This Privacy Policy explains what personal information Guangzhou Vol Sea Technology Co., LTD (“we”, “us”, “our”) collects when you visit monkfruithub.com, why we collect it, who we share it with, how long we keep it, and what you can require us to do about it. It is written to be readable, and it is written to satisfy the transparency duties of the privacy laws that apply to the markets we sell into.

Controller. Guangzhou Vol Sea Technology Co., LTD, Room A7209, 6th–7th Floor, Building I, No. 6, Helong Yiheng Road, Hebian, Baiyun District, Guangzhou City, Guangdong Province, China.
Privacy contact (DPO). info@monkfruithub.com — privacy requests, rights requests and complaints all reach the same mailbox, and are logged and answered.

1. Who this policy covers

This site is a business-to-business catalogue. We supply bulk monk fruit extract, rare sugars, erythritol and custom sweetener blends to food, beverage and supplement manufacturers. We do not sell to consumers through this site, and we do not knowingly collect information from children. If you are under 16, please do not submit an enquiry.

2. What we collect

2.1 Information you give us

When you submit the enquiry or sample-request form we collect:

Identity and contact data — your name, company name, email address, telephone or WhatsApp number, and the country you are writing from.
Commercial data — the product you are asking about, the volume you need, and anything you write in the message field.
Correspondence — the emails and messages you exchange with us afterwards, including quotations, specifications and sample dispatch details.

2.2 Information collected automatically

Technical data — IP address, browser type and version, operating system, device type, screen size, referring page, and the language edition you selected.
Usage data — which pages you open, how long you stay, what you click, and how you move between pages.
Approximate location — inferred from your IP address at country or city level. We do not collect precise geolocation.
Cookie and identifier data — described in full in our Cookie Policy. Strictly necessary cookies are set as soon as you arrive; analytics and advertising identifiers are set only after you consent.

2.3 Information we do not collect

We do not collect government identity numbers, payment card numbers, health data, biometric data, or precise location. We do not buy personal information from data brokers, and we do not build advertising profiles of individual visitors.

3. Why we collect it, and our legal basis

The table below states the purpose, the categories of data used, and the legal basis we rely on. Where more than one law applies to you, the entry that gives you the stronger protection is the one we will apply.

Purpose	Data used	Legal basis
Answer an enquiry, prepare a quotation, send a sample, and fulfil a resulting order	Identity, contact, commercial, correspondence	Performance of a contract or steps taken at your request (GDPR Art. 6(1)(b); LGPD Art. 7(II) and (V); PIPEDA — reasonable business purpose)
Keep commercial records: quotations, invoices, certificates of analysis, batch traceability	Identity, contact, commercial, correspondence	Compliance with a legal obligation (GDPR Art. 6(1)(c); LGPD Art. 7(II); PRC regulatory record-keeping)
Operate and secure the site: form delivery, abuse prevention, rate limiting, error logs	Technical data, IP address	Legitimate interests — keeping the service available and preventing misuse (GDPR Art. 6(1)(f); LGPD Art. 7(IX); PIPEDA)
Measure how the catalogue is used and improve it	Usage data, technical data, cookies	Consent (GDPR/ePrivacy Art. 6(1)(a); LGPD Art. 7(I); Saudi PDPL; UAE PDPL)
Measure the performance of our Google, Meta and TikTok campaigns	Usage data, cookie identifiers, hashed contact data for server-side events	Consent, and — for California residents — the right to opt out of sale or sharing (see §10)
Remember your language edition and display settings	Cookies, local storage	Consent, except where strictly necessary to render the page you asked for
Answer a rights request, a complaint or a regulatory enquiry	Whatever the request concerns	Compliance with a legal obligation; establishing or defending legal claims

Where we rely on legitimate interests we have weighed our interest against your rights and concluded that the processing is proportionate. You may object at any time — see §9.

4. Who we share it with

We do not sell your personal information for money. We share it only with the parties below, and only for the purpose stated.

4.1 Service providers acting on our instructions

Email delivery — our outbound mail is sent through our own corporate mail service at oqumail.com. Because email crosses the open internet, the sending and receiving providers can read the headers and body; we do not add third-party mail relays on top of that.
Hosting and content delivery — the site is served from infrastructure we control or contract, which necessarily processes the technical data in §2.2.
Analytics and advertising platforms — Google (GA4 and Google Ads), Meta and TikTok receive usage data and identifiers, but only after you have granted the matching cookie category. Their use of that data is governed by their own privacy terms as independent controllers for the parts they decide.
Logistics and testing — if you ask for a sample or place an order, the carrier that moves it and any independent laboratory you ask us to test against receive only the name, address and contact details needed to do that job.

4.2 Other recipients

Professional advisers — accountants, auditors and lawyers, under a duty of confidentiality.
Authorities — customs, food-safety and tax authorities where export, import or record-keeping law requires disclosure.
Acquirers — if the business or part of it is transferred, your information may transfer with it. We will tell you before that happens and the acquirer remains bound by this policy until you are given notice of any change.

5. International transfers

We are established in the People’s Republic of China and our servers, mail service and staff are located there. If you are in the EEA, the United Kingdom, Switzerland, Canada, Brazil, Saudi Arabia or the United Arab Emirates, your personal information will be transferred to and processed in China.

China is not the subject of an adequacy decision by the European Commission or by any of the other regulators listed above. We therefore rely on the transfer mechanisms that apply to you:

EEA, UK and Switzerland — Standard Contractual Clauses with any recipient outside the EEA, plus a transfer impact assessment, and supplementary technical measures including transport encryption, access restriction and minimisation.
Brazil — LGPD Art. 33, on the basis of the necessity of the transfer for the performance of a contract or the exercise of rights, and of the safeguards we put in place.
Canada — PIPEDA Principle 1.1: we remain responsible for personal information in the hands of a processor, and we use contractual means to obtain a comparable level of protection.
Saudi Arabia and the UAE — PDPL transfer conditions, including consent or the necessity of the transfer to perform a contract or protect a legal interest.

You may ask for a copy of the safeguards we use by writing to info@monkfruithub.com.

6. How long we keep it

Category	Retention	Reason
Enquiries that do not become orders	24 months from the last message	Long enough to pick a conversation back up; short enough not to hoard
Customer records, quotations and orders	Contract period plus 7 years	Tax, customs and commercial record-keeping duties
Certificates of analysis and batch records	Product shelf life plus 3 years	Food-safety traceability
Server and error logs	90 days	Security and troubleshooting
Analytics data	14 months in Google Analytics 4	Platform maximum we have configured
Cookie consent record	180 days	So we do not ask again on every visit, and can prove the choice was made
Rights requests and complaints	3 years	Demonstrating compliance

When a period ends we delete the data or irreversibly anonymise it. Where we must keep something longer because of a dispute or a legal duty, we keep only what that purpose requires.

7. How we protect it

We use transport encryption (HTTPS) on the site and STARTTLS on outbound mail; restrict administrative access to named staff; apply rate limiting to the enquiry form to blunt automated abuse; sanitise anything a visitor types before it is used in an email header or a database query; keep software patched; and review access periodically. No system is perfectly secure. If a breach affects your rights we will notify you and the relevant authority within the period the applicable law requires.

8. Cookies and tracking

We keep the full technical detail — categories, names, lifetimes, providers and how to change your choice — in a separate Cookie Policy. In summary: strictly necessary cookies run as soon as you arrive; everything else waits for your consent; and you can use the Cookie Settings control in the footer to change your choice at any time.

9. Your rights

Depending on where you are, you have some or all of the following rights, and we honour them for every visitor unless the law of your country gives us a ground to refuse. Any refusal comes with an explanation.

Access — a copy of the personal information we hold about you.
Correction — have inaccurate or incomplete information fixed.
Deletion — have information erased, subject to the retention duties in §6.
Portability — receive your information in a structured, commonly used, machine-readable format.
Restriction — have us pause processing while a dispute is resolved.
Objection — object to processing based on legitimate interests, and to direct marketing at any time and without giving a reason.
Withdrawal of consent — withdraw consent to analytics or advertising at any time, without affecting the lawfulness of what we did before you withdrew it.
Non-discrimination — we will not deny you a quotation, charge you more, or give you a worse service because you exercised a right.
Human review — we do not make decisions about you by automated means alone. If that ever changes, you will have the right to a human review.

How to exercise them

Write to info@monkfruithub.com with enough detail for us to find your records. We answer within the following periods:

EEA / UK / Switzerland (GDPR and UK GDPR) — one month, extendable by two months for complex requests, with notice.
Brazil (LGPD) — immediately for access confirmation, and within 15 days for a full response.
Canada (PIPEDA) — within 30 days, extendable with notice.
California (CCPA as amended by the CPRA) — confirmation of receipt within 10 business days, and a substantive response within 45 calendar days, extendable once by a further 45 days with notice.
Saudi Arabia and the UAE (PDPL) — within 30 days, extendable with notice.

We may ask you to verify your identity before we act, and we will not charge you for the first request in any twelve-month period.

10. Notice for California residents — Do Not Sell or Share My Personal Information

If you are a California resident, the CCPA as amended by the CPRA gives you additional rights, and this section is the notice the statute requires.

10.1 Categories collected in the last 12 months

Identifiers: name, company, email address, telephone or WhatsApp number, IP address, cookie identifiers.
Commercial information: products enquired about, volumes requested, records of purchases.
Internet or network activity: pages viewed, links clicked, referring source, approximate location.
Professional or employment information: job title and employer, where you give them.

Sources: you, your device, and our analytics and advertising providers. Purposes: those in §3. Recipients: those in §4.

10.2 “Sale” and “sharing”

We do not sell personal information for money. We do, however, disclose usage data and cookie identifiers to advertising platforms for cross-context behavioural advertising, and California law treats that disclosure as “sharing”. You have the right to opt out of it.

Three ways to do that, all of them free:

Click Do Not Sell or Share My Personal Information in the footer of any page — it withdraws advertising consent immediately on this browser.
Open Cookie Settings in the footer and turn off Advertising.
Email info@monkfruithub.com with the subject “Do Not Sell or Share”.

We also honour the Global Privacy Control (GPC) signal. If your browser sends it, advertising consent stays off without you having to click anything.

10.3 Sensitive personal information

We do not collect sensitive personal information as the CPRA defines it, and we do not use any personal information to infer characteristics about you.

10.4 Additional California rights

Know — the specific pieces of personal information we hold, and the categories, sources, purposes and recipients.
Delete — subject to the retention exceptions in §6.
Correct — inaccurate personal information.
Limit — we do not use or disclose sensitive personal information beyond what is necessary to provide the service, so there is nothing further to limit.
Authorised agent — you may appoint one. We will ask for proof of the authorisation and may ask you to confirm it directly.

California residents may also complain to the California Privacy Protection Agency or the Attorney General.

11. Other regional provisions

11.1 Brazil — Lei Geral de Proteção de Dados (LGPD, Lei nº 13.709/2018)

Legal bases are listed in §3. The data protection officer (encarregado) is published here as required by Art. 41, §1: Guangzhou Vol Sea Technology Co., LTD — DPO, info@monkfruithub.com. You may contact the encarregado directly, without going through any other channel. You have the rights in Art. 18, including confirmation of processing, access, correction, anonymisation or deletion, portability, information about sharing, and revocation of consent. You may also complain to the ANPD. A Portuguese version of this policy is published and is the version we rely on for readers in Brazil.

11.2 Canada — PIPEDA

We collect, use and disclose personal information only for purposes a reasonable person would consider appropriate in the circumstances, and we obtain your knowledge and consent for analytics and advertising cookies. For a commercial enquiry the consent is implied by your act of contacting us; for cookies it is express. We keep personal information only as long as necessary, protect it with safeguards appropriate to its sensitivity, and make our policies available on request. You may withdraw consent subject to legal or contractual restrictions.

11.3 Latin America and Mexico — LFPDPPP

Readers in Mexico should read the Spanish edition, which carries the LFPDPPP-specific provisions: the identity and address of the controller, the purposes of processing, the mechanisms to limit use or disclosure, the means to exercise ARCO rights (Acceso, Rectificación, Cancelación, Oposición), and the procedure for revoking consent. ARCO requests go to info@monkfruithub.com and are answered within 20 business days, extended once for a further 20 where the law allows.

11.4 Saudi Arabia and the United Arab Emirates — PDPL

We collect personal data only for a specific, clear and documented purpose and process it no further than that purpose requires. Consent is the basis for analytics and advertising; contract performance and legal obligation for everything else. We do not disclose personal data outside Saudi Arabia or the UAE except under the transfer conditions in §5, and we notify the affected individual and the competent authority of any breach that would harm them. Readers in the Gulf can read this notice in English or Arabic; the two are equally authoritative for interpretation within the region, and where they differ, the English text governs.

11.5 EEA, United Kingdom and Switzerland — GDPR and UK GDPR

Where our processing falls within the material or territorial scope of the GDPR or the UK GDPR, we rely on the bases in §3 and you have the rights in §9 including the right to lodge a complaint with your supervisory authority. Our representative enquiries can be directed to the privacy contact at the top of this page.

12. Automated decision-making

We do not use your personal information to make automated decisions that produce legal effects or otherwise significantly affect you. Analytics and advertising measurement are measurement, not decision-making.

13. Third-party sites

This site links to LinkedIn, WhatsApp and other services. Once you follow a link, that provider’s own privacy policy governs what happens next. We are not responsible for their practices.

14. Changes to this policy

When we change this policy we update the “Last reviewed” date at the top of the page. If a change materially reduces your rights or expands how we use your information, we will give you more prominent notice before it takes effect and, where the law requires it, ask for your consent again. Previous versions are kept in the post revisions and are available on request.

15. Contact

Guangzhou Vol Sea Technology Co., LTD
Room A7209, 6th–7th Floor, Building I, No. 6, Helong Yiheng Road, Hebian, Baiyun District, Guangzhou City, Guangdong Province, China
Email: info@monkfruithub.com
WhatsApp: +86 181 2818 0051
Website: monkfruithub.com

Nothing in this policy limits any right that the law of your country gives you. Where this policy and a mandatory provision of your local law conflict, the local law prevails to the extent of the conflict, and the rest of this policy continues to apply.