Privacy Policy

CAR BUY WORLD > Privacy Policy

CAR BUY WORLD — PRIVACY POLICY
Last Updated: 17 February 2026

This Privacy Policy governs the collection, use, disclosure, and protection of personal and business information submitted through carbuy.world, its subdomains, and associated communications (collectively, the “Site”). CAR BUY WORLD (“we,” “us,” or “our”) operates as a B2B vehicle export entity serving commercial clients globally. This policy reflects our commitment to data integrity, regulatory compliance, and operational transparency.

1. Scope and Applicability

This policy applies to all individuals and entities engaging with CAR BUY WORLD in a commercial capacity—including dealers, distributors, fleet operators, government agencies, and corporate procurement officers (“Clients”). It covers data collected via:

Website inquiries and quotation requests
Email correspondence (e.g., sales@carbuy.world)
Proforma invoices, contracts, and shipping documentation
Pre-shipment inspection and compliance verification processes

This policy does not apply to publicly available OEM data or third-party logistics partners acting independently.

2. Information We Collect

We collect only information necessary to execute export transactions and comply with international trade regulations:

A. Client Business Information

Company name, registration number, and physical address
Primary contact name, role, email, and direct phone number
Importer license details (e.g., Nigerian SONCAP registration, UAE TRA code)
Bank account details for payment processing (via secure LC/TT channels)

B. Transaction-Specific Data

Vehicle specifications (OEM, model, VIN range, quantity)
Destination port and customs clearance requirements
Inspection reports (SGS/Bureau Veritas) and compliance certificates
Bill of Lading, Commercial Invoice, and Packing List records

C. Technical Data

IP address, browser type, and device identifiers (for security and fraud prevention)
Session logs for Site functionality (no behavioral tracking)

We do not collect:

Personal financial data (e.g., credit card numbers)
Biometric or sensitive personal data
Retail consumer information

3. Purpose of Processing

Your information is used solely for:

Executing vehicle export contracts under Incoterms® 2020
Preparing market-specific compliance documentation (SONCAP, GCC, PVOC, etc.)
Coordinating logistics with shipping lines, port authorities, and destination agents
Responding to contractual inquiries and post-shipment support requests
Fulfilling legal obligations under Chinese export control laws and destination-country regulations

We do not use your data for marketing, profiling, or automated decision-making.

4. Legal Basis for Processing

Processing is grounded in:

Contractual necessity: To fulfill export agreements (GDPR Art. 6(1)(b))
Legal compliance: To meet customs, tax, and anti-fraud requirements in China and client jurisdictions (GDPR Art. 6(1)(c))
Legitimate interests: To ensure secure, efficient transaction execution (GDPR Art. 6(1)(f))

For Clients in Nigeria, Kenya, Ghana, UAE, Saudi Arabia, Vietnam, Peru, Colombia, Romania, and Ukraine, processing aligns with local data protection frameworks (e.g., Nigeria NDPA 2023, UAE PDPL 2021).

5. Data Sharing and Disclosure

We disclose information only when strictly necessary:

Recipient	Purpose	Safeguards
Chinese OEMs (BYD, Geely, NIO, XPeng)	Factory allocation and VIN assignment	Confidentiality agreements; data limited to order specs
Third-party inspectors (SGS, Bureau Veritas)	Pre-shipment verification	ISO-certified protocols; reports shared only with Client
Shipping lines & freight forwarders	Port-to-port logistics coordination	Data limited to BL/manifest requirements
Customs authorities (origin/destination)	Regulatory clearance	Disclosed per mandatory declaration forms
Your designated local agent	Post-arrival support	Shared only with Client-authorized contacts

We do not sell, rent, or broker your data. All third parties are bound by data processing agreements.

6. International Data Transfers

Data may be transferred from China to:

Destination countries (e.g., Nigeria, UAE, Peru) for customs clearance
Inspection hubs (e.g., Singapore, Dubai) for quality verification

Transfers comply with:

Chinese PIPL Article 38 (security assessment for cross-border transfers)
Standard Contractual Clauses (SCCs) where applicable
Local adequacy decisions (e.g., UAE-EU data bridge)

7. Data Retention

We retain data only as long as required by law or business necessity:

Contractual records: 7 years post-shipment (per Chinese Commercial Code)
Compliance documentation: 5 years (aligned with SONCAP/GCC audit cycles)
Inquiry logs: 90 days if no transaction occurs

Data is securely archived or destroyed via certified digital wiping.

8. Your Rights

Depending on jurisdiction, you may:

Request access to or correction of your business data
Obtain a copy of transaction records in structured format
Request deletion where no legal retention obligation exists
Lodge complaints with relevant supervisory authorities

To exercise rights, contact dpo@carbuy.world with proof of identity and company authorization. Requests are resolved within 30 days.

9. Security Measures

We implement industry-standard safeguards:

Technical: AES-256 encryption (at rest/in transit), TLS 1.3, regular penetration testing
Organizational: Role-based access controls, staff confidentiality agreements, annual GDPR/PIPL training
Physical: Secure server facilities in Shanghai with biometric access

All data handling adheres to ISO/IEC 27001 principles.

10. Policy Updates

We may update this policy to reflect regulatory changes or operational improvements. Material changes will be notified via:

Email to primary contact
Prominent notice on carbuy.world for 30 days

The “Last Updated” date above indicates the current version.

11. Contact Us

For privacy inquiries, data requests, or compliance questions:

Email: sales@carbuy.world
Postal Address: CAR BUY WORLD Data Protection Office, Waigaoqiao Free Trade Zone, Pudong, Shanghai 200131, China

We respond to all valid requests within 2 hours.