Last updated: May 17, 2025
1. Who We Are
This Privacy Policy is issued by Global TradeHub Limited, a company registered in Hong Kong (HK office: Room 602, 6/F, Kai Yue Commercial Building, No. 2c Argyle Street, Mongkok, Kowloon, Hong Kong; China operations: Plot 5 Aux Colorful Plaza, Dujuan Rd, Wangye St, Yuelu District, Changsha City, Hunan Province, China 410000). We operate the EV Crate online parts store at www.evcrate.com. Contact us at evcrate@globaltradehubltd.com.
2. Data We Collect
- Identity & contact: full name, email address, phone number.
- Billing & shipping address: street, city, country, postal code.
- Tax identifiers: VAT number, business registration number (B2B orders).
- Payment data: processed via Stripe. We never store full card numbers; Stripe handles PCI-DSS compliance.
- Order history: items purchased, quantities, prices, shipment tracking.
- VIN data: if you use our VIN fitment decoder, the VIN string is processed client-side. We may store it temporarily to confirm part compatibility.
- Usage & analytics: pages visited, referral source, device/browser type, IP address (anonymised after geolocation).
- Cookies: see Section 8.
3. Why We Collect It & Legal Bases
We process your data on the following legal bases under GDPR and applicable law:
- Contract performance: to fulfil your order, arrange shipping, issue invoices, process returns and warranty claims.
- Legitimate interest: fraud prevention, security monitoring, improving our service, analytics.
- Legal obligation: retaining invoices and financial records for at least 7 years (EU accounting law).
- Consent: marketing emails and non-essential cookies — you can withdraw consent at any time.
4. Who We Share Data With
- Stripe, Inc. — payment processing.
- Shipping carriers (DHL, FedEx, UPS, DPD, etc.) — delivery fulfilment and tracking.
- Fulfilment & warehouse partners — picking, packing, and customs documentation.
- IT infrastructure providers — cloud hosting, email delivery.
- Analytics providers — aggregate, anonymised usage data only.
- We do not sell your personal data to third parties.
5. International Data Transfers
Global TradeHub Limited is headquartered in Hong Kong and has operations in mainland China. Your data may be processed in these jurisdictions. Where we transfer EU/UK personal data outside the EEA/UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, supplementary technical and organisational measures, or other appropriate safeguards. You may request a copy of the relevant transfer mechanism by contacting us.
6. Retention Periods
- Order records and invoices: 7 years (EU accounting and tax law).
- Account data: retained while your account is active; deleted within 90 days of account closure request.
- Marketing consent records: until consent is withdrawn.
- Analytics data: 26 months maximum, anonymised after 6 months.
7. Your Rights
Under GDPR (EU/UK) and applicable privacy laws, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data (right to be forgotten), subject to legal retention obligations.
- Port your data to another controller in a structured format.
- Restrict processing in certain circumstances.
- Object to processing based on legitimate interests.
- Withdraw consent at any time (without affecting prior processing).
- Lodge a complaint with your local supervisory authority (e.g., ICO in the UK, DPC in Ireland).
To exercise your rights, email us at evcrate@globaltradehubltd.com. We will respond within 30 days.
9. Contact
Data Controller: Global TradeHub Limited
Email: evcrate@globaltradehubltd.com
EU phone: +371 278 49361
Asia phone: +86 177 7587 0528
Table of contents