Privacy Policy

Fbahelp CO Ltd, trading as ECOMCARE, is the controller for ecom.care, its localized websites, and EC Chrome – Instant Logistic Quotes. Its registered address is UNIT 18, 8/F, PETER LEUNG INDUSTRIAL BUILDING, 103 WAI YIP STREET, KWUN TONG HONG KONG. This notice covers visitors, business contacts, customers, suppliers, inspection participants, shipment recipients, and extension users. We determine how enquiry, account, and business administration data is used. For shipment or inspection data handled on a customer's instructions, the respective service agreement determines controller and processor responsibilities; carriers and customs authorities may be independent controllers.

Send privacy questions or rights requests to consult@ecom.care with the subject ‘Privacy request’. Our published operational address is Room 401, Building B, Fuhai Cultural & Creative Park, Dapaisi Supply Chain, Bao'an District, Shenzhen, Guangdong 518103, China. You can also contact us through the Contacts page. The contracting entity is identified in your service agreement or quotation. ECOMCARE Mail has a separate privacy notice linked below.

You may provide your name, business email, telephone, company, role, account credentials, enquiry, supplier details, product descriptions, prices, package dimensions, weight, shipment addresses, selected services, and attachments. Service records can include inspection photos or video, reports, invoices, customs documents, delivery contacts, and tracking references. Please provide other people's information only with authority and make this notice available to them. Do not submit unrelated sensitive information or payment-card details through enquiry forms.

Information comes from you, your employer or customer, suppliers, inspectors, carriers, customs intermediaries, and pages you choose to inspect with the extension. Systems also process IP addresses, browser/device details, timestamps, request and security logs, locale, and submission source. Contact forms require a name, email, message, and security verification; company is optional. Quote tools require enough cargo and destination information to price a route. Without required information we cannot complete that request; optional tracking is not required for service.

Where GDPR or UK GDPR applies: responding to your request, preparing a quote, and delivering a service you contract for rely on Article 6(1)(b). Working with contacts of a corporate customer, coordinating suppliers and carriers, supporting users, and protecting systems rely on Article 6(1)(f): our legitimate interests in running a reliable, secure logistics business, subject to your rights and reasonable expectations. Article 6(1)(c) applies only where a relevant legal obligation requires processing, such as applicable accounting, customs, or lawful disclosure duties.

Optional website analytics and advertising rely on consent, Article 6(1)(a), together with applicable cookie rules. Any marketing subscription requires a separate lawful basis and an opt-out; making an enquiry is not agreement to marketing. You may object to legitimate-interest processing and to direct marketing, or withdraw consent without affecting earlier lawful processing. In other jurisdictions the applicable local legal grounds and additional consent requirements apply; GDPR legitimate interests do not override local consent requirements.

EC Chrome compares supplier product and marketplace freight information with ECOMCARE logistics quotes. When you open it or request extraction, activeTab and scripting allow it to inspect the selected page for product title, supplier-page URL, prices, currency, quantities, variants, attributes, categories, and packaging information. It does not request Chrome history permission, monitor all tabs, read email, or collect passwords. The editable draft and source URL are saved in chrome.storage.local; exchange-rate snapshots are cached there and quote attempt counts use chrome.storage.session. Theme preference uses local storage. Clearing extension storage or uninstalling removes local extension data, but does not delete requests already received by our servers.

Opening the popup loads quote configuration and exchange rates from ECOMCARE and, when used, public USD rate data from Frankfurter (api.frankfurter.dev); that rate request contains no supplier draft, though the recipient sees ordinary network metadata. Typing at least three characters into the destination field sends the search text through ECOMCARE to Google Places; selecting a suggestion retrieves its address, place ID, and coordinates. Requesting a quote sends the product description, cargo/category and compliance details, origin, destination address or warehouse, coordinates/place ID, declared value, and selected options to ECOMCARE, its CRM, and the quotation/logistics provider Dapaisi (DPS) as needed. The supplier source URL is stored locally and is not part of the current quote payload. Opening the full calculator navigates to a website with its own storage and consent choices.

EC Chrome's use and transfer of user data complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. Extension data is used only to provide or improve its disclosed quote-comparison features. It is not sold, used for personalized, retargeted, or interest-based advertising, used to determine creditworthiness or for lending, or transferred to data brokers. Website advertising consent does not authorize advertising use of extension data.

Transfers of extension user data are restricted to what is necessary for the disclosed feature, security or abuse investigation, applicable law, or a merger, acquisition, or asset sale with the user's explicit prior consent. Humans may read extension user data only with the user's explicit agreement to access specific data, for security or legal compliance, or where aggregated and anonymized for internal operations in accordance with the Limited Use rules. No analytics or advertising SDK is included in the current extension.

The website code integrates Vercel (hosting and optional web analytics), Cloudflare (network/security and Turnstile verification), Supabase (accounts, database and storage), Resend (transactional email), Google Maps/Places (address search and geocoding), Google Analytics (optional website measurement), Meta Pixel (optional advertising measurement), and Frankfurter (public exchange rates). ECOMCARE's CRM receives quote and operational requests; DPS/Dapaisi receives the routing and cargo information needed for provider quotes. Availability depends on the feature and deployed configuration. Google Tag Manager and Yandex Metrika are not enabled by this version of the website.

For a requested logistics or inspection service, information may also go to the selected supplier, inspector, warehouse, freight forwarder, carrier, customs broker or authority, insurer, payment provider, and professional advisers to the extent necessary for that service or a legal duty. Your service documents identify the operational partners for your shipment. Website form enquiries are stored in the CRM lead database and sent to our team by email; network IP and submission context are retained with the lead. External WhatsApp, WeChat, Telegram, social and map links are governed by those providers' notices when you choose to use them. Extension data remains subject to section 5.

Our published operations are in mainland China, with Hong Kong contact channels. Shipments may require processing in the origin, transit, and destination countries, including the United States for US deliveries. Cloud, email, address, analytics, and advertising suppliers may process data in the United States or other countries in their service networks. The language of a website does not establish an office, local hosting, or an adequacy decision. Ask us for the recipients, locations, and safeguards relevant to your request.

Transfers must satisfy the law that applies to the data: for EEA/UK restricted transfers, an applicable adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses and UK Addendum/IDTA, with required risk assessment and supplementary measures; for mainland China, applicable PIPL transfer conditions, notices and separate consent where required; and any other applicable localization or transfer requirements. A service request or acceptance of this notice is not blanket consent to an international transfer. You may request information about applicable safeguards and a copy subject to appropriate redaction.

Retention depends on the record and purpose: enquiries and quote records for handling the request and necessary follow-up; account records for account administration; shipment, customs, inspection, invoice and payment records for the service, statutory recordkeeping and applicable claims periods; security logs for investigating and preventing abuse. A legal hold may extend retention for a specific dispute or obligation. Ask us for the period applicable to your record. This notice does not assert a universal statutory retention period or automatic deletion schedule for operational records.

Cookie choices expire after 180 days unless renewed. Website session storage normally ends with the browser tab/session; persistent calculator drafts, local inspection and quote records, theme choices, and extension drafts remain until replaced or cleared. Browser controls can remove these copies. Deleting a local draft or disconnecting a service does not erase submitted records, recipient copies, or backups. Rights requests cover server records too; where deletion is lawfully restricted, we explain the reason and applicable limits, including backup expiry and preventing restored data from returning to active use.

Depending on applicable law, you may obtain access and a copy, correct inaccurate information, request deletion or restriction, object to processing, withdraw consent, and receive portable data where the statutory conditions apply. Direct marketing objections apply at any time. Contact consult@ecom.care, identify the relevant service and your request, and provide only enough information to locate the record. We may verify identity or an agent's authority proportionately; do not email identity documents unless a secure verification method is agreed. Requests are normally free, subject to permitted exceptions.

For GDPR requests, the response deadline is normally one month; a permitted extension of up to two further months must be explained within the first month. Other local deadlines apply where required. We explain any refusal and available review routes. You may complain directly to the competent supervisory authority without first contacting us: your EEA authority, the UK ICO, Hong Kong PCPD, China's competent cyberspace authority, or the local regulator listed below, as applicable. If we process on another controller's instructions, we help route your request to that controller.

EEA/UK: GDPR/UK GDPR rights and applicable electronic-communications rules apply where their territorial conditions are met. Hong Kong: the PDPO provides access and correction rights and regulates purpose, security and retention; complaints may be made to the PCPD. Mainland China: PIPL provides rights to know, decide, restrict/refuse, access/copy, correct and delete personal information; separate consent and additional notices may be required for sensitive information, transfers to another handler or overseas processing. Russia: where Federal Law No. 152-FZ applies, rights and mandatory localization, notification and cross-border rules must be met; a Russian-language page is not proof those requirements have been fulfilled.

United States: applicable state laws may provide access, correction, deletion, portability, appeal, and opt-out rights for sale/sharing, targeted advertising or certain profiling, without unlawful discrimination. Meta advertising on the website can constitute ‘sharing’ under California law; use Cookie settings / Do not sell or share to reject advertising. Global Privacy Control disables optional tracking. The extension does not sell or share data for advertising. Canada: applicable PIPEDA/provincial rights include access, correction and challenging compliance; complaints may go to the OPC or competent provincial commissioner. Australia: where the Privacy Act/APPs apply, request access/correction or raise a complaint with us, then the OAIC. Thailand: where PDPA applies, access, portability, objection, deletion, restriction, correction and consent-withdrawal rights and PDPC complaints apply. These supplements apply when the relevant law covers the processing; they do not assert an establishment or regulatory registration in each country.

Necessary technologies support language choice, account sessions, security checks, and tools you request. Optional Google Analytics/Vercel measurement and Meta advertising are disabled until the relevant choice is made. Rejecting optional tracking does not block quotes or enquiries. You can accept analytics and advertising separately, reject both, and withdraw through the persistent cookie settings control. Global Privacy Control keeps both optional categories off. Consent is specific to this browser and website origin; it is not automatically shared across localized subdomains.

With analytics enabled, service interactions, page usage, and contact-link conversions may be measured. Named calculator campaign links can record visits, session duration and heartbeat activity in our CRM only with analytics consent; their tokens are not sent to third-party analytics. With advertising enabled, Meta receives website page/interaction information for advertising measurement and audiences. Query strings and fragments are excluded from our direct analytics page URLs. See the Cookie Policy for storage names, durations, providers and controls. Closing or visiting the site is not consent.

The code uses HTTPS for production requests, authenticated account flows, server-side provider credentials, and security verification on supported public forms. Access to operational information is limited by service roles and business need; contractual and organizational controls must accompany technical measures. No internet service is risk-free. Report suspected unauthorized access to consult@ecom.care. Where applicable law requires incident notifications to authorities or affected people, those obligations apply within the statutory time limits.

Automated tools calculate indicative prices and routing from cargo, dimensions, origin, destination and options. They do not by themselves approve credit, employment, or a legally binding shipment contract. Ask our team for review of a quote or routing result. Do not submit health, biometric, religious, or other special-category data unless a separately explained service and lawful ground requires it. Identity/customs documents should use the agreed secure service channel and applicable additional notice.

Our services are intended for business users, not directed to children. Do not submit children's personal information unless necessary for a lawful service and authorized under the applicable law. Contact us if you believe a child has provided data in error so we can assess removal and any necessary protective action.

This notice was updated on 19 October 2026 to cover the current website, calculator, tracking and Chrome extension flows. Material changes will be brought to your attention as required; a new purpose needing consent requires a new choice before that processing. The Cookie Policy and the separate ECOMCARE Mail notice provide service-specific details. This notice explains privacy practices and rights; it does not replace a service agreement or waive statutory rights.