Privacy Policy
What we collect, why we collect it, and what we will not do with it. Written in plain language, because a policy nobody can read protects nobody.
Last updated 1 September 2026
The short version
We collect what is needed to sell you something and deliver it, and nothing else. We do not sell your data, we do not share it for advertising, and we do not run advertising or analytics trackers on this site. Your delivery address is never sent to a Chinese supplier, because your goods are shipped to our own warehouse in China first.
What we hold, and why
| Data | Why we need it | How long |
|---|---|---|
| Your phone number or email address | It is your account. Sign-in is a code sent to it, and there is no password to hold instead. | Until you ask us to delete the account |
| Your name, delivery address, city and district | A courier in Bangladesh cannot deliver without them. | Until you ask us to delete the account |
| A second contact number, if you give one | So a delivery is not returned when the first number does not answer. | Until you remove it or delete the account |
| Your orders: products, quantities, prices, status and messages | To buy, import and deliver them, and to answer questions about them afterwards. | Six years, as tax and customs records require |
| The last ten products you opened | So your dashboard can show you where you were. Capped at ten by the database itself. | Rolling: the eleventh replaces the first |
| A cart identifier in a cookie | So a basket survives a page refresh. It is a random id and nothing else. | Until the cookie expires or you clear it |
We do not ask for your date of birth, your national ID, your gender or your income, so we do not hold them. We never store card numbers.
Sign-in codes
There is no password on this site. You sign in with a six-digit code sent to your phone or your inbox, and the code itself is never written to our database: we store only a one-way hash of it, the way a password would be hashed. A code expires in minutes, dies after a handful of wrong guesses, and is replaced whenever a new one is requested.
Who else sees your data
Only where a job cannot be done without it, and only the part needed for that job. We do not sell or rent personal data to anyone, for any purpose.
- Our courier partner in Bangladesh receives your name, address and phone number, because that is a delivery.
- Our SMS and email providers receive the number or address a sign-in code or an order notification is going to, and the message itself.
- Bangladesh Customs receives what an import declaration legally requires for your shipment.
- Our Chinese suppliers receive the product, the quantity and our own warehouse address in China. They do not receive your name, your address or your number.
- Our hosting and database providers hold the data at rest as part of running the site.
We will also disclose data where the law requires it, and we will tell you when we are allowed to.
Cookies
This site sets two cookies, both strictly necessary and neither used to profile you:
- A cart cookie, holding a random identifier so your basket survives a refresh. It contains no product data and no personal data.
- A session cookie, set when you sign in, so you stay signed in. It is HTTP-only, meaning no script on the page can read it.
There are no advertising cookies, no third-party trackers and no cross-site pixels, so there is no consent banner to dismiss. Product photographs are served from Alibaba's image network, which sees the request for the image as any image host would.
Product translation
Supplier listings are written in Chinese and are machine-translated for display. Only the supplier's own text is sent for translation. Nothing you type, and nothing about you, is ever included.
Your rights
You can, at any time:
- See and correct your details yourself under Settings in your dashboard.
- Ask for a copy of everything we hold about you. We send it within one business day of confirming who you are.
- Ask us to delete your account. We delete your profile, your saved addresses and your browsing history. Completed orders are kept in a minimal form for the tax and customs period above, because the law does not let us delete them, and they are no longer linked to a live account.
- Withdraw from marketing messages without affecting anything about your orders. We do not send marketing to anyone who has not asked for it.
Ask by emailing info@klinsourcebd.com from the address on your account, or by calling 01705392287. We may ask you to confirm a code sent to your registered number first, so that somebody else cannot obtain or delete your data by asking for it.
Keeping it safe
The site is served over HTTPS, session and cart cookies are HTTP-only, sign-in codes are stored hashed rather than in the clear, and access to the order database is limited to the staff who handle orders. No system is perfect, and we do not claim otherwise: if a breach ever affects your data, we will tell you what happened and what to do about it rather than hoping you do not notice.
Children
This is a wholesale import service for businesses and adults. We do not knowingly collect data from anyone under 18, and we delete it if we find we have.
Changes to this policy
The date at the top of this page is the last time it changed. Where a change materially affects what we do with data we already hold, we will tell account holders directly rather than quietly editing the page.