1. Who is responsible
REECARD LLC, doing business as Shipitor Supply, 145 Speckled Alder, Irvine, CA 92618, United States, is responsible for the personal data described in this policy. It covers the website, client and supplier accounts, sourcing requests, quotes, and purchase and shipping coordination. Write to this address for privacy questions or to exercise your rights, identifying Shipitor Supply and the email associated with your account. We select the interface language using your saved choice, browser language preferences, selected region and, when needed, approximate country inferred from your IP address. Country lookup happens on our server using a local country database; this lookup does not send your IP address to a location provider. You can choose a language or Automatic in the footer settings. Automatic selection does not change shipment destinations or prices.
2. Information we collect
We collect the name, email, company, account type, language and currency preferences, product links, quantities, specifications, uploaded images and spreadsheets, quote details, destinations, and other information you submit. We keep account permissions, policy acceptance records, quote approvals, and shipment updates. Passwords are stored as hashes, not readable passwords. Servers also process technical information such as IP addresses, request times, and security logs. Do not submit payment-card credentials or personal data unnecessary for your request.
3. Purposes and legal bases
We use information to create and protect accounts, prepare quotes, communicate requirements to sourcing agents and factories, coordinate the China–Hong Kong–Brazil route, maintain service records, resolve disputes, prevent abuse, and meet applicable obligations. Depending on the activity and applicable law, processing relies on the requested service or contract, legal obligations, legitimate business and security interests, or consent where required. We do not sell personal information or share it for cross-context behavioral advertising.
4. Access and sharing
Clients can access their own requests and released quotes. Authorized Shipitor Supply staff can manage service records, and assigned sourcing agents can access the requests needed for their work. Relevant information may be shared with factories, suppliers, Hong Kong consolidation partners, transport providers, and authorities when necessary for a requested service or legal obligation. Hosting and infrastructure providers, including Railway, process data to operate the platform. We may disclose necessary information to address fraud, security incidents, legal claims, or lawful demands. Recipients may have their own legal obligations and privacy policies. Apify processes the primary product reference URL to retrieve public product images and titles. Private price targets, account details, and sourcing instructions are not included in that lookup. Retrieved reference images may load from the original website or its image provider.
5. Cookies and third-party resources
Shipitor Supply uses cookies for signed-in sessions, form security, and language and currency preferences. Blocking essential cookies may prevent login or form submission. The site does not include advertising trackers. Google Fonts may receive technical information when your browser loads fonts. Coinbase provides currency rates through server requests; product and account details are not sent as part of those rate requests. External product links open third-party sites governed by their own policies. Changing display currency does not change the original currency of a submitted price.
6. International processing
Information may be processed in the United States and in countries where our infrastructure and service partners operate, including China, Hong Kong, and Brazil when required for sourcing and shipping. Such countries may have different data protection rules. Where applicable law requires safeguards for an international transfer, those safeguards must be used for the relevant processing.
7. Retention and security
We retain records for the service relationship and for legitimate accounting, operational, security, legal, and dispute-resolution needs. Retention depends on the record and applicable obligations. Deletion may be limited by ongoing transactions, legal duties, and backup restoration cycles. Shipitor Supply uses access controls, password hashing, protected product uploads, and secure transport in production. No system guarantees absolute security. Keep your password private and do not include it in privacy requests.
8. Your rights
Depending on applicable law, you may request access, correction, deletion, portability, information about processing, objection or restriction, withdrawal of consent, or review of a denied request. Brazilian and California rights apply when their legal conditions are met. We do not discriminate against the exercise of applicable rights. Write to REECARD LLC (Shipitor Supply) at the address above. We may verify identity and business authorization, including authority for an agent acting on your behalf. You may also contact the relevant data protection authority. Withdrawal of consent does not invalidate prior lawful processing.
9. Audience and changes
Shipitor Supply is intended for adults and authorized business representatives, not children. Notify us if a child has submitted personal information so that we can assess removal. Updates to this policy will be posted with a new effective date and additional notice where required. This policy does not limit mandatory protections under applicable law.