Privacy Notice

1. Data controller

Luoyang Zhili New Materials Co., Ltd., No. 10, 11th Floor, Building 1, Wangjiefu International, No. 256, Xigong District, Luoyang, Henan, China.

Privacy and data-rights contact: 19987857268@163.com.

2. Data we collect

• Identity and business-contact data, such as name, company, country or region, work email and optional telephone number.
• Inquiry data, such as requested product, machine model, part reference, quantity, operating details and message.
• Files you choose to upload, such as drawings, photographs, PDFs or dimensional information.
• Security and technical data processed when the site or Turnstile is used, which may include IP address, browser, device and request information.
• Optional analytics and advertising attribution information, such as campaign parameters and advertising click identifiers, only after optional cookies are accepted and the relevant tool is configured.

3. Purposes and legal bases

• To answer an inquiry and prepare requested pre-contractual information. We rely on Article 6(1)(b) GDPR where the person is requesting steps for a contract to which that person may be a party.
• To handle a B2B inquiry submitted by an employee or representative of another organisation. We rely on Article 6(1)(f) GDPR and our legitimate interests in responding to business communications and managing prospective customer relationships.
• To protect the form, website and email channel against spam, abuse and security threats. We rely on Article 6(1)(f) GDPR and our legitimate interest in securing our systems and communications.
• To retain records where necessary for legal claims, compliance or applicable record-keeping obligations. We rely on Article 6(1)(c) or Article 6(1)(f), depending on the record and obligation.
• For optional analytics or direct marketing, where used, we rely on consent under Article 6(1)(a). Inquiry data is not added to a marketing list solely because an inquiry was submitted.

4. Required and optional information

Fields marked as required are needed to identify the business request, reply to it and reduce misuse of the form. If those fields are not provided, we cannot accept the inquiry through this form. Telephone numbers, detailed messages and attachments are optional unless they are later needed to identify or quote the requested part.

The form asks you to acknowledge that this notice was presented. That acknowledgment does not change the legal basis used for the processing and is not consent to marketing.

5. Recipients and service providers

Inquiry data may be accessed by authorised ZL sales, engineering and administrative personnel who need it to review and answer the request. Cloudflare provides hosting, content delivery and security services and, when configured, private storage for inquiry records and quarantined uploaded files. Resend processes the inquiry notification email; an uploaded file is included directly only if that delivery option is enabled. We do not sell inquiry data.

6. Processing outside the EEA

The controller is established in China, so a submission from the EEA is received and handled outside the EEA. Cloudflare and Resend may also process data in countries determined by their service infrastructure and contractual terms.

Where GDPR transfer rules require an appropriate safeguard, the applicable provider data-processing terms and available transfer mechanism must be assessed for the relevant data route. You may contact us for information about the safeguard applicable to your inquiry and how to obtain a copy, subject to necessary redactions.

7. Retention

An inquiry and its attachments are normally retained while the request is reviewed and for up to two years after the inquiry is closed. If the inquiry results in a quotation, order, contract, dispute or legally required business record, relevant information may be retained for the longer period required by the applicable obligation or limitation period. Security and service-provider logs follow the necessary security purpose and the configured provider retention settings.

A request for deletion will be assessed against these purposes and any legal requirement to retain specific records.

8. Your GDPR rights

Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction and portability of your personal data. You may object to processing based on legitimate interests. Where processing is based on optional consent, you may withdraw that consent at any time without affecting processing that was lawful before withdrawal.

Send a request to 19987857268@163.com. We may ask for information reasonably necessary to verify identity and protect data from unauthorised disclosure.

9. Files, confidentiality and security

Do not upload personal data, special-category data or third-party information that is not necessary for the inquiry. Remove employee names, signatures, customer identifiers and unrelated personal details from drawings or photographs where possible. If a file contains confidential technical information, identify it before submission and use an agreed transfer route when the normal form is not appropriate.

We use proportionate technical and organisational measures intended to protect submitted data. No internet transmission or email service can be guaranteed to be completely secure.

10. Cookies and optional analytics

Essential storage is used for site operation and to remember the privacy choice for up to 180 days. The Google Tag Manager container may load on page entry with analytics storage, advertising storage, advertising user data and advertising personalization denied by default. In this restricted state, Google tags may send limited cookieless signals, including consent state, device/browser information, approximate location derived from the network address and page or event information; optional browser storage and personalized advertising remain disabled. If the visitor accepts optional cookies, Google measurement and advertising features may use browser storage, and advertising click identifiers and campaign parameters may be kept in first-party browser storage for up to 90 days to attribute a later inquiry. Rejecting or withdrawing clears the site-accessible optional attribution and first-party Google measurement cookies and sends a denied consent update. The Cookie Settings control can be used at any time.

11. United States privacy choices

We do not sell inquiry data for money. Depending on the applicable U.S. state law and how optional Google advertising features are configured, disclosure of online identifiers or website activity for cross-context behavioral or targeted advertising may be treated as a sale, sharing or targeted-advertising processing. Where an applicable law gives you the right to opt out, use “Do Not Sell or Share My Personal Information” in the footer or reject optional cookies. We apply that choice to optional advertising and measurement on this browser.

We honor a browser Global Privacy Control signal as an opt-out of optional advertising, sale/sharing and targeted-advertising processing on that browser. While the signal is active, it overrides a stored acceptance choice. You may also request access, deletion or correction, or appeal a denied request, where the law that applies to you provides that right, by emailing 19987857268@163.com. We may need to verify a request and may retain data where an exception permits or requires it. We will not discriminate against you for exercising an applicable privacy right.

This industrial B2B website is not directed to children, and we do not knowingly sell or share the personal information of consumers under 16. Privacy laws have business-size, residence, context and other applicability thresholds; this section does not state that every listed right applies in every circumstance.

12. Automated decisions and marketing

We do not use inquiry data to make solely automated decisions that produce legal or similarly significant effects. Submitting an inquiry does not subscribe the sender to marketing. Any future email-marketing subscription must use a separate, optional choice and provide an unsubscribe method.

13. EU representative and complaints

ZL is established in China. No EU representative contact is currently published in this notice. If Article 27 GDPR requires a representative for the relevant processing, this notice must be updated with the formally appointed representative before that appointment is relied upon.

You may lodge a complaint with the data-protection authority in the EEA country where you live or work, or where you believe an infringement occurred. You may also contact us first so that we can review the issue.