Last Updated: [Insert Date, e.g., Dec 27, 2025]
Hongfuhan Technology Co., Ltd.] ("we," "us," or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit our website [Your Website URL], use our services, engage in business with us, or otherwise interact with us. We process personal data lawfully, fairly, and transparently, in strict compliance with applicable data protection laws, particularly the European Union's General Data Protection Regulation (GDPR).
1. Data Controller
The data controller responsible for the processing of your personal data is:
[Your Full Company Name]
[Your Company Registered Address]
[Email Address, e.g., privacy@yourcompany.com]
[Phone Number]
2. Personal Data We Collect
We limit data collection to what is necessary for specific, explicit, and legitimate business purposes, which may include:
Data You Provide Directly: Identity and contact information you provide when contacting us, requesting a quote, creating an account, subscribing to newsletters, or entering into a contract with us (e.g., name, job title, company name, email address, phone number, postal address, payment information).
Data Collected Automatically: Information collected automatically via cookies and similar technologies when you interact with our website (e.g., IP address, browser type, device information, visit timestamps, pages viewed, clickstream data, and referral URLs). Please see our Cookie Policy for more details.
Business Interaction Data: Data generated during contract fulfillment or business communications (e.g., correspondence records, order details, support requests, feedback, and survey responses).
3. Purposes and Legal Basis for Processing
We process your personal data only when we have a valid legal basis:
| Processing Purpose | Primary Legal Basis (GDPR) |
|---|---|
| To provide requested product information, quotes, samples, or services; to manage our contractual relationship with you; to process orders and payments. | Necessary for the performance of a contract with you (Art. 6(1)(b)) |
| To respond to your inquiries, provide customer support, and send service notifications. | Necessary for the performance of a contract (Art. 6(1)(b)) or our legitimate interests (Art. 6(1)(f)) |
| To send you marketing communications, industry updates, or product information (where consent is obtained). | Your explicit consent (Art. 6(1)(a)) |
| To improve and optimize our website, products, and services; to conduct analytics, and ensure network security and fraud prevention. | Our legitimate interests (Art. 6(1)(f)) |
| To comply with applicable laws, regulations, court orders, or governmental requests (e.g., tax, audit obligations). | Necessary for compliance with a legal obligation (Art. 6(1)(c)) |
4. Data Sharing and Disclosure
We treat your personal data as confidential and share it only in the following circumstances:
Service Providers: With trusted third parties who assist us in operating our business (e.g., IT and cloud storage providers, payment processors, logistics partners). They access data only to perform services on our behalf under strict contractual confidentiality and data protection obligations.
Legal Requirements: When required by law or to protect our rights, property, safety, or the rights of others.
Business Transfers: In connection with a merger, acquisition, or sale of assets, where your data may be part of the transferred assets. We will ensure the recipient honors this policy.
With Your Consent: When you have given explicit consent for specific sharing.
We do not sell your personal data to third parties for their own marketing purposes.
5. International Data Transfers
As our business is global, your personal data may be transferred to and processed in countries outside your country of residence, including outside the EU/EEA (e.g., to our headquarters or servers in China). When we make such transfers, we ensure appropriate safeguards are in place, such as:
Transferring data to countries deemed by the European Commission to provide an "adequate" level of protection; or
Implementing safeguards like the European Commission's approved Standard Contractual Clauses (SCCs), requiring the recipient to provide protection equivalent to GDPR standards.
You can contact us for details on the specific transfer mechanisms used.
6. Data Security
We implement appropriate technical and organizational security measures, aligned with industry standards, to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These include encryption, access controls, security audits, and staff confidentiality training. However, no method of transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, considering legal, tax, regulatory requirements, or the need to resolve disputes. Upon expiry of the retention period, we securely delete or anonymize your data.
8. Your Data Subject Rights (Under GDPR)
As a data subject, you have the following rights:
Right of Access: To request confirmation of whether we process your data and to obtain a copy.
Right to Rectification: To request correction of inaccurate or incomplete data.
Right to Erasure (Right to Be Forgotten): To request deletion of your data under certain conditions.
Right to Restriction of Processing: To request restriction of processing under certain conditions.
Right to Data Portability: To receive your data provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller.
Right to Object: To object to processing based on our legitimate interests, including profiling for direct marketing.
Right to Withdraw Consent: To withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise your rights, please use the contact details in Section 10. We will respond within one month of receipt. You also have the right to lodge a complaint with a supervisory authority in your EU member state of residence, place of work, or place of the alleged infringement.
9. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance user experience, analyze site traffic, and personalize content. You can manage your cookie preferences through your browser settings. Please see our separate Cookie Policy for detailed information on the types of cookies we use, their purposes, and how to control them.
10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, our privacy practices, or to exercise your data rights, please contact our Data Protection Officer (DPO) or relevant team:
[Name of DPO or Privacy Team]
Email: [Designated email, e.g., dpo@yourcompany.com]
Postal Address: [Your Company Address, Attn: Data Protection Officer]
11. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, technology, or our business practices. Any material changes will be effective upon posting the updated version on our website with a new "Last Updated" date. We encourage you to review this page periodically for the latest information.
