Privacy Policy
Version 2026-09-30 · Last updated 30 September 2026
This policy explains what personal data we collect when you contact us through this website, why we collect it, how long we keep it, who we share it with and what rights you have. It applies to this website only.
1. Who is responsible for your data
The data controller (the company that decides how your data is used) is:
- Company
- Caoxian Zhengtonghe Crafts Co., Ltd.
- Address
- No.26, Taobao Industrial Park, Daji Administrative Village, Daji Town, Caoxian County, Heze, Shandong 274000, China
- Privacy contact
- [email protected]
2. What we collect
We only collect what we need to prepare a quotation. When you submit the inquiry form, we store:
- Your name, company name, country/region, business email and WhatsApp number.
- The product you asked about, the quantity, and the requirements or message you wrote.
- Any design or reference file you chose to upload. Files are kept in a private store and are only downloadable by us.
- Technical records: the submission time, the page you came from, a short browser identifier, an irreversible hash of your IP address (never the raw address), and the fact, time and version of your consent to this policy.
We never ask for ID numbers, passport details, payment details or any special-category data.
3. Why we process it (legal basis)
- To answer your inquiry and prepare a quotation — steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)).
- To keep the form free of spam and abuse and to keep a record of our business communication — our legitimate interest (GDPR Art. 6(1)(f)).
- To meet tax, accounting and export-control obligations — legal obligation (GDPR Art. 6(1)(c)).
We do not use your data for advertising, and we never sell it. Marketing emails are only sent if you have separately agreed to receive them.
4. How long we keep it
Inquiries are kept for 24 months from our last contact and are then deleted. The consent record is kept together with the inquiry so that we can demonstrate compliance. Uploaded files are deleted together with the inquiry.
5. Who we share it with
We do not sell or rent personal data. We use a small number of service providers (processors) that act on our instructions:
- Cloudflare, Inc. — website hosting, database, file storage, bot protection and access control.
- Resend (Plus Five Five, Inc.) — delivery of the inquiry notification and the confirmation email.
- Zoho Corporation — hosting of the mailboxes we publish on this website, including our privacy contact address, so that we can receive and answer your emails.
We may also disclose data where we are legally required to do so.
6. International transfers
Our infrastructure is hosted in the European Union (Cloudflare EU jurisdiction). Where data has to be transferred outside the EEA — for example to send you our reply by email — we rely on lawful transfer mechanisms such as the Standard Contractual Clauses offered by our providers.
7. Cookies and analytics
This website does not use advertising or tracking cookies, so no cookie banner is required. Visitor statistics are collected with Cloudflare Web Analytics, which is cookieless and does not fingerprint visitors. The spam-protection widget (Cloudflare Turnstile) only sets a cookie when it needs to verify that you are human.
8. Your rights
Subject to applicable law, you may ask us to:
- tell you whether we hold data about you and give you a copy of it (access);
- correct data that is inaccurate or incomplete (rectification);
- delete your inquiry and the files you uploaded (erasure);
- provide your data in a machine-readable format (portability);
- stop processing based on our legitimate interest (objection).
Write to [email protected] and we will answer within 30 days. You also have the right to lodge a complaint with your local data-protection authority.
9. Security
Data is transmitted over HTTPS and stored in access-controlled cloud services. The administration panel is protected by Cloudflare Access (email authentication), uploaded files are kept in a private store, and only staff who need the data can open it.
10. Contact
For any privacy question, request or complaint, contact us at:
- Privacy contact
- [email protected]
- Phone / WhatsApp
- +86 18810904107
- Address
- No.26, Taobao Industrial Park, Daji Administrative Village, Daji Town, Caoxian County, Heze, Shandong 274000, China
11. Changes to this policy
We may update this policy from time to time; the current version is shown at the top of this page. The consent version recorded with new inquiries follows this policy version.