1. Data Controller Information

SoccerJerseyWholesale operates as the Data Controller responsible for the personal and business data processed through this website. Our primary manufacturing and export operations are based in Nanning, Guangxi, China, with global B2B sales serving clients across North America, Europe, Australia, and beyond.

• Business Name: SoccerJerseyWholesale
• Email: info@soccerjerseywholesale.com
• Phone: +86 134-1010-4204
• Address: Nanning, Guangxi, China

For all GDPR-related requests or data protection inquiries, please contact us directly at the email above. We will respond within 30 days of receiving your request.

2. Information We Collect

Given our B2B wholesale model, the data we collect is primarily business-related, collected to facilitate quote generation, order fulfillment, and account management. We collect only what is necessary and proportionate to the purposes described below.

2.1 B2B Business & Contact Data

Collected when you submit a quote request, wholesale inquiry, or contact form.

• Full name and job title / role within your organization
• Company or business name, business registration details (where applicable)
• Business email address and telephone number
• Shipping and billing address (warehouse or business premises)
• Country / region of operation and intended distribution market
• Estimated order volume, preferred product categories, and MOQ requirements

2.2 Quote & Order Processing Data

Collected during the bulk quote generation and order placement workflow.

• Product specifications, custom branding requirements, and artwork files
• Order quantity, selected styles, sizing breakdowns, and delivery timelines
• Wholesale pricing tier agreed upon and negotiation correspondence
• Order history and repeat-purchase records for account management purposes

2.3 Secure Payment Transaction Data

Processed exclusively through PCI-DSS-compliant third-party payment gateways.

• We do not store full credit or debit card numbers on our servers.
• Payment is handled via encrypted, PCI-DSS-compliant processors (e.g., PayPal, bank wire transfer, or other approved gateways).
• Transaction reference IDs and payment confirmation records are retained for accounting and dispute resolution purposes only.
• Bank account or wire transfer details shared for B2B settlement are stored in encrypted form with strict access controls.

2.4 Website Usage & Technical Data

• IP address, browser type, operating system, and device category
• Pages visited, session duration, referral source, and navigation paths
• Inquiry form interaction data and download activity (e.g., catalog PDFs)

2.5 Cookies & Tracking Technologies

We use cookies and similar tracking technologies to operate, secure, and improve our website. See Section 6 for our full Cookie Policy.

3. Legal Basis for Processing (GDPR Article 6)

For visitors and clients located in the European Economic Area (EEA) or the UK, we process your data under the following legal bases:

4. How We Use Your Information

We use the data we collect strictly for the following purposes:

• B2B Quote Generation: To prepare and deliver tailored wholesale pricing, product specifications, and custom OEM quotations based on your inquiry details.
• Order Fulfillment & Logistics: To process bulk orders, coordinate production, manage quality control inspections, and arrange international DDP/Express shipping.
• Payment Processing: To facilitate secure settlement via our approved payment gateways and maintain verified transaction records.
• Account & Relationship Management: To manage your B2B account, record order history, and provide dedicated support throughout the purchasing lifecycle.
• Product & Service Communication: To send new catalog releases, seasonal wholesale promotions, and relevant product updates -- only where you have opted in or we have a legitimate business interest.
• Website Optimization: To analyze traffic patterns, improve site functionality, and enhance the user experience of our B2B platform.
• Legal Compliance & Record Keeping: To fulfill statutory obligations including export documentation, tax records, and customs compliance requirements.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions or unauthorized access to client accounts.

We do not use your data for automated individual decision-making or profiling that produces legal effects.

5. How We Protect Your B2B Data

We implement robust, industry-standard technical and organizational security measures to protect your business data against unauthorized access, disclosure, alteration, or destruction:

• SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using SSL/TLS protocols (HTTPS enforced site-wide).
• PCI-DSS Payment Security: Financial transactions are processed exclusively through certified, PCI-DSS-compliant payment gateways. No raw payment card data is stored on our servers.
• Access Controls: B2B client records, order data, and communication logs are accessible only to authorized personnel on a strict need-to-know basis, protected by multi-factor authentication.
• Encrypted Data Storage: Sensitive business data -- including banking details provided for wire transfers -- is stored in AES-encrypted databases with regular backup protocols.
• Regular Security Audits: Our systems undergo periodic vulnerability assessments, penetration testing, and security audits to identify and remediate potential risks.
• Breach Response Protocol: In the event of a data breach affecting your rights and freedoms, we will notify relevant supervisory authorities within 72 hours and inform affected clients without undue delay, as required by GDPR Article 33-34.

While we apply best-practice security measures, no method of internet transmission is 100% secure. We encourage clients to use secure, business-designated email accounts when communicating order or payment details.

6. Cookies & Inquiry Tracking Technologies

Our website uses cookies and similar technologies to provide a functional, personalized, and analytically informed experience. Given our B2B context, cookies also help us track which product categories, catalog pages, and inquiry forms are most relevant to our wholesale clients.

6.1 Types of Cookies We Use

6.2 Managing Your Cookie Preferences

Upon your first visit, our cookie consent banner will allow you to accept, reject, or customize cookie categories. You may also update your preferences at any time through your browser settings or our cookie preference center. Please note that disabling strictly necessary cookies may impair quote form functionality. For instructions on managing cookies in your browser, visit allaboutcookies.org.

7. Sharing & Disclosure of Your Information

We treat your B2B client data with strict confidentiality. We do not sell, rent, or trade your personal or business information to third parties for their own marketing purposes. Data is shared only in the following limited and controlled circumstances:

• Logistics & Freight Partners: Shipping agents, freight forwarders, and customs brokers receive the minimum data necessary (business name, address, shipment contents) to fulfill your export order.
• Payment Processors: Certified payment gateway providers receive transaction data strictly to authorize and complete your payment. They operate under their own GDPR-compliant privacy frameworks.
• Production & Quality Control Partners: Our in-house and partner manufacturing teams access order specifications and artwork solely for production fulfillment -- subject to confidentiality agreements.
• IT & Platform Services: Trusted SaaS providers for CRM, email delivery, and website hosting that process data on our behalf under Data Processing Agreements (DPAs) compliant with GDPR Article 28.
• Legal & Regulatory Authorities: Where required by applicable law, court order, or export regulation, we may disclose data to competent authorities. We will notify you to the extent legally permitted.
• Business Transfers: In the event of a merger, acquisition, or asset sale, client data may be transferred to the successor entity, subject to equivalent privacy protections and prior notification.

All third-party service providers operating on our behalf are contractually bound to protect your data and use it solely for specified, authorized purposes.

8. International Data Transfers

As a China-based exporter serving global B2B clients, your data may be transferred to and processed in countries outside your home jurisdiction, including the People's Republic of China, where our operations are headquartered. For EEA and UK clients, such transfers are conducted in compliance with GDPR Chapter V requirements:

• We rely on Standard Contractual Clauses (SCCs) approved by the European Commission for transfers to non-adequate third countries.
• Where applicable, we apply supplementary technical safeguards (end-to-end encryption, data minimization) to cross-border transfers.
• We regularly review the legal adequacy of transfer mechanisms in line with evolving regulatory guidance.

You may request a copy of the specific safeguards in place for your data by contacting us at the details in Section 12.

9. Data Retention

We retain your personal and business data only for as long as is necessary to fulfill the purposes for which it was collected, subject to applicable legal and regulatory retention obligations:

• Inquiry & Quote Data: Retained for 24 months from the date of inquiry, or for the duration of an active business relationship, whichever is longer.
• Order & Transaction Records: Retained for 7 years to comply with international accounting, tax, and export documentation regulations.
• Marketing Communication Consent: Retained until you withdraw consent or unsubscribe, at which point your contact details are suppressed from future campaigns.
• Website Analytics Data: Aggregated, anonymized data retained for up to 26 months; raw session logs for up to 13 months.
• Security & Access Logs: Retained for 12 months for fraud detection and incident response purposes.

Upon expiry of applicable retention periods, data is securely deleted or anonymized in accordance with our internal data destruction protocols.

10. Your Data Protection Rights

Under the GDPR and applicable data protection laws, you -- whether as an individual or as an authorized representative of your business -- hold the following rights regarding your personal data:

• Right of Access (Art. 15): Request a copy of all personal data we hold about you or your business, along with information on how it is processed.
• Right to Rectification (Art. 16): Request correction of any inaccurate or incomplete business information we hold on record.
• Right to Erasure / "Right to be Forgotten" (Art. 17): Request deletion of your data where there is no overriding legal basis for continued retention.
• Right to Restriction of Processing (Art. 18): Request that we limit processing of your data while accuracy or legitimacy is under dispute.
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format for transfer to another controller, where technically feasible.
• Right to Object (Art. 21): Object to processing based on legitimate interests or direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: If you believe we have not handled your data lawfully, you have the right to lodge a complaint with your local Data Protection Authority (DPA), such as the UK ICO or your relevant EU supervisory authority.

To exercise any of the above rights, please submit a written request to info@soccerjerseywholesale.com with the subject line "Data Subject Request". We will acknowledge your request within 5 business days and respond fully within 30 days (extendable by a further 60 days for complex requests, with prior notice).

11. Third-Party Links & External Platforms

Our website may contain links to external platforms such as payment gateways, logistics tracking portals, or industry directories. These third-party sites operate under their own independent privacy policies. We have no control over and accept no responsibility for their data practices.

We strongly recommend reviewing the privacy policy of any third-party site before submitting personal or business information. The presence of a link on our site does not constitute an endorsement of that site's privacy practices.

12. Children's Privacy

SoccerJerseyWholesale is a B2B wholesale platform intended exclusively for business professionals and commercial buyers aged 18 and over. We do not knowingly collect, solicit, or process personal data from individuals under the age of 18. If we become aware that a minor has submitted data through our platform, we will promptly delete that information. If you believe a minor's data has been submitted, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our business practices, applicable law (including GDPR guidance updates), or improvements to our data handling procedures. The "Last Revised" date at the top of this page will always reflect the most current version.

For material changes that significantly affect how we process your data, we will notify active B2B clients via email at least 14 days in advance of the change taking effect. Your continued use of our website and services after the effective date constitutes acceptance of the updated policy. If you do not agree with the revised terms, please discontinue use of our services and contact us to arrange data deletion.

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or our data processing practices, please reach out to our designated privacy contact: