Up To You Global
Privacy notice
Effective September 20, 2026. This notice covers the UTYG buyer-request and supplier-application website.
Information we collect
When you submit a buyer brief or supplier application, we collect the information you enter, such as your name, business email, company, location, product or capability description, quantity, budget range, timing, specification status, links, and contact details. With analytics consent, we also record approved campaign parameters and the referring website's origin. Advertising click identifiers and arbitrary query parameters are not retained. We do not intentionally collect payment-card data through this site.
How we use it
We use this information to evaluate project or partner fit, respond to the request, prepare useful follow-up questions, organize supplier outreach, understand which outreach campaigns produce relevant inquiries, protect the form from abuse, and maintain business records. Submitting a request does not subscribe you to a marketing newsletter.
When information may be shared
We may share the minimum relevant product requirements with prospective suppliers, logistics providers, quality-control providers, or other specialists when evaluating options for your request. We do not intentionally share your direct contact information or confidential files with a prospective supplier unless appropriate for the work. Do not submit trade secrets, confidential CAD, payment information, or sensitive personal data through the public form.
Campaign attribution and browser storage
Analytics is optional. If you allow it, Source remembers the first and most recent permitted campaign visit in this browser for up to 90 days. These limited attribution details may accompany a submitted request. Unsubmitted product descriptions, contact details, and files are not saved in browser storage. Withdrawing analytics consent clears the stored browser attribution; use the privacy contact below for requests concerning an already submitted record.
Advertising measurement
The site is prepared to support Meta and LinkedIn advertising measurement, but advertising tags are not activated unless the required account identifiers and consent configuration are in place. If activated, those providers may receive standard page or conversion events under their own privacy terms. We do not send your product description, order budget, contact details, or uploaded files as advertising event properties.
Storage, retention, and security
Submissions are stored in a restricted PostgreSQL database hosted through Replit. Staff-managed documents, when enabled, are held in private Replit App Storage, not a public file area. They remain quarantined until their actual size and signature are verified and a local ClamAV scan succeeds; upload is disabled when that scanner is unavailable. We do not send documents to a third-party scanning service. Access currently uses the business owner's protected admin account; individual staff access has not been activated. The initial review policy is 730 days for archived requests and 30 days for import previews, subject to contractual or legal retention needs. These are review periods, not promises of automatic deletion. Authorized erasure is recorded, queues deletion of associated private objects, and preserves shared contact records only where still required for other requests. Do not send confidential CAD or sensitive personal data through the public form.
Service providers and international processing
Up To You Global manages this sourcing service. Replit provides application hosting, database infrastructure, private App Storage, and the connector used for owner-authorized Gmail access. Document malware scanning, when available, runs locally with ClamAV and does not disclose the file to an additional scanning provider. Brevo automatic Source email sending remains disabled. Manual Gmail reply synchronization stores only narrowly anchored message metadata and snippet previews in Source; it does not broadly import the mailbox. Approved providers or prospective suppliers may process relevant information outside your country, including China when reviewing manufacturing requirements. We aim to share only information needed for the request. This notice needs legal review before production launch; it is not a guarantee of compliance.
Your choices
You may ask us to correct or delete a submission, or ask how it has been used, by emailing the address below. We may need to retain limited records when required for security, legal, contractual, or recordkeeping reasons. Privacy rights can vary by location.
Contact
Privacy questions and requests can be sent to info.uptoyouglobal@gmail.com. Include enough information for us to identify the relevant submission.