of residence or business.
• Enquiry content. The messages, drawings, requirement sheets, quantity figures and delivery windows shared through the contact form or by direct message.
• Account and booking data. Login identifiers if a private buyer portal is used, attendance dates for delegations, and preferences chosen inside the platform.
• Usage data. Pages viewed, time spent on a section, referral source, browser type, device type and the language of the operating system.
• Technical identifiers. Internet protocol address, network provider, approximate location at the city level, and identifiers stored by cookies.
• Communication records. Copies of correspondence with the sourcing desk, call notes, and the subject and resolution of each ticket.
• Supplier records. Where a factory becomes an audited partner, details of its representatives and facility managers may be held against the audit file.

The Company deliberately does not seek financial account passwords, government identity numbers beyond what export law requires, or any information needed purely for an unrelated advertising purpose. When a visitor chooses not to share an item marked optional, the core service still works.

Section 02How Information Is Gathered

Personal information reaches the Company through a small number of clearly defined routes, and each route carries a specific purpose attached to it at the moment of collection.

• Forms and direct messages. The contact page, a quote request, a booking form or an email to mail@globaltecfactory.lat.
• Site technology. Standard server logs and analytics tags that record how the site is reached and used without reading message content.
• Cookies and local storage. Small files on the device that remember choices such as language or the collapse state of a menu section.
• Call and meeting records. When a buyer speaks to a coordinator by phone or video, notes may be written with the explicit consent of the caller.
• Public sources. Public trade registers, fair exhibitor lists and company records used to verify an organisation before an audit or a delegation is arranged.
• Third parties the visitor chooses. A calendar, video link or payment processor that the visitor selects, where that service passes a confirmation back to the Company.

The Company does not buy contact lists from unknown brokers, and it does not scrape personal details from unrelated websites. If a visitor arrives through a partner, the partner only shares contact data where the visitor gave prior consent to that sharing, and this policy governs how the Company then treats it.

Section 03Cookies and Similar Tools

Cookies are small text files placed on a device to help a site remember state between requests. The Company uses a restrained cookie list that favours essential needs over tracking.

• Strictly necessary. Cookies that keep the visitor session working, remember an opt in or opt out, or protect against fraud when a form is submitted.
• Functional. Cookies that remember language, theme or the collapsed or open state of an on-page panel across visits.
• Performance. Aggregated analytics that count visitors, report the general region of traffic and measure speed, without building a cross-site profile of a named person.

Marketing cookies that would follow a visitor across unrelated sites are disabled by default on this domain. Where a visitor consents, a tag may remember that the enquiry came from a campaign so the Company can judge which listing or fair route performed well. Every non-essential cookie can be refused in the browser settings or through the consent banner, and the site functions normally when they are turned off. Disabling cookies does not stop the collection of server log data, which is described in the usage category above.

Section 04How Your Information Is Used

Every purpose below is tied to delivering or improving the sourcing, auditing, manufacturing, inspection, delegation or export coordination service. Information is never repurposed in a way that a visitor would not reasonably expect.

• To answer an enquiry and prepare a costed factory shortlist or quotation.
• To arrange a supplier audit, schedule a factory tour or book a delegation place.
• To run a first-article approval, staged inspection or final packed inspection and deliver the report.
• To coordinate export paperwork, freight and inbound clearance against the correct shipment number.
• To maintain a buyer account so previous programme history is visible on return visits.
• To send service notices about an active order, a delegation change or a security issue.
• To verify identity and reduce the risk of fraud, money laundering or export-control breaches.
• To personalise the site experience, such as showing the relevant trade or region on return.
• To compile anonymised statistics about demand so the factory list matches what buyers actually ask for.
• To meet a legal, accounting, tax, customs or regulatory obligation that applies to the Company.

Where human review is involved, such as when an inspector writes a factory report, the reviewer is bound by the same confidentiality duties as the Company itself. Staff access is granted on a need to know basis and reviewed when people change roles.

Section 05Legal Basis for Processing

Processing under the General Data Protection Regulation and comparable laws rests on recognised lawful grounds. The Company picks the ground that matches the specific activity rather than claiming one blanket basis for everything.

• Contract performance. Needed to prepare a quote, hold an audit, run an inspection or ship an order that a visitor requested.
• Legitimate interest. Used for keeping the site secure, preventing fraud, improving the platform and sending service messages about an active relationship.
• Consent. Used for optional marketing updates and any non-essential cookie, both of which a visitor can withdraw at any time.
• Legal obligation. Used where customs, accounting, tax or export-control rules require a record to be kept or disclosed.
• Vital interest. Used only in a rare emergency where the safety of a person depends on rapid data handling.

Where legitimate interest is the ground, the Company balances that interest against the effect on the individual and stops an activity whenever the privacy effect outweighs the benefit. The reasoning behind that balance can be requested in writing at any time through the contact details at the foot of this policy.

Section 06Sharing With Other Parties

The Company does not rent or sell personal information. Sharing happens only where a service genuinely requires it and is kept to the narrowest set of recipients possible.

• Factories and audit partners. A buyer requirement and contact details are shared with a shortlisted factory or an independent audit house only after the buyer confirms the shortlist.
• Service providers. Hosting, email, analytics, calendar, translation and freight companies that operate under a written data agreement.
• Professional advisers. Lawyers, accountants and insurers where the Company has a legitimate and lawful reason to consult them.
• Public authorities. Customs, tax, trade regulators and law enforcement where disclosure is required by law or a valid official request.
• Business changes. A successor entity in the event of a merger or a transfer of a programme, subject to the buyer keeping protections equal to this policy.

Whenever data is handed to another party, the Company requires that party to treat it to a standard at least equal to this policy and to use it only for the stated task. Sharing is logged where practical so a record exists of which partner held an enquiry at which stage of the journey.

Section 07International Transfers of Data

A sourcing business is international by nature. A buyer in one country may hold enquiries with a factory in another, while the platform systems themselves sit with service providers in several regions. Transferring personal data across a border therefore happens as a normal part of the service.

Where a transfer leaves Hong Kong or reaches a place without an adequacy finding, the Company puts safeguards in place. These may include standard contractual clauses approved by the relevant authority, binding corporate rules within a provider group, or an explicit consent from the individual for the particular onward move. A copy of the mechanism used for a specific transfer can be supplied in response to a written request. The Company reviews its provider countries each year and prefers partners that keep data close to the region of the buyer it serves.

Section 08Sensitive Information

Sensitive or special category data describes health, race, religion, political opinion, trade union membership or biometric material. The sourcing and inspection work of the Company rarely touches these categories, and it actively avoids collecting them.

If a visitor volunteers such detail in a free text message, such as mentioning a dietary need on a delegation or a health requirement on a factory tour, the Company treats it with extra care, limits its use to the immediate purpose, and deletes it as soon as that purpose ends. No sensitive category is ever used for advertising or any automated decision described later in this policy.

Section 09Privacy for Children

The site is a professional business service and is not aimed at children under the age of sixteen. The Company does not knowingly collect personal information from a child, and it does not market equipment sourcing to minors. If a parent or guardian reasonably believes that information from a child has reached the Company, the family should contact the team using the details below and the record will be reviewed and removed without delay. A child account is never created, and parental controls on any browser remain entirely unaffected by this site.

Section 10Data Retention Periods

Personal information is kept only as long as the purpose behind it remains or a law demands a longer term. Retention is set per category rather than as one sweeping rule.

• Enquiries and quotes. Kept for up to two years from the last meaningful contact, then reviewed and purged.
• Active programme files. Held for the life of the engagement plus a reasonable handover period.
• Inspection records. Kept for as long as the shipment warranty might be disputed, which is usually a period in line with local trade practice.
• Accounting and customs documents. Retained for the statutory period the local law sets for books and records.
• Log and analytics data. Kept in an identified form for months at most, then aggregated or erased.
• Marketing consent. Held only until the visitor withdraws consent or the list is closed.

When a retention window ends, data is either deleted or anonymised so it no longer identifies a person. Backups on provider systems may technically hold a copy for a short extra window, bound by the same rules, which is a recognised exception in most data laws.

Section 11Security Measures

Security protects personal data in the same way a crate protects a machine in transit, with several layers rather than a single lock.

• Encryption. Data travelling between the browser and the site is protected with industry standard transport security, and sensitive stored records are encrypted at rest.
• Access control. Only named staff with a real task can reach personal records, and each access is tied to an individual account.
• Least privilege. The sourcing desk sees the files for its own programmes and nothing broader.
• Testing. The developer team MarketMatey runs routine review of the platform, applies patches promptly and tests permissions after each change.
• Incident response. A breach plan identifies the records involved, notifies affected people and the regulator where the law demands it, and records the correction steps.

No internet transmission is absolute against every threat. The Company commits to rapid detection, honest notification and fast correction rather than a false promise of perfect safety. Staff handling supplier or buyer lists repeat a confidentiality refresher when the fair season begins.

Section 12Your Rights Over Your Information

Depending on where a person lives, the law grants a set of rights over personal data. The Company honours these rights consistently across regions rather than granting them only inside one territory.

• Access. The right to a copy of the records held about a subject.
• Correction. The right to fix detail that is wrong or out of date.
• Erasure. The right to ask for deletion where no legal obligation overrides it.
• Restriction. The right to pause processing while a dispute is resolved.
• Portability. The right to receive records in a structured, machine readable format where the ground is consent or contract.
• Objection. The right to stop processing that rests on legitimate interest or on direct marketing.
• Withdraw consent. The right to take back a permission given earlier for a specific purpose.
• Lodge a complaint. The right to contact a supervisory authority if a concern is not resolved.

To exercise a right, a person sends a request through the contact details at the foot of this policy, ideally stating the right and the records concerned. The Company verifies identity to avoid releasing data to the wrong person, then responds within the timeframe set by the relevant law, normally thirty calendar days or the local equivalent. A refusal is always explained with the reason and any right to challenge it.

Section 13Your Everyday Choices

Beyond formal rights, a visitor has practical controls available at any moment without writing to the Company.

• Browser privacy settings that block or restrict cookies and site data.
• A private browsing window when the visitor does not want history saved on a shared device.
• Choice of whether to join any optional field on the contact form.
• Turning off location or telemetry at the device level before using the site.
• The unsubscribe link present in every marketing update sent by the Company.
• Permission checks inside the mail client that decide whether images load from remote servers.

Each choice works independently. Refusing marketing does not stop a service message about an active order, because those two channels run under different grounds and different rules.

Section 14Third Party Links and Tools

The site may link to a factory website, a fair organiser, a regulator or a professional service provider. Those destinations are outside the control of the Company, and their own privacy policies govern what they do with a visitor afterwards. A link on this site is not an endorsement of another policy.

The site embeds a small number of third party tools for hosting, analytics and email. Each is governed by a processing agreement that keeps the Company as the controller and the provider as a limited processor. Where a video or calendar tool is used for a call that a visitor requests, the visitor may arrive at a service with its own terms, and the Company will say so in advance whenever it can.

Section 15Payment and Financial Data

Quotations and invoices for sourcing and coordination services are settled through established channels. The Company minimises how much card detail it ever holds by directing payment to a trusted payment processor under its own security standard.

On the Company side, financial records are limited to an invoice number, an amount, a payment date and a transaction reference. Full card numbers and security codes are handled by the processor and never stored by the Company or the developer platform. Where a deposit relates to a delegation or a tooling stage, the booking email states the amount, the due date and the refund position inside the terms of service that a visitor already accepted.

Section 16Analytics and Advertising

Aggregated analytics help the Company see which services are in demand and which page explains a programme clearly. The analytics used on this site report counts and regions, not the identity of a named visitor, and the raw feed is guarded so it cannot be joined to an enquiry by accident.

Where a campaign tag runs, it records only that a visit came from a particular listing, fair or advertisement. No cross-site behavioural profile of a named person is built for unrelated advertising, and any advertiser accessing an aggregate report cannot reverse the figures back to a particular person. Visitors who object to any tracking can block cookies and analytics tags through the browser, which has no effect on the core sourcing service.

Section 17Marketing Communications

Marketing updates describe the autumn delegations, new audited factory tracks or sourcing briefs that a buyer might welcome. The Company sends these only to someone who agreed to receive them, either by ticking a box during contact or by accepting an invitation sent after a prior business discussion.

Every marketing message carries a working unsubscribe route, and an unsubscribe is honoured within a few days of the click. A person who stops marketing keeps their active programme service messages, which are sent under the contract obligation rather than consent and therefore continue until the programme itself ends. Consent history is recorded so any later dispute over what was agreed has a definite answer.

Section 18California and Other Regional Rights

Visitors in California and other regions with their own privacy laws enjoy the rights in this policy described earlier, plus a few territory specific points. Californian consumers may ask what personal information the Company collected, what it was used for and whether it was sold or shared. The Company does not sell personal information in the recorded sense and does not share it for cross-context behavioural advertising.

The right to opt out of sale does not currently apply to this site because no sale takes place. Residents of other jurisdictions with similar provisions, such as readers under other strong data laws in force around the world, can rely on the global rights already stated in Section 12 rather than being treated differently by nationality. The Company does not discriminate against anyone who exercises a privacy right.

Section 19Automated Decisions

The Company does not make decisions that carry a significant legal effect purely through automated processing. Computers help route an enquiry, sort a shortlist and flag a forum, but a named coordinator reviews the outcome before any binding decision such as an audit grade, a quotation or a shipment approval is final.

If a solely automated decision were ever proposed in the future, the Company would first confirm a lawful ground, offer a human review point and give the affected person a way to object, matching the requirement of the laws that govern automated profiling. Nothing currently on the site operates in that way.

Section 20Changes to This Policy

This policy may change when the service, the law or the processing methods evolve. Material changes are flagged on the top of the document with a new update date, and where a change materially affects a known visitor, the Company will bring it to attention by the most recent email or an on-site notice.

A summary of what changed and why appears beside the date rather than a silent edit. Continued use of the site after a revision takes effect means the visitor accepts the updated policy for activity that follows the change. Earlier activity remains governed by the version in force at that time, and an archived copy of the previous policy can be provided on request.

Section 21Contacting the Team

Questions, rights requests and concerns about privacy all reach the same desk. The dedicated privacy point of contact is the operator named throughout this policy.

A valid request is answered within the legal window, and if a concern is not resolved to the satisfaction of the person who raised it, that person retains the right to approach the supervisory authority in the territory that applies. Thank you for reading the full policy rather than skipping to the consent box. End of document GTF-PRV.