Privacy Policy

Effective date: January 1, 2026  ·  Last reviewed: June 2026

Fortune Star International Co., Ltd ("we", "us", "our") respects your privacy. This Privacy Policy describes how we collect, use, store and disclose information when you visit our website and submit inquiries to us.

1. Information we collect

  • Inquiry data: name, company, email, phone, country, message, and the product items you add to the inquiry list.
  • Account data (admin only): email address, hashed login codes and role.
  • Technical data: IP address, browser type, pages visited and timestamps for security and analytics.

2. How we use your information

  • To respond to your inquiry, prepare quotations and arrange deliveries.
  • To send order updates, shipping notifications and (with your consent) marketing emails.
  • To improve our website, prevent abuse and comply with applicable laws.

Legal basis (GDPR): We process personal data on the basis of legitimate interests (responding to business inquiries), contract performance, and — where required — your explicit consent.

3. Sharing your information

We do not sell or rent your personal data. We share information only with: (a) our logistics, customs and payment partners as needed to fulfil orders; (b) service providers (email delivery, web hosting) under confidentiality obligations; (c) public authorities when required by law.

4. Cookies

We use essential cookies only — for session management, authentication and theme preferences. We do not use third-party advertising trackers or profiling cookies.

  • Session cookies: Required for secure login and inquiry cart functionality. These expire when you close your browser.
  • Preference cookies: Store your theme (light/dark) choice. Persistent for 1 year.

You can manage your cookie preferences at any time via the Cookie Settings link in the footer, or by configuring your browser settings to refuse cookies.

5. Data retention

Inquiry records are kept for up to five years for tax and trade compliance. Web logs are retained for 90 days. You may request deletion at any time (see Section 7), subject to legal retention obligations.

6. International transfers

Our servers are located in Singapore. Where you contact us from the European Economic Area (EEA) or other jurisdictions outside Singapore, your information will be transferred to and processed in Singapore. We apply industry-standard safeguards (TLS encryption in transit, encryption at rest, strict access control) to protect your data during transfer.

7. Your rights (GDPR / CCPA)

Depending on your jurisdiction, you have the following rights regarding your personal data:

  • Right of access — Request a copy of the personal data we hold about you.
  • Right to rectification — Ask us to correct inaccurate or incomplete data.
  • Right to erasure ("Right to be forgotten") — Request deletion of your personal data, subject to legal retention obligations.
  • Right to restriction — Ask us to restrict how we process your data in certain circumstances.
  • Right to data portability — Receive your data in a structured, machine-readable format.
  • Right to object — Object to processing based on legitimate interests.
  • CCPA rights (California residents) — Right to know, right to delete, right to opt-out of sale (we do not sell personal data), and right to non-discrimination.

To exercise any of these rights, use the form below. We will acknowledge receipt within 72 hours and respond within 30 days.

Submit a data rights request

Use this form to exercise your rights under GDPR, CCPA, or applicable local law. All fields marked * are required.

Loading challenge…

We will acknowledge receipt within 72 hours and complete your request within 30 days. We may need to verify your identity before fulfilling the request.

8. Contact & Data Controller

Fortune Star International Co., Ltd
Email: privacy@fortunestarsh.com
Address: Huangpu, Shanghai, China

If you are located in the EEA and believe we are processing your data unlawfully, you have the right to lodge a complaint with your local data protection authority (e.g., ICO in the UK, CNIL in France, BfDI in Germany).