Privacy Policy
Who we are
Fortune Imports & Exports (India), operating under the brand "Fortune Sourcings" ("we", "us", "our"), is the data controller for the personal data we collect through fortunesourcings.com and through our sourcing and export-logistics services. Our registered head office is in Siliguri, West Bengal, India, with operating offices in Foshan, China and Mechinagar, Nepal. Questions may be directed to hello@fortunesourcings.com.
Personal data we collect
We collect only the personal data required to respond to your enquiry and to deliver our services. This includes: contact details (name, email, phone number with country code, company, WeChat ID, WhatsApp), the content of your RFQ, consultation request or download request, supplier registration details where applicable, and limited technical data (IP address, device, browser, referrer) collected through cookies and analytics tools. We do not knowingly collect data from minors.
Lawful basis for processing (GDPR, UK GDPR & equivalents)
We process personal data on the following lawful bases: (a) performance of a contract or to take steps prior to entering a contract, for RFQs, quotations, consultations and supplier engagements; (b) consent, for marketing communications, gated-content downloads and non-essential cookies; (c) legitimate interest, for the secure operation of our website, fraud prevention and aggregated analytics; (d) legal obligation, for export documentation and tax records.
How we use your data
We use personal data to: (i) respond to enquiries, RFQs, consultations and supplier registrations; (ii) operate the buyer, supplier and internal Fortune OS portals; (iii) send transactional and, with your consent, marketing communications; (iv) improve and secure the site; and (v) comply with legal, accounting and export-documentation obligations.
Sharing & international transfers
Personal data is shared only with vetted service providers acting under written data-processing terms. These include: website and database hosting; analytics and product-usage measurement (Google Analytics 4 / Google Tag Manager, Microsoft Clarity, PostHog); advertising measurement (Meta Pixel, LinkedIn Insight Tag); customer-relationship management and lead handling (HubSpot); transactional and marketing email delivery (Resend); our business mailboxes (Zoho); and payment processing (Razorpay). We may transfer personal data outside the EEA / UK to India and China to deliver the service. Where required, we rely on the Standard Contractual Clauses or equivalent safeguards. We never sell personal data.
How long we keep your data
We retain RFQ, project and export-documentation records for up to seven years in line with international trade and tax requirements. Marketing data is retained until you withdraw consent. Website analytics data is retained for 14 months.
Your rights
Subject to applicable law, you have the right to: access your personal data; correct inaccurate data; request erasure ('right to be forgotten'); restrict or object to processing; data portability; withdraw consent at any time; and lodge a complaint with your local supervisory authority (e.g. ICO in the UK, your data-protection authority in the EU). Send any rights request to hello@fortunesourcings.com or use our data-request form — we respond within 30 days.
India — Digital Personal Data Protection Act, 2023 (DPDP)
For Data Principals in India, we act as a Data Fiduciary under the DPDP Act, 2023. We process your personal data only for the lawful purpose for which you provide it (responding to enquiries, delivering sourcing and export services) and on the basis of your consent or legitimate uses permitted by the Act. You may: withdraw consent as easily as you gave it; request access, correction, completion, updating and erasure of your personal data; nominate another individual to exercise your rights in the event of death or incapacity; and raise grievances with us first. Our Grievance Officer can be reached at hello@fortunesourcings.com; if unresolved, you may approach the Data Protection Board of India.
UAE — Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, PDPL)
For data subjects in the United Arab Emirates, we process personal data in line with the UAE PDPL. You have the right to: be informed of how your data is processed; request access and a copy of your data; request correction or erasure; restrict or object to processing; request data portability; and withdraw consent. Cross-border transfers of UAE personal data are made only to jurisdictions with adequate protection or under appropriate contractual safeguards. Requests may be sent to hello@fortunesourcings.com.
Data access, export & deletion
To exercise any of the above rights — including receiving a machine-readable export of your data or requesting its deletion — submit a request through our data-request form (linked from this page and the footer) or email hello@fortunesourcings.com. We verify the identity of the requester, acknowledge within 72 hours, and complete verified requests within 30 days (DPDP/GDPR) or the period required by applicable law. Deletion is subject to records we must retain for legal, tax and export-documentation purposes.
Cookies & analytics
We use a minimal set of strictly-necessary cookies plus, with your consent, analytics and marketing cookies. Analytics tools are Google Analytics 4 (via Google Tag Manager), Microsoft Clarity and PostHog; marketing tools are the Meta Pixel and LinkedIn Insight Tag. Google tags run in Consent Mode and no analytics or marketing tag loads until you opt in. Detailed cookie information is in our Cookie Policy and you can change preferences at any time using the 'Cookie Preferences' link in the footer.
Security
Personal data is encrypted in transit (HTTPS / TLS) and at rest. Access to the Fortune OS portal is role-based, session-audited and protected by 2FA. We test our systems regularly for vulnerabilities.
Updates
We update this policy from time to time. Material changes are highlighted at the top of this page. Last updated: 1 February 2026.