Privacy Policy

1. Introduction

• This Privacy Policy explains clearly and comprehensively what personal data Global Sources collects and how and why we collect, use, and manage that data.
• Under the EU General Data Protection Regulation (GDPR – EU 2016/679), Global Sources acts as the data controller (see “Contact Details”). Located in Hong Kong, Global Sources is responsible for data collected on its websites and at trade shows. Please note your personal data, while primarily processed by Global Sources, may be stored in databases accessible to other affiliates of Global Sources.
• We may update this policy periodically to remain compliant with legal requirements. Please refer to the “Last Updated” date at the bottom for the latest revision. For significant changes, we may notify you by email, posting alerts, or displaying notifications when you access our systems. This policy does not override the terms of any contract you have with us or with our suppliers, nor does it affect your rights under applicable data protection laws.
• For all inquiries regarding this policy (including exercising your data subject rights), our Data Protection Officer (DPO) is your primary point of contact. If you have concerns or complaints about how we use your personal data, please contact us or our Customer Support team first.
• You also have the right to lodge a complaint with your local or national data protection authority if you suspect a breach of applicable data protection laws.
• For EU supervisory authorities, see: http://ec.europa.eu/justice/article-29/struct/data-protection-authorities/index_en.htm.
• For members of the Global Privacy Enforcement Network, see: https://www.privacyenforcement.net/about_the_network#members.
• If you're located in Hong Kong, you may complain to Global Sources or the Office of the Privacy Commissioner for Personal Data (PCPD): https://www.pcpd.org.hk/english/complaints/how_complaint/complaint/complaint.html.
• We also have an EU representative. To contact them, please email: service@globalsources.com.

2. Third‑Party Links

• Our website may contain links to partner websites, advertisers, or affiliated companies. Those sites have their own privacy notices, and we are not responsible for their content or policies. Please review their privacy policies before providing personal data to them.

3. How Do We Collect Your Personal Data?

• Offline collection – at trade shows, roadshows, seminars, and events:
  • Registration forms: attendees fill in forms and this data is entered into our system.
  • Profile updates: attendees may complete or update previously stored registration details.
  • Business cards: we scan and store attendees’ business card information.
  • Booth visits: attendees’ badge scans at exhibitor booths using the Global Sources exhibitor app. Visit data is uploaded to our servers.
• Website forms:
  • Registration and inquiry forms: visitors register to access personalized features like messaging. We support full registration or minimal “professional” registration, and self-signup for advertiser-registered suppliers.
  • Subscription forms: to receive alerts, product/supplier recommendations, e-magazines, etc.
  • Sample/direct purchase order forms: to request product samples or place direct purchase orders.
  • Buyer sourcing event forms: to collect basic details from buyers interested in exclusive sourcing events.
• Customer support interactions:
  • Telemarketing: contacting individuals for market research, service follow-up, identifying potential trade‑show attendees or advertisers.
  • Customer support: via chat, hotline, fax, or email for queries, complaints, feedback, or suggestions.
  • Inbound advertiser leads: prospective advertisers’ details validated and stored in our system.
• Tracking technologies: we use cookies and related technologies on our website. Data collected via cookies is subject to our Cookie Policy.
• Other sources: third-party sources like public databases, marketing partners, third-party apps, and social media platforms. We combine this data with information collected through our services.

4. What Personal Data Do We Collect?

• Contact & communication info: name, address, phone number, email, social media contacts.
• Business details: job title, company name, company size (e.g., employee count, turnover rate).
• Preferences: marketing preferences inferred from subscriptions, product/supplier alerts, e-magazines, trade-show updates, and online behavior.
• Display & language preferences.
• Communications: interactions via Customer Support, RFI (Requests For Information), RFQ (Requests For Quotation), RFS, chat with exhibitors or visitors.
• Purchase & payment records: samples ordered, direct purchase orders, event registrations, subscriptions.
• Device & log data: IP, browser software, OS, visit date/time, referrer URL, page path, login IDs, device IDs (e.g. MAC or mobile number).
• Online behavior: cookies-based data (frequency, searches, pages, product/supplier views, downloads, favourites, orders, sharing behaviors).
• Offline behavior: trade show attendance, booth visits (via exhibitor app), summit/seminar participation.

5. How Do We Use Your Personal Data?

• To deliver our products and services, develop new offerings, and protect Global Sources and its visitors, buyers, suppliers, and advertisers. We may ask you for certain data; failure to provide it may limit our ability to serve you.
• Legitimate business interests:
  • Personalized product recommendations via email or phone on behalf of online advertisers.
  • Direct marketing (DM), electronic direct marketing (eDM), telemarketing, SMS, social media, or third-party marketing of our online services.
  • Promotion of Global Sources trade shows and services through multiple channels.
  • Building and segmenting contact lists for rental/sale to third-party suppliers for direct marketing.
  • Using partners’ third-party marketing materials to target visitors based on preference and behavior.
  • Generating lists for market research initiatives.
  • Reviewing visitor details to match them with advertisers for information needs.
  • Customer support and timely handling of inquiries and feedback.
  • Technical support for internal audits, data analysis, product improvements, and fraud prevention.
  • Compliance with legal and regulatory obligations.
• Your personal data is used only for these purposes, and we rely on legal bases including compliance, contract performance, legitimate interests, or your consent where required.

6. How Do We Protect Your Personal Data?

• We cannot guarantee 100% security but strive to prevent unauthorized access, alteration, or disclosure. We review our collection, storage, and processing methods regularly and employ physical, technical, and organizational safeguards.
• We engage external security experts for regular assessments.
• Access to data is limited to staff and third parties under confidentiality agreements.
• We use strong passwords, authentication, and access controls.
• We apply encryption, pseudonymization, and anonymization where appropriate.
• We recommend strong passwords, enabling 2FA, logging out, and securing your devices.
• Please note that information you willingly share may be visible to third-party apps or affiliates.

7. How Long Do We Keep Your Personal Data?

• We retain your data only as long as reasonably necessary and then securely delete or archive it.
• It may be retained longer (up to 7 years) for legal, regulatory, tax, accounting, complaints, statutory periods, or litigation requirements.

8. Who Do We Share Your Personal Data With?

• Service providers on our behalf (order fulfillment, IT management, email, data analysis, marketing, support).
• Data protection, regulatory, and law enforcement authorities.
• Third parties involved in fraud/security/technical investigations.
• During business reorganization, merger, sale, or bankruptcy, data may be disclosed or transferred.

9. Direct Marketing

• With your consent or under legitimate interest, we may send you direct marketing via email, SMS, phone, or online ads about products or services.
• You can opt out at any time via instructions provided in those communications.

10. Analytics

• We analyze your behaviors to personalize offers, content, and ads.
• If you prefer not to receive personalized content, contact our DPO or customer support.

11. Transfers to Non‑EU Countries or International Organizations

• Your data may be transferred and stored outside the EEA only where appropriate safeguards are in place, such as adequacy decisions or contractual clauses. Contact the DPO for details.

12. Your Rights

• Access: request confirmation and a copy of your data with explanations.
• Rectification: request correction of inaccurate data.
• Erasure (Right to be forgotten): request deletion under specified conditions.
• Restriction: request processing limitation in certain circumstances.
• Objection: object to processing based on legitimate interests (excluding direct marketing where applicable).
• Data portability: request a structured export of your data or transfer directly to another controller (automated processing based on consent/contract).
• Automated decision-making: request not to be subject to automated decisions.
• International transfer information: request details of cross-border transfers.
• You may exercise your rights free of charge (excluding excessive or repeated requests). We typically respond within one month (extendable to three months for complex requests), require identity verification, and may refuse requests when legally permitted. You may lodge a complaint with the relevant authority.

Last Updated: 16 May 2025 • Version 1.8