Atlantic Sourcing Group Privacy Policy

Last updated: June 12, 2025

Introduction

Welcome to our products and services! We are fully aware of the importance of your personal information and value your trust. We are committed to strictly complying with applicable laws and regulations and taking appropriate security measures to ensure the security and controllability of your personal information. Based on this, Atlantic Sourcing Group. ("we" or "Atlantic Sourcing Group") has formulated this "Atlantic Sourcing Group Privacy Policy" (hereinafter referred to as "this Policy" or "this Privacy Policy") to help you fully understand how we collect, use, share, store and protect your personal information during your use of our products and services, and how you can manage your personal information to make more informed choices.

Before using our products and services, please make sure that you have carefully read and understood this policy and continue to use it after agreeing to it. In some cases, we may notify you by email, pop-up window or function update to explain the purpose, scope and method of information collection. These notifications and updates constitute an integral part of this policy and have the same legal effect as this policy. We will explain professional terms in a concise and clear manner for your understanding. If you have any questions, comments or suggestions about this policy, you can contact us through the methods provided at the end of this document.

Your consent to this Privacy Policy indicates that you acknowledge and accept the basic functions of our application and the necessary personal information required for its operation. However, this does not mean that you agree to the additional functions of our application or the processing of non-essential or sensitive personal information. For these, we will ask for your consent separately when you use the relevant functions.

1. Information We Collect

When using our services, we may collect personal information necessary to provide the services. This information may include:

a. Information necessary to provide our basic services and comply with legal obligations. If you choose not to provide such information, you may not be able to use our basic services.

b. Additional service information, which you can choose to provide or not. If you choose not to provide such information, you may not be able to use certain additional features or achieve their intended functions, but it will not affect your use of the basic services.

We strictly comply with legal requirements and obtain your consent when processing this information to ensure that you have the best service experience. We fully understand the importance of customer and contact information and only collect and use such information when it is required for contract performance, business communication and customer support.

We would like to remind you that we are committed to providing a variety of products and services to meet your needs. Due to the wide variety of products and services we provide and the differences in the specific products/services selected by different users, the type and scope of personal information we collect will also vary. Please refer to the features of specific products or services for details.

2. Data Usage and Sharing

Purpose of Data Use

We collect data for the following purposes:

a. Provide and improve services.

b. Complete transactions and perform contracts.

c. Provide customer support and personalized recommendations.

d. Comply with legal requirements.

Partners, transfer and disclosure of personal information

In the process of using data, we may share your personal information with partners and follow the following basic principles:

a. Legality and minimum necessity principle: Data processing must have a legal basis and the scope should be limited to the minimum necessary to achieve the purpose.

b. User right to know and right to choose: We respect the user's right to know and right to choose regarding the processing of their personal information.

c. Security guarantee: We will take necessary measures to ensure the security of personal information, evaluate the data processing capabilities of partners, and ensure that they comply with our security requirements.

Partner scope

In certain functions or scenarios, we may involve affiliates and third-party service providers. We enter into agreements with these partners to ensure that they only process your information within the scope of authorization. If you place an order or make a transaction on this website, we will collect payment information for processing and may submit it to a third party for authorization and processing. This website does not store any credit card or payment information. All transaction data is transmitted using Secure Sockets Layer (SSL) encryption to ensure the security of your data.

This website occasionally links to third-party websites. Some links are provided as resources only, and Atlantic Sourcing Group and this website are not responsible for any activities that occur on third-party websites linked to this website.

We will only entrust your information to partners for the lawful, legitimate, necessary, specific and explicit purposes described in this policy. Authorized partners can only access the information required to perform their duties, and we require them through agreements not to use this information for any other purpose beyond the scope of authorization. If authorized partners use your information for purposes not authorized by us, they must obtain your consent separately.

Joint Processing

For scenarios involving joint processing of personal information, we will sign relevant agreements in accordance with legal provisions to clarify the rights and obligations of each party, ensure compliance with relevant regulations, and ensure data security.

When working with partners, we will adhere to the following principles:

a. Legality and minimum necessity principle: Data processing must have a legal basis, a legitimate purpose, and be limited to the minimum scope necessary to achieve the purpose.

b. Maximize the user's right to know and right to choose: We fully respect the user's right to know and right to choose regarding the processing of personal information during the data processing process.

c. Maximize security protection: We will take necessary measures to ensure the security of the personal information being processed, carefully evaluate the purpose of the partner's use of data, comprehensively evaluate the partner's security capabilities, and ensure that they comply with the terms of the cooperation agreement.

Public disclosure

We will only publicly disclose your personal information in the following circumstances:

a. Based on your active choice and explicit consent.

b. If you violate laws and regulations, or seriously violate our agreement, or to protect the safety of users and the public, we may disclose relevant information in accordance with legal requirements.

Handling data breaches

Once a data breach occurs, we will immediately initiate an emergency response plan and take necessary measures to reduce the impact. We will inform you of the progress of the incident and the measures taken through reasonable channels (such as SMS, phone calls, push notifications or emails).

3.Cookies and Similar Technologies

We use cookies and similar technologies to collect, identify, and store information about your visits and use of our products. These technologies help ensure the secure and efficient operation of our products and services. You can manage your cookie settings through your browser, such as clearing cache or rejecting cookies, but this may affect the normal functioning of certain features.

4. Your Rights

Access, Deletion, and Correction of Your Information

You have the right to view, correct, and delete the personal information we hold about you. You can contact us through our customer service or the email provided at the end of this policy.

Deletion of Personal Information

In certain circumstances, you may request the deletion of your personal information via the contact email provided at the end of this policy. These circumstances include:

a. If we process your information in violation of laws and regulations.

b. If you have not consented to the collection or use of your information.

c. If the purpose of processing has been achieved or the information is no longer necessary.

d. If we cease to provide products or services, or the legally required retention period has expired.

If, after deleting your information, we are unable to immediately remove it from backup systems, we will ensure that your information is securely stored in the backup and limit further processing until the backup can be deleted or anonymized. If we decide to respond to your deletion request, we will also notify, to the best of our ability, any third parties that have received your personal information from us and request that they delete it, unless otherwise required by law or if these third parties have independently obtained your consent. When you or we delete the relevant information, due to applicable legal and technical constraints, we may not be able to immediately remove the corresponding information from backup systems, but we will securely store your personal information and restrict any further processing until the backup can be cleared or anonymized.

Response to Your Requests

We will respond to your request within 15 business days. When processing your request, we may verify your identity to ensure the security of your account and personal information.

Verification methods may include but are not limited to:

a. Email verification: We will send a confirmation email to your registered email address, and you will need to click the verification link in the email to confirm your identity.

b. Account credential verification: You may be required to provide your account login credentials or use two-factor authentication (2FA) to complete identity verification.

c. Security question verification: You may need to answer security questions related to your account, such as password hints or questions you previously set.

d. Government-issued ID: Depending on the nature of your request, we may require you to submit a valid government-issued photo ID (e.g., passport, ID card, or drivers license) to further confirm your identity.

e. Risk assessment and multi-factor authentication: For highly sensitive requests (such as data deletion, data export, or account deactivation), we may use multi-factor authentication to verify your identity. This may include asking for transaction records or account activity related to your account.

f. Video verification: In some cases, we may require you to contact our support team via video call to verify your identity. This process may require you to present your identification documents.

g. Phone verification: We may contact you by phone and ask questions related to your account information, and based on your responses, further verify your identity,I agree to receive text messages.

To protect the security of your account and personal information, we may first verify your identity (e.g., through account verification, requiring written requests, or other reasonable means) before processing your request. For reasonable requests, we generally do not charge a fee, but for repetitive requests or those beyond reasonable limits, we may charge a reasonable fee. For requests that are unrelated to your identity, without reasonable grounds for repetition, or that require excessive technical effort (such as the need to develop new systems or fundamentally change existing practices), pose a risk to others' legal rights, or are impractical, we may refuse the request.

5. Personal Information Security

We implement reasonable technical and organizational security measures to prevent unauthorized access, use, or disclosure of your personal information. When personal information (such as credit card numbers) is transmitted to other websites, we use encryption technology (such as SSL protocols) to ensure data security. If our physical, technical, or management safeguards are compromised, resulting in unauthorized access, public disclosure, alteration, or destruction of information, and your legitimate rights are affected, we will promptly initiate an emergency response plan and take necessary and reasonable measures to mitigate the impact on you. In the event of a personal information security incident, we will also notify you in accordance with legal requirements about the basic situation of the security incident, its possible impact, the measures we have taken or will take, and suggestions for you to prevent and reduce risks, as well as remedies for you. We will notify you via SMS, phone calls, push notifications, or other reasonable channels. If it is difficult to inform you individually, we will take reasonable and effective ways to make a public announcement. At the same time, we will report the handling of the personal information security incident to regulatory authorities as required by law.

Mobile Data: No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

6. Exemptions from Obtaining Your Consent

In the following circumstances, your personal information may be processed, transferred, or disclosed without obtaining your consent in accordance with laws, regulations, and national standards:

a. Where necessary to conclude or perform a contract: If you purchase goods or services through our platform, we will share the necessary order information related to the transaction with the relevant goods or service providers, or the service operators on our platform, in order to complete your transaction, delivery, and after-sales service needs.

b. Where required to fulfill statutory duties or legal obligations: We may share your personal information as required by laws, regulations, litigation, dispute resolution, or in response to requests from administrative or judicial authorities, as well as to fulfill other legal obligations.

c. Where necessary to respond to public health emergencies, or to protect the life, health, or property of natural persons in emergency situations.

d. For the public interest in carrying out news reporting, public opinion monitoring, and other activities, where personal information is processed within a reasonable scope.

e. Where personal information that you have made public, or other personal information that has already been legally disclosed is processed within a reasonable scope (such as legal news reports or government information disclosure).

f. Other circumstances as prescribed by laws and regulations.

7. Policy Updates

To provide you with a better product and service experience, we are continuously improving our products, services, and technologies. We may update our Privacy Policy to reflect changes in our services and business processes. However, we will not limit the rights you are entitled to under this policy without your explicit consent. Any significant changes (such as changes in the purpose or method of processing personal information) will be communicated to you through announcements or other forms of notification. Without your explicit consent, we will not restrict your rights under this policy.

Significant changes to this policy include, but are not limited to:

a. Significant changes in the business model of our products, such as changes in the purpose of processing personal information, the type of personal information processed, or the method of using personal information.

b. Changes in the subject of the privacy policy due to business adjustments, mergers, or acquisitions, where the new subject changes the original processing purpose or method.

c. Major changes in the main recipients of shared or disclosed personal information.

d. Significant changes in user rights and how they exercise those rights over their personal information.

e. Changes in the contact information of the person responsible for personal information protection and the complaint channels.

f. If a personal information protection impact assessment report shows that the product has a significant impact on the rights and interests of individuals.

8. Contact Us

a. If you have any questions, comments, or suggestions about the content of this policy, you can contact us through the platform's customer service or the online service center.

b. You can also contact us via AtlanticSourcingGroup@outlook.com (please provide your identity information, specify the specific facts, and state your request).