Privacy Policy

1. Who We Are / Data Controller

New Route International Exchange Co., Ltd. (trading as “Sovern House”) is the data controller for personal information collected through this website. We are registered in Taiwan. For privacy matters, contact us at privacy@sovernhouse.co.

2. What Data We Collect

We collect personal data only when you voluntarily provide it. The primary point of collection is our Request for Quote (RFQ) form, which collects:

• Full name
• Company name
• Email address
• Country
• Description of goods you wish to source (free text)
• Estimated quantity / order value (optional)
• Sourcing timeline (optional)

We also collect standard server log data (IP address, browser type, referring URL, pages visited) through our hosting infrastructure. We do not use cookies for tracking or advertising. Analytics, if used, are privacy-first (Plausible Analytics — no personal data collected).

3. How We Use Your Data

We use RFQ data solely to:

• Respond to your sourcing inquiry
• Create an inquiry record in our internal ERP system
• Send you an automatic acknowledgment email
• Conduct follow-up commercial communications related to your inquiry

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing (GDPR — EU Visitors)

If you are located in the European Union or European Economic Area, the legal basis for processing your data is:

• Legitimate interest — to respond to your business inquiry (Article 6(1)(f) GDPR)
• Pre-contractual steps — where your inquiry is the first step toward a business agreement (Article 6(1)(b) GDPR)

You have the right to object to processing based on legitimate interest at any time by contacting privacy@sovernhouse.co.

5. Your Rights (GDPR — EU Visitors)

If you are an EU/EEA resident, you have the following rights under GDPR:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data (“right to be forgotten”)
• Restriction — request that we restrict processing of your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Complaint — lodge a complaint with your national data protection authority

To exercise any of these rights, email privacy@sovernhouse.co. We will respond within 30 days.

6. Your Rights (CCPA — California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

• Know — the categories and specific pieces of personal information we have collected about you
• Delete — request deletion of personal information we have collected
• Opt-out of sale — we do not sell personal information; no action required
• Non-discrimination — we will not discriminate against you for exercising these rights

To submit a CCPA request, contact privacy@sovernhouse.co.

7. Taiwan Personal Data Protection Act (PDPA)

As a Taiwan-registered entity, we are subject to Taiwan's Personal Data Protection Act (個人資料保護法). We collect and process personal data only within the scope necessary to respond to your inquiry and conduct our business. You have the right to access, correct, and request deletion of your personal data under Taiwan PDPA. Contact privacy@sovernhouse.co to exercise these rights.

8. Data Retention

RFQ and inquiry data is retained for 3 years from the date of submission, unless a business relationship is established, in which case data is retained for the duration of the relationship plus 7 years (to comply with Taiwan commercial record-keeping requirements). You may request earlier deletion by contacting us, subject to any legal retention obligations.

9. International Data Transfers

Your data may be processed on servers located outside your country of residence (including Taiwan and the United States via our hosting providers). Where data is transferred from the EU/EEA, we rely on appropriate safeguards as required under GDPR. For details of specific transfer mechanisms, contact privacy@sovernhouse.co.

10. Third-Party Processors

We use the following categories of third-party services that may process personal data on our behalf:

• Vercel — website hosting (servers in the US/EU)
• Resend / Postmark — transactional email delivery
• Internal ERP system — inquiry and order management (self-hosted)

All processors are bound by appropriate data processing agreements.

11. Cookies

This Site uses only technically necessary cookies (session management). We do not use advertising cookies or third-party tracking pixels. See our Cookie Policy for full details.

12. Contact & Complaints

For any privacy-related questions or to exercise your rights, email privacy@sovernhouse.co.

EU residents may also lodge a complaint with their national supervisory authority. A list of EU data protection authorities is available at edpb.europa.eu.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be communicated by updating the date and, where required by law, by direct notification.