1. Data controller
The controller of your personal data is Maogon, a company registered in Belgium under enterprise number BTW BE1032392180, with its registered office in Ghent, Belgium ("Maogon", "we", "us", or "our").
For any questions regarding this policy or your personal data, you may contact us at hello@maogo.be.
2. Data we collect
2.1 Data you provide directly
When you use our website, request early access, or communicate with us, we may collect:
- Name, email address, and phone number
- Company name, VAT number, and business address
- Information submitted through contact forms or email correspondence
- Product specifications, sourcing requirements, and order details when you use our platform
2.2 Data collected automatically
When you visit our website, we automatically collect certain technical data:
- IP address (anonymised where possible)
- Browser type and version, operating system
- Pages visited, time spent on pages, referring URL
- Device type and screen resolution
3. How we use your data
We process your personal data for the following purposes:
- To provide and improve our sourcing and compliance services
- To process your early access application or service enquiries
- To communicate with you about orders, shipments, and compliance status
- To fulfil our role as EU-based GPSR responsible person on your behalf
- To generate landed-cost calculations and customs documentation
- To comply with legal and regulatory obligations, including EU customs, VAT, and product safety regulations
- To send you service-related communications
- To monitor and improve the security and performance of our website
4. Legal basis for processing
Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:
- Contract: Processing necessary for the performance of a contract with you, or to take steps at your request prior to entering into a contract (Article 6(1)(b) GDPR)
- Legal obligation: Processing necessary for compliance with EU customs, VAT, product safety, and trade regulations (Article 6(1)(c) GDPR)
- Legitimate interest: Processing necessary for our legitimate interests in operating and improving our services, provided these interests are not overridden by your rights (Article 6(1)(f) GDPR)
- Consent: Where you have given explicit consent, for example to receive marketing communications (Article 6(1)(a) GDPR). You may withdraw consent at any time
5. Data sharing
We do not sell your personal data. We may share your data with the following categories of recipients, strictly as necessary to provide our services:
- Verified suppliers and manufacturers in China, limited to product specifications and order details necessary to fulfil your sourcing request
- Logistics and freight providers for shipment and delivery of goods
- Compliance and testing laboratories to conduct regulatory certification (CE, REACH, RoHS, GPSR, Food-Contact, Packaging & Waste)
- Customs authorities and tax administrations where legally required
- Hosting and infrastructure providers (Cloudflare, Inc.) for website delivery and security
All third-party processors are bound by data processing agreements and are required to process your data in compliance with GDPR.
6. International transfers
As a China-to-EU sourcing platform, certain personal data — specifically, product specifications and order details — may be transferred to recipients in the People's Republic of China. Where such transfers take place, we ensure appropriate safeguards including:
- Standard Contractual Clauses (SCCs) as approved by the European Commission
- Data minimisation — only information strictly necessary for order fulfilment is shared
- Contractual obligations on Chinese suppliers to protect personal data
Our hosting provider (Cloudflare) may process data in jurisdictions outside the EEA. Cloudflare adheres to the EU-U.S. Data Privacy Framework.
7. Data retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Account and order data: For the duration of our business relationship and for 7 years thereafter, as required by Belgian commercial and tax law
- Compliance and customs documentation: For 10 years, as required by EU customs regulations
- Website analytics data: For 26 months maximum
- Early access applications: Until the application is processed, or until you request deletion
8. Your rights
Under the GDPR, you have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your personal data, subject to legal retention requirements
- Restriction: Request restriction of processing in certain circumstances
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests or direct marketing
- Withdraw consent: Where processing is based on consent, withdraw consent at any time
To exercise any of these rights, contact us at hello@maogo.be. We will respond within 30 days.
You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit): www.gegevensbeschermingsautoriteit.be.
9. Cookie policy
9.1 What are cookies
Cookies are small text files stored on your device when you visit a website. They are used to make websites function properly, improve user experience, and provide analytical information to site operators.
9.2 Cookies we use
Strictly necessary cookies
These cookies are essential for the website to function and cannot be disabled. They include cookies set by our hosting provider (Cloudflare) for security, performance, and bot protection. No consent is required for these cookies under ePrivacy regulations.
- __cf_bm — Cloudflare bot management (expires after 30 minutes)
- cf_clearance — Cloudflare security clearance (expires after 30 minutes)
Analytics cookies
We currently do not use third-party analytics cookies. Should we implement analytics in the future, this section will be updated and appropriate consent mechanisms will be put in place.
9.3 Managing cookies
You can control and delete cookies through your browser settings. Disabling strictly necessary cookies may affect the functionality of our website.
10. Changes to this policy
We may update this Privacy & Cookie Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page indicates when the policy was last revised.
If you have any questions about this policy, your personal data, or wish to exercise your rights:
Maogon
Ghent, Belgium
BTW BE1032392180
hello@maogo.be