Privacy Policy

This Privacy Policy (the “Policy”) explains what personal data Eastern Sun Trading Ltd (the “Operator”, “we”) collects, why and how we process and protect it, and what rights you have.

The Policy applies to the website easternsun.online (including www.easternsun.online), the client portal and back office at lk.easternsun.online, and to the websites eastern-sun.ru and easternsunbase.ru while they remain in operation (together, the “Services”). By using the Services, submitting forms or registering in the client portal you agree to this Policy.

1. Who the operator is

Eastern Sun Trading Ltd, office: Room 06, 2nd Floor, Unit 2, Building 8, Xiaojing Coast City Garden, No. 5 Xiaojing Bay, East Petrochemical Avenue, Xiayong, Daya Bay, Huizhou, Guangdong, China (Office Use Only). Contact for personal data matters: info@eastern-sun.ru.

2. What data we process

Website forms (request, feedback, estimate):

• name and surname, city
• phone, messengers, e-mail
• company name, tax ID, position (for companies)
• the content of the request: goods, volume, timing, delivery city, attached links and files

Registration and the client portal at lk.easternsun.online:

• e-mail (login) and password — the password is stored only as an irreversible hash
• name, phone, client type (individual or company)
• company details: legal and short name, tax and registration numbers, addresses
• bank details for settlements under the contract
• data of employees you add to the portal: name, position, e-mail, phone, access role
• requests, commercial offers, orders and their statuses
• deal documents: contracts, invoices, packing lists, specifications, reports, signed scans
• messages and chat with your manager, claims, tasks
• financial data on your orders: invoices, payments, payment statuses

Technical data (collected automatically): IP address, browser and device type, referral source, on-site actions. The public website uses web analytics (Yandex.Metrica) and cookies; the client portal uses only functional cookies and browser local storage required for sign-in and operation.

3. Why we process data

• processing requests, preparing commercial offers and estimates
• concluding and performing the supply contract: purchasing, inspection, consolidation, delivery, documents, settlements
• providing and operating the client portal: requests, orders, documents, messages, finance
• communicating with you about the deal — e-mail, phone, messengers
• meeting legal requirements, including customs and tax
• service improvement and statistics (anonymised)

4. Legal grounds

We process data on the basis of your consent (submitting a form, registering, ticking the consent box), the contract with you or steps to conclude it, and applicable data protection laws — in particular Russian Federal Law No. 152-FZ “On Personal Data” for users in Russia.

5. Who we share data with

We do not sell personal data. Data is shared with third parties only to the extent needed to fulfil your request or contract:

• manufacturers and suppliers — recipient details for order processing and shipment
• logistics companies, carriers, customs brokers — for delivery and clearance
• banks and payment services — for settlements
• state authorities — where required by law

The Services are hosted on servers located outside the user's country; data is transmitted over an encrypted connection (HTTPS).

6. How we protect data

• all connections are HTTPS only
• passwords are stored as hashes and are unknown to staff
• access to the back office and client data — authorised staff only, by role
• the portal's server side is closed to search engines and is not indexed
• an employee of your company added to the portal sees only your company's data and has no access to other clients' portals

7. Retention

Request data is kept for up to 3 years after the last contact; contract and document data — for the term of the contract and thereafter for the periods required by law (accounting, tax and customs). A portal account is kept while active; at your request we will delete the account and any data not subject to mandatory retention.

8. Your rights

You may request information about the processing of your data, ask for correction, restriction or deletion, withdraw consent, and obtain a copy of the data you provided. Send requests to info@eastern-sun.ru — we reply within 30 days.

9. Cookies and analytics

The public website uses cookies to remember your preferences (language, theme, cookie consent) and for web analytics. You can decline analytics cookies in the banner or disable cookies in your browser; this does not affect your ability to send a request. The client portal uses only functional cookies and local storage for sign-in and operation.

10. Children

The Services are intended for businesses and persons over 18. We do not knowingly collect children's data.

11. Changes to this Policy

We may update this Policy. The current version is always published on this page with the update date; material changes are additionally communicated to portal clients.

12. Contacts