Privacy Policy

Last updated: October 2026

This policy explains which personal data we process when you use findsourcingagents.com, why we do it and what rights you have. It follows the EU General Data Protection Regulation (GDPR).

1. Controller

Kayumari Consulting LLC
3833 Powerline Rd Suite 201
Fort Lauderdale, Florida 33309
USA

Represented by Katrin Hartmann-Seifert
Email: info@findsourcingagents.com

EU representative (Art. 27 GDPR)

As the controller has no establishment in the EU, it has appointed the following representative under Art. 27 GDPR: Leonie Hartmann, Beethovenstraße 15, 88046 Friedrichshafen, Germany. Data subjects and supervisory authorities may also contact the representative on all issues related to the processing of personal data.

2. Hosting and server data

Hetzner (server)

This website runs on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in data centers in the EU. The legal basis is Art. 6(1)(f) GDPR (secure and reliable operation). A data processing agreement under Art. 28 GDPR is in place with Hetzner.

Server data

To deliver a page, our server necessarily processes your IP address, the requested address, date and time, and technical browser information. We do not keep access logs with IP addresses for this website. To prevent spam, the IP address of a form submission is held in memory for one minute only and is never written to disk. Technical error logs without IP addresses are deleted after 30 days. The legal basis is Art. 6(1)(f) GDPR.

3. Cookies, local storage and Google Analytics

Strictly necessary storage

We store your cookie choice in your browser's local storage (key fsa-cookie-consent). This is required for the website to work (§ 25(2) no. 2 TDDDG) and is not sent to us or to third parties.

Google Analytics 4 (only with your consent)

Only if you choose "Accept all" in the cookie banner do we load Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies (_ga, _ga_*) for up to 24 months and analyses how the website is used. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Without consent, no Google script is loaded. You can withdraw your consent at any time via "Cookie settings" in the footer; the cookies are then deleted.

NamePurposeTypeDuration
fsa-cookie-consentStores your cookie choicelocalStorage, necessaryuntil deleted in your browser
_ga, _ga_*Google Analytics 4: distinguishes visitors and sessionsCookie, statisticsup to 24 months

Fonts

Fonts are served from our own server. No connection to Google Fonts or any other font provider is made.

4. Contact form and email

When you write to us via the contact form or by email, we process your email address and your message to answer your request. The message is delivered to us by email. The legal basis is Art. 6(1)(b) GDPR (pre-contractual enquiries) or Art. 6(1)(f) GDPR (answering enquiries). For lead statistics we keep a record of the request type and a one-way pseudonymised identifier derived from your email address, not the address itself.

We use Zoho Mail by Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands, with data processing in the EU data center. A data processing agreement is in place.

5. "Get Matched" form (Zoho Forms)

The form on Get Matched is provided by Zoho Forms (Zoho Corporation B.V., see above, EU data center) and embedded on our page. When the page loads, your browser connects to Zoho's servers, which process your IP address. If you submit the form, Zoho processes the details you enter (such as name, email, company, product, target country, order volume and description) on our behalf. We use them to recommend suitable sourcing agents and may forward your request to agencies that match it, so they can contact you with an offer. Those agencies are responsible for their own further processing. The legal basis is Art. 6(1)(b) GDPR.

6. Agency listings

Agency profiles contain business information about companies (name, address, website, services). Where a profile contains personal data, for example the name of a founder or a business contact, we process it based on Art. 6(1)(f) GDPR (informing importers about sourcing service providers) or, if the agency supplied it, Art. 6(1)(b) GDPR. Agencies can ask us at any time to correct or remove their profile at info@findsourcingagents.com.

7. Paid listings (Gumroad)

Paid listing upgrades are sold through Gumroad, Inc., 548 Market St, San Francisco, CA 94104, USA. When you buy, Gumroad processes your name, email address and payment details as an independent provider and merchant of record. We receive your name, email address and order details to activate your listing. Gumroad's own privacy policy applies. The legal basis is Art. 6(1)(b) GDPR. Data transfers to the USA take place to perform the contract (Art. 49(1)(b) GDPR).

8. Recipients and transfers outside the EU

Data is only received by the providers named above and, for match requests, by the agencies we forward your request to, which may be located outside the EU. The controller is based in the USA; where data is transferred there, this is based on Art. 49(1)(b) GDPR or, for certified recipients, on the EU-US Data Privacy Framework.

9. Retention

We delete personal data once the purpose no longer applies: error logs after 30 days, enquiries and match requests once they have been handled, at the latest after 3 years (statutory limitation period), agency profile data when the profile is removed. Statutory retention obligations, for example for invoices, remain unaffected.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). To exercise these rights, contact info@findsourcingagents.com.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your residence or place of work (Art. 77 GDPR).

11. Security

All connections are encrypted via TLS. Access to servers is restricted to authorised persons.

Loading interactive version...

Built by MadeByBrain.