This notice explains how Zhejiang Haoduobao Brand Management Co., Ltd. handles personal information submitted through the Jabbar Sourcing website.
Who is responsible
The data controller and personal information handler is Zhejiang Haoduobao Brand Management Co., Ltd. Jabbar Sourcing Team is the company’s sourcing service team for international buyers. Contact us at Building 3, No. 219 Sufu Road, Suxi Town, Yiwu, Jinhua, Zhejiang, China; telephone +8618658925544; email qianjiabao1999@gmail.com.
Information we collect
When you submit an inquiry, we collect the product requirements, product reference URL, category, expected quantity, budget, destination market, contact details, name or company, and notes that you choose to provide.
For source attribution, the inquiry email may also contain the first landing-page path, external referrer hostname, and length-limited UTM source, medium, campaign, term and content values from the URL. Cloudflare may process the IP address, browser information and network-security signals to prevent abuse.
Why we use it
We use inquiry information only to respond to your request, prepare a sourcing proposal or quotation, take steps before a possible contract, provide necessary business follow-up, and protect the website against abuse. Clicking submit records your acknowledgement of this notice. Limited security processing relies on the security and legitimate interests permitted by applicable law.
Service providers and international processing
The form uses Cloudflare Turnstile, Cloudflare Workers and Email Service to verify and deliver inquiries. Google Gmail receives the inquiry email. If you choose WhatsApp, Gmail, WeChat or Telegram as a fallback channel, that provider processes the information under its own privacy terms. These providers may process data outside your country or region.
Optional analytics
We load Google Analytics 4 and Microsoft Clarity only after you choose “Allow analytics”. They may process page URLs, device and browser information, approximate network location, clicks and session diagnostics. Source-attribution fields may be sent to Google Analytics 4. We do not intentionally send products, contact details, product reference URLs, notes or other inquiry-form contents to either analytics service. Declining does not affect the website or inquiry form, and you can change your choice below.
Your Allow or Reject choice, its time and this notice’s policy version are stored only in this browser on your device for up to 12 months; a Decide later choice is stored for up to 30 days. This preference record is not sent to our server.
Cloudflare uses the country code inferred from the network request only to decide whether the analytics choice panel should appear automatically. The page receives only that coarse decision, not the country code, and we do not store the location. In the EEA, United Kingdom and Switzerland, or when the location is unknown, Tor-based or unavailable, analytics stays off and the panel may appear automatically. In other regions analytics also stays off by default, but the panel does not open automatically; you can make a choice below. If your browser sends a Global Privacy Control (GPC) signal, analytics remains disabled.
Retention
The inquiry API does not retain the raw inquiry, contact details, Turnstile token or IP address. It retains only random request and lease identifiers, a SHA-256 fingerprint derived with the random submission ID, delivery state and timing data, which logically expire and are scheduled for deletion after 24 hours.
Cloudflare Workers Logs keeps one structured operational metric for each successful submission for up to 7 days, limited to response status, language, processing time, allowlisted UTM source and medium categories, and presence flags for campaign, term and content; it excludes the original UTM text, form content, contact details, name or company, reference URLs, notes, the Turnstile token and the IP address.
Ordinary Gmail inquiry messages are generally kept for no more than 24 months after the last substantive communication and removed through manual review. If an inquiry becomes a quotation, order, contract or payment record, relevant records are retained for the period needed to perform the transaction and meet accounting, tax and applicable legal obligations.
Your choices and rights
We do not use inquiry details for marketing that you have not chosen. Subject to applicable law, you may request access, correction, deletion or restriction, withdraw consent, object to processing, or complain to the competent authority. Email qianjiabao1999@gmail.com with “Privacy Request” in the subject and the minimum information needed to locate the inquiry. We may carry out proportionate identity verification and will respond within 30 days or the period required by applicable law. Withdrawal does not affect earlier lawful processing.
Security, sensitive information and children
We use access controls and service safeguards designed to protect information, but no internet transmission is completely secure. Do not submit identity documents, bank-card data, health information or other sensitive data. The inquiry service is not directed to children. We may update this notice when our practices or legal duties change; the date above identifies the current version.