Privacy & your information.

Ark Industrial Technology Co., Ltd. operates ArkIndMarket and is responsible for the personal information it processes for platform operation. Registered address: Wanyang Maker City, Langxia Subdistrict, Yuyao City, Zhejiang Province, China. Privacy and support requests: info@arkindmarket.com. A supplier or buyer receiving information for its own business may have independent responsibilities under applicable data-protection law. Please read the relevant feature notice before sharing information.

We process account names, email addresses, password hashes, account roles, language and notification preferences and optional avatars to create and secure accounts. Supplier applications include company identity, registration details, business contacts, descriptions, branding, employee authorizations and verification documents to review eligibility and manage company access. Purchasing activity can include addresses, requirements, selected recipients, quantities, quotations, orders, communications, attachments, support messages, reviews, saved items and team or CRM records to perform the requested service and resolve issues. Optional provider credentials and research preferences are used only for the configured integrations. We also process request metadata, IP addresses, session and security records, rate-limit information, errors and audit events to deliver the service, prevent abuse and investigate incidents. We do not ask for payment-card information because platform-managed payment is disabled. Do not include unnecessary sensitive information in free text or attachments.

Cloudflare supplies hosting, database, file storage, queues, network protection and real-time infrastructure. Resend handles transactional email, including the destination address and relevant verification, notification or support-reply content. Providers may process network metadata as part of service delivery. Public pages may load Google Fonts, Unsplash editorial images, and other externally hosted supplier, article or advertising media; the relevant hosts receive the browser requests needed to load these resources, including network information such as an IP address. Optional SEO assistance sends the current product draft and instructions to the supplier’s selected OpenAI or DeepSeek connection; it is not limited to already-published content. Optional global market research uses an expressly authorized snapshot of published company and product information: Tavily receives country and product search terms, and the selected AI provider receives the public snapshot and retrieved source summaries. Optional enterprise-WeChat (WeCom) notifications send business alert text and relevant platform links to the supplier’s configured official company webhook. Clicking a LinkedIn or WhatsApp sharing link opens that external service with the public page URL and, for WhatsApp, its title; those services then apply their own practices. The sharing controls do not automatically post to those services when a page loads. Do not enable integrations or provide third-party private data without authority. Review the feature’s current provider and sharing notice; optional features are not necessary for ordinary browsing.

We aggregate first-party product-card impressions and clicks by product, supplier, placement and UTC day. No account identity, raw IP address, full page URL or referrer is stored in these activity records. A random page-only token prevents duplicate counts for up to 24 hours, then is eligible for cleanup. Existing sign-in is checked only to exclude a supplier’s own staff and platform administrators; it is not saved with the activity. A rotating keyed network digest is briefly used for abuse throttling. These limited product-activity records are distinct from ordinary infrastructure, security and authentication records: for example, sign-in abuse limits can use an IP address and the entered email address. Other first-party reports aggregate page requests and broad source categories such as direct, internal, Google, Bing or referral. First-page product searches are normalized and aggregated by day, including whether they found results; heuristic checks exclude likely contact information but cannot guarantee detection of every personal detail typed into a search. These reports are not a claim about unique visitors or external search-engine impressions. Contextual article advertisements are selected by article, category and campaign settings, not an individual browsing profile; the current advertising feature does not record advertising-specific impression or click events.

Approved company pages, product listings, published business contact information and approved product comments can be seen by the public and indexed by search engines. A public comment can display its author’s account name and avatar. Current account avatars are also served through public-facing image URLs; do not upload a sensitive image as an avatar. Private verification documents are not part of the public storefront. Directed inquiries, orders, conversations and associated attachments are restricted to their authorized audiences; ordinary chat-attachment access requires permission to that conversation. Authorized platform staff may handle verification, support, security or legal matters within their permitted scope, which does not give every administrator unrestricted access through every business tool. Account sign-in email is not automatically a public company email, although the buyer’s account email and submitted business contact details are shared with authorized participants in the buyer’s inquiry or order. Review company contact fields before submission. Authorized company or purchasing-team members can access records allowed by their role. Internal support and CRM notes are not sent to the other trading party as ordinary chat messages. Publicly accessible files or pages may be copied by others; do not place private information in a public field.

A direct product inquiry shares your submitted contact and requirement information with that product’s supplier. For a multi-supplier or unmatched sourcing request, distribution follows the recipients and matching authorization you confirm. Staff may review an unmatched request and, where authorized, assign it to suitable qualified suppliers, including suppliers joining later. Only share what prospective suppliers need. We may disclose relevant records to service providers acting for us, authorized staff and business participants, or competent authorities where required by law. Any further disclosure, public use or materially different purpose requires an applicable lawful basis and additional notice or consent when required; we do not treat publication of a request as unrestricted permission to sell its contact details.

Depending on the information, purpose and applicable law, processing may be necessary to establish or perform a service contract, meet legal duties, protect rights or legitimate interests where recognized by law, or rely on your valid consent. We do not rely on consent where a different legal basis applies, and we do not assume a legal basis available in one jurisdiction applies everywhere. Where consent is required for optional processing, publication, sensitive information or cross-border provision, it must meet the applicable requirements, including separate consent where required. You may decline optional integrations or withdraw relevant consent through the available setting or by contacting us; withdrawal does not invalidate earlier lawful processing and may make the optional feature unavailable.

We retain information for the purpose for which it was collected and for applicable security, transaction, tax, complaint, dispute and other legal duties. Required records are not deleted simply because an account is closed. Where applicable law requires product, service or transaction records to be kept for a minimum period, that period applies, and pending disputes or legal holds may require longer retention. Provider copies, recipient records and backups can follow separate lawful retention processes. Once information is no longer needed and no retention requirement applies, it should be deleted or irreversibly anonymized through the applicable process. Expired sessions, authentication tokens, rate-limit records and product-activity receipts have specific maintenance cleanup rules; those rules do not impose the same deadline on messages, orders or other business records. Withdrawing a product comment removes it from ordinary public display by changing its status; that action is not a promise that its stored content or moderation history has been erased. Device draft restoration limits are also distinct from deletion, as explained in the Cookie Policy. We do not promise immediate deletion from every system, a universal retention period or a self-service account-erasure or complete personal-data export tool. Ask us about the categories and retention applicable to your request.

We use account authorization, role and company boundaries, transport protection, restricted file access and operational security measures. Passwords are stored as hashes, and supported provider credentials use application-level encryption when configured. These measures are not a guarantee against every incident. Business messages and attachments are processed by the platform and are not end-to-end encrypted; access may be necessary for authorized operations, support, security or legal requests. Protect your credentials, use available account safeguards, verify unusual payment instructions independently and report suspected unauthorized access. Where a security incident requires notification, we will follow applicable notification duties.

Depending on applicable law, you may have rights to be informed, obtain access or a copy, correct or supplement information, request deletion or restriction, object to certain processing, withdraw consent, request portability where it applies, or obtain an explanation of relevant processing. Some profile and preference changes are available in account settings. For other requests, email info@arkindmarket.com or use platform support. State the account email, relevant reference and request; we may ask for proportionate identity or authority verification, but never your password. We will explain applicable limits, retention duties and any refusal and respond within the time required by applicable law. You may also complain to the competent supervisory authority. This policy does not claim that all these operations are available as one-click account controls.

This is a business service intended for adults and authorized business representatives, not a service directed at children. If you believe a child has provided personal information without the legally required authorization, contact info@arkindmarket.com so we can investigate and take appropriate action. Material policy changes will be notified as required, with an effective date for the approved version. Contact us before providing sensitive material if you are unsure about the intended audience or processing.