Privacy Policy for CatonSourcing.com

Last Updated: November 13, 2026

This Privacy Policy explains how CatonSourcing.com (“CatonSourcing,” “we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you visit our website, purchase commercial vehicles, modified parts, or OEM parts, or otherwise interact with us. We are operated by Caton, a professional sourcer, and this policy applies to all users of our website and services.

We have written this policy in plain language so you can understand what we do with your data. If you have questions, contact us using the details at the end of this policy.

1. Who We Are

CatonSourcing.com is an online platform for sourcing and selling commercial vehicles, aftermarket modification parts, and original equipment manufacturer (OEM) parts. We act as the data controller for the personal information described in this policy.

Business Contact:

Website: CatonSourcing.com
Email: caton.efon@gmail.com
Business Address: Beijing Concretize Intelligence Supply Chain Management Co., Ltd.

If you are located in the European Economic Area (EEA), the United Kingdom, or California, additional rights described in Sections 8 and 9 apply to you.

2. Information We Collect

We collect personal information in three main ways: information you give us, information collected automatically, and information from third parties.

2.1 Information You Provide Directly

When you create an account, place an order, request a quote, contact customer support, or subscribe to updates, you may provide:

Identity and contact data: Name, company name, email address, phone number, billing address, and shipping address.
Transaction data: Details about the vehicles or parts you order, order history, payment method information (processed by our payment providers; we do not store full card numbers), and delivery preferences.
Communication data: Messages you send us via email, contact forms, or chat, including any files or photos you attach (for example, photos of a part you need us to source).
Account data: Login credentials if you create an account on our site.

2.2 Information Collected Automatically

When you browse CatonSourcing.com, we and our service providers automatically collect:

Device and technical data: IP address, browser type and version, operating system, device type, and unique device identifiers.
Usage data: Pages you view, products you search for, time spent on pages, referring URLs, and interactions with site features.
Cookie and tracking data: Information collected through cookies, pixels, and similar technologies as described in Section 5.

2.3 Information from Third Parties

We may receive information about you from:

Payment processors (to confirm payment status and fraud screening).
Logistics and shipping partners (to confirm delivery and handle customs documentation).
Advertising and analytics partners, including Meta (Facebook/Instagram), if you interact with our ads or use features like Facebook Login or Meta Pixel.

We do not intentionally collect sensitive categories of personal data (such as health data, racial or ethnic origin, or precise geolocation) through our website.

3. How We Use Your Information

We use your personal information for the following purposes:

Purpose	Examples	Legal Basis (where GDPR/UK GDPR applies)
Order fulfillment	Processing payments, arranging shipping of vehicles or parts, providing invoices, handling returns	Performance of a contract
Customer support	Responding to sourcing requests, answering questions about fitment or compatibility, resolving disputes	Performance of a contract or legitimate interests
Marketing and advertising	Showing you relevant ads on Meta platforms and other channels, sending promotional emails about new inventory or sourcing opportunities (with opt-out available)	Consent (for cookies and electronic marketing where required) or legitimate interests
Site improvement and analytics	Understanding which products users search for, improving navigation, diagnosing technical issues	Legitimate interests
Fraud prevention and security	Verifying orders, detecting suspicious activity, protecting against misuse of our site	Legitimate interests or legal obligation
Legal compliance	Keeping records required by tax, customs, and commercial laws; responding to lawful requests from authorities	Legal obligation

We will not use your personal information for purposes materially different from those described above without first updating this policy or obtaining your consent where required.

4. How We Share Your Information

We share personal information only as needed to run our business and as described below.

4.1 Service Providers

We share data with companies that perform services on our behalf, including:

Payment processors (to charge for orders and screen for fraud).
Shipping and logistics companies (to deliver vehicles and parts, including cross-border shipments).
IT and hosting providers (to operate our website and email systems).
Customer support tools (to manage inquiries).

These providers are contractually restricted from using your personal information for their own purposes.

4.2 Meta and Advertising Partners

If you interact with our Meta ads, visit our site after seeing a Meta ad, or if we use Meta Pixel or Conversions API, Meta may collect data about your visit and use it according to Meta’s own privacy policies. This may include:

Data about pages you view and actions you take on our site.
Hashed identifiers (such as email address) if we use Meta’s matching tools.

Meta may use this data to measure ad performance and to show you relevant ads on Facebook and Instagram. You can learn about Meta’s data practices and adjust your ad preferences through your Facebook settings.

Important for California users: Under the CCPA/CPRA, some sharing of personal information with advertising partners may be considered a “sale” or “sharing” for cross-context behavioral advertising. See Section 9 for your opt-out rights.

4.3 Legal and Business Transfers

We may disclose information if required by law, court order, or governmental request; to protect our rights, property, or safety; or in connection with a merger, acquisition, or sale of assets (in which case we will notify you where required).

4.4 No Sale of Sensitive Data

We do not sell your name, contact details, or payment information to unrelated third parties for their own marketing use.

5. Cookies, Pixels, and Tracking Technologies

We use cookies and similar technologies (including Meta Pixel) to:

Keep you logged in and remember your preferences.
Understand how visitors use our site so we can improve it.
Measure the effectiveness of our advertising.
Show you relevant ads on Meta platforms and elsewhere.

Your Choices:

Cookie banner/consent tool: If you are in the EEA, UK, or another region requiring consent, you will see a banner allowing you to accept or reject non-essential cookies. You can change your preferences at any time through the cookie settings link in our website footer.
Browser controls: Most browsers let you block or delete cookies. Note that blocking essential cookies may prevent you from placing orders or using account features.
Meta ad preferences: You can adjust how Meta shows you ads through your Facebook Ad Preferences page.

We do not currently respond to browser “Do Not Track” signals in a uniform way, but we honor opt-out preferences where required by law and provide the controls described above.

6. Data Retention

We keep personal information only as long as necessary for the purposes described in this policy, unless a longer period is required by law.

Data Type	Typical Retention Period
Order and transaction records	7 years (for tax, accounting, and warranty purposes)
Customer inquiry and support messages	2 years after last contact
Marketing contact data	Until you unsubscribe, plus a short suppression period
Website analytics data	26 months (or as configured in our analytics tools)
Account data	Until account deletion, plus a reasonable period for backup and legal compliance

When data is no longer needed, we delete it or anonymize it so it can no longer identify you.

7. Security

We take reasonable technical and organizational measures to protect your personal information, including:

Encrypted transmission of data between your browser and our site (HTTPS).
Restricted access to personal data on a need-to-know basis.
Use of reputable payment processors that comply with industry security standards.

No method of transmission over the internet or electronic storage is completely secure. While we work to protect your data, we cannot guarantee absolute security.

8. Your Rights (EEA, UK, and Similar Jurisdictions)

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with comparable data protection laws, you have the following rights:

Right of access: Request a copy of the personal information we hold about you.
Right to rectification: Ask us to correct inaccurate or incomplete data.
Right to erasure: Ask us to delete your data, subject to legal retention obligations.
Right to restriction: Ask us to limit how we use your data.
Right to data portability: Receive your data in a structured, machine-readable format.
Right to object: Object to processing based on legitimate interests, including direct marketing.
Right to withdraw consent: Where we rely on consent (such as for marketing emails or non-essential cookies), you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise these rights, contact us at [privacy email]. We will respond within the timeframe required by applicable law (generally one month). You also have the right to lodge a complaint with your local data protection authority.

International Transfers: If we transfer personal data from the EEA or UK to a country not recognized as providing adequate protection, we use appropriate safeguards such as Standard Contractual Clauses or rely on the recipient’s participation in an approved framework.

9. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act (as amended by the CPRA):

Right to know: What categories of personal information we collect, sources, purposes, and categories of third parties with whom we share it.
Right to delete: Request deletion of personal information we collected from you, subject to exceptions.
Right to correct: Request correction of inaccurate personal information.
Right to opt out of “sale” or “sharing”: As noted in Section 4.2, some sharing with advertising partners (including Meta) may qualify as “sharing” for cross-context behavioral advertising under California law. To opt out, use the “Do Not Sell or Share My Personal Information” link in our website footer, or contact us.
Right to limit use of sensitive personal information: We do not collect sensitive personal information for purposes that would trigger this right.
Right to non-discrimination: We will not deny you goods or services, charge different prices, or provide a lower quality of service because you exercised your privacy rights.

To submit a request, contact us at [privacy email] or use the web form at [insert link if available]. You may designate an authorized agent to act on your behalf with written permission. We will verify your identity before fulfilling a request.

10. Children’s Privacy

Our website and services are intended for businesses and adults. We do not knowingly collect personal information from children under 16 (or the applicable age of digital consent in your jurisdiction). If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

11. Third-Party Links

Our website may contain links to third-party sites, including payment portals, shipping trackers, or social media pages. This Privacy Policy does not apply to those sites. We encourage you to review their privacy policies before providing personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

Post the updated policy on this page with a new “Last Updated” date.
Where required, notify you by email or through a prominent notice on our website.

Your continued use of CatonSourcing.com after an update means you accept the revised policy.

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal information, contact:

Caton — CatonSourcing.com

Email: caton.efon@gmail.com
Response time: We aim to respond to all privacy inquiries within 30 days (or sooner where required by law).

If you are in the EEA or UK and are not satisfied with our response, you may contact your local supervisory authority. California residents may also contact the California Privacy Protection Agency or the California Attorney General’s office.