Privacy policy

Depending on the feature used, Hellocarcar may handle account identity and authentication data, verification and support communications, service usage and security logs, subscription and transaction references, and business information that a user submits for supplier, quotation, policy, procurement, dispute or report workflows.

We use information to provide and secure requested services, authenticate users, maintain records, respond to support requests, prevent abuse, improve reliability and meet contractual or legal obligations. We do not use submitted business records to make unrelated public claims about a person or company.

Authorized hosting, authentication, email, payment, data-processing or security providers may process the minimum information needed for their role when the relevant integration is enabled. Cross-border processing may occur where the service workflow or provider infrastructure requires it, subject to the agreement and applicable mandatory safeguards.

Hellocarcar retains information only for the service, security, recordkeeping and legal purposes that apply, then deletes or de-identifies it where appropriate. Reasonable technical and organizational safeguards are used, but no internet service can promise absolute security. Users may request access, correction or deletion through the verified business channel, subject to identity verification and records that must be retained.

To understand service use, we record page and module openings, submitted searches or filters, question submissions and their outcome, and subscription or paid-page openings. Opening a paid page is not a payment. Question text is linked to existing conversations without a second full copy; unsuccessful or unfinished questions have no additional text copy, and shared-document questions record only the action. We do not record unsubmitted input, keystrokes, password or payment-card fields, access tokens or links with sensitive parameters.

The server estimates country, region and city offline from IP and estimates device type from request information, using unknown when unavailable. IPs are not sent to external location services, and usage records contain no raw IP, coordinates or full user-agent. A 24-hour HttpOnly browser-session identifier rotates on sign-in, sign-out or account changes. Each action belongs to the verified identity at that time; anonymous history is not reassigned to an account and we do not fingerprint across devices. Administrators with audit-view permission can inspect the latest 90 days; expired details are deleted in bounded batches during later collection and maintenance. Existing conversations retain their own retention rules. DNT or Global Privacy Control disables this detailed collection. Use our published business contact channel to request access, correction or deletion.

Card numbers and CVV are handled by Oceanpayment’s component and do not pass through our API, logs or database. We process account and billing contact information, consent time and terms version, encrypted payment tokens, order amounts and status, receipts and cancellation records to operate subscriptions, send notices, reconcile payments and resolve issues. Payment and email providers receive only information needed for these operations. Transactional email authorization is not marketing consent. Contact support to ask about, correct or request handling of your personal data; necessary transaction and dispute records may need to be retained under applicable requirements.

New Blue Sea International Trade Group Limited FLAT/RM 616A BLK 1 6/F ONE NORTH 8 HONG YIP STREET YUEN LONG NT Company number: 78304591 Support and complaints: contact@hellocarcar.cn