Global Sourcing Privacy Policy

We collect information from you directly, automatically, and from third parties. This includes:

Identifiers & Contact Information:

Name, email, phone, address, username, password, company name, government ID (if needed), social media handles.

Payment & Purchase Information:

Payment method, billing/shipping address, transaction history.

Usage Information:

IP address, browser type, pages viewed, time spent, clicks, navigation, referring URLs, interactions with marketing emails, and device fingerprint.

Business & Sourcing Information:

Company type, sourcing requirements, supplier connections.

Demographic Information:

Age, gender, business sector, acquisition source, preferences.

Social Media Interactions:

Public profile information, posts mentioning us, campaign submissions.

Audio/Visual Data:

Customer service call recordings, meeting recordings, event photos/videos.

Geolocation Data:

City of residence, precise location (with consent).

Inferences & Profile Data:

Preferences, behavior patterns, transaction likelihood, industry interests.

Sensitive Data:

Racial/ethnic origin, health data, precise geolocation, collected only with consent.

We use personal data to:

• Provide and improve our services
• Connect buyers and suppliers
• Process and deliver transactions
• Authenticate accounts and ensure security
• Personalize experiences and marketing
• Conduct analytics and improve operations
• Comply with legal obligations
• Detect, prevent, and investigate fraud or security threats
• Use information for any other purposes disclosed at the time it is collected or to which you consent

From You:

Forms, account creation, inquiries, sourcing requests.

Automatically:

Cookies, pixels, device IDs, server logs.

From Third Parties:

Partners, service providers, public sources, social media.

We use cookies, pixels, SDKs, and similar tools to:

• Enable core functionality
• Improve performance and design
• Deliver targeted advertising
• Track campaign effectiveness

Opt-Out

• Use browser settings to reject cookies
• Use industry opt-out sites, including aboutads.info/choices and optout.networkadvertising.org
• Use the “Your Privacy Choices” link on our website
• Global Privacy Control (GPC) signals are honored where required
• For EU/UK users, non-essential cookies will require opt-in where required

We share data with:

Suppliers:

For sourcing requests.

Service Providers:

Payment processors, hosting, analytics, marketing, fraud prevention.

Affiliates:

Corporate group members.

Legal Authorities:

Compliance with law.

Business Transfers:

Mergers, acquisitions.

Others with Consent:

As authorized by you.

Depending on your jurisdiction, you can:

• Access, correct, or delete your data
• Obtain a portable copy
• Opt out of targeted advertising, “sale,” or “sharing” of personal data
• Restrict certain processing
• Appeal denied requests

We will honor requests for the removal of personal information, requests to exercise any of the rights described in this Section, and other applicable privacy rights requests within 45 days, unless an extension is permitted and notification of such extension is provided to you. You will not receive discriminatory treatment (denial of service, different pricing, etc.) for exercising these rights.

Authorized Agents

You may appoint an authorized agent to submit requests on your behalf. We may require proof of identity and authorization (for example, matching account information or government identification).

If we deny your request, you may appeal within 30 days by contacting inquiry@gsban.com . We will respond within 45 days and, if you remain dissatisfied, provide instructions for contacting your state attorney general or other applicable governing authority.

You may request a list of third parties to whom we have disclosed your personal data. Contact inquiry@gsban.com to request this list.

We retain personal data only as long as needed for the purposes stated or as required by law. Retention periods vary by data type and purpose.

If we offer discounts, rewards, or benefits in exchange for personal data, we will provide details on the categories of data collected, how it is used, and your ability to opt out at any time.

To protect your personal information from unauthorized access and use, we use encryption, secure servers, and regular security audits; however, no system is 100% secure.

We do not knowingly collect data from children under 13 without parental consent. Parents can review, delete, or stop collection by contacting us. By visiting our website and/or using our services, or by permitting your child to use our services, you are agreeing to the terms of this Privacy Policy and the accompanying Terms of Use.

We transfer data internationally with safeguards such as Standard Contractual Clauses or participation in recognized frameworks (for example, the EU–U.S. Data Privacy Framework).

We may update this policy. Significant changes will be posted on our website and/or emailed to you. By accessing the website or using our services after we make changes to this Privacy Policy, you are deemed to have accepted those changes.

Under some state laws, certain data sharing for cross-context behavioral advertising or analytics may be considered a “sale” or “sharing” of personal information.

We disclose the following categories for targeted advertising:

We only collect and use sensitive personal information (for example, precise geolocation or certain demographic data) with your consent and for purposes allowed under State Laws.

We retain personal information only as long as necessary for the purposes stated in our Privacy Policy, or as required by law. Retention periods vary depending on the category of data and applicable legal obligations.

If you reside in a state that allows authorized agents, you may appoint one to submit privacy requests for you. Proof of authorization (for example, a power of attorney or signed consent) may be required.

If you are an Oregon resident, you have the right to request a list of third parties to whom we have disclosed your personal information in the preceding 12 months.

Contact us to exercise this right: inquiry@gsban.com

If we offer discounts, rewards, or promotions in exchange for personal information, details will be provided at the time of enrollment, including:

• Categories of personal information collected
• How the data is used
• Your ability to opt out at any time

In accordance with GDPR Article 6, we process personal data on one or more of the following legal grounds:

Consent:

You have given explicit permission for us to process your personal data for a specific purpose.

Contractual necessity:

Processing is required to fulfill a contract with you or to take steps at your request before entering into a contract.

Legal obligation:

Processing is necessary to comply with a legal obligation to which we are subject.

Legitimate interests:

Processing is necessary for our legitimate interests or those of a third party, provided your rights and freedoms are not overridden.

Vital interests:

Processing is necessary to protect the life of an individual.

Public interest:

Processing is necessary to perform a task carried out in the public interest or in the exercise of official authority.

For clarity, the table below outlines the principal categories of personal data we process, the purposes of processing, and the corresponding legal bases:

Where processing relies on legitimate interests, we perform a balancing test to ensure that your fundamental rights and freedoms are not disproportionately affected. These assessments are documented internally to demonstrate compliance with GDPR requirements.