Legal
Privacy Policy
Effective: 10 September 2026
1. Who Is the Data Controller
The data controller for this website is:
Shijiazhuang HydroChemix Trading Co., Ltd.
Registered office: 18F, Block C, Wanda Plaza, Qiaoxi District, Shijiazhuang, Hebei 050000, People’s Republic of China
Business license No.: 91130104MA0XXXXXXXX (available on request)
General Manager / Data Controller representative: Helen Liang
Contact for privacy matters: privacy@hydrochemix.com
For visitors from the European Economic Area, the United Kingdom, or California, this entity also acts as the controller under the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA). For visitors from mainland China, this entity acts as the personal information controller under the Personal Information Protection Law (PIPL, effective 1 November 2021).
2. What Personal Data We Collect
We collect personal data only when you actively provide it or when you use our website in a way that generates it. The categories are:
2.1 Data you provide directly
- Contact form / RFQ form: name, company name, role/title, country, email, phone, shipping address, target product, quantity, application, water quality parameters.
- Free sample request form: name, company, shipping address, courier account (DHL/FedEx/TNT), end-use description.
- Email correspondence: any personal data you choose to include when you email us.
2.2 Data collected automatically
- Server logs: IP address, request URL, user agent, referer, timestamp. Retained 90 days for abuse prevention and discarded.
- Cookies: see the separate Cookie Policy for the exhaustive list, including Google Analytics 4 and Google AdSense cookies.
- Aggregated analytics: Google Analytics 4 (GA4) collects hashed user identifiers and event-level data (page viewed, button clicked). We have IP-anonymization enabled.
2.3 Data we do NOT collect
- We do not collect biometric data, health data, financial-account data, government-issued IDs, or special-category data under GDPR Article 9.
- We do not knowingly collect data from children under 16. If you believe a child has submitted data, email privacy@hydrochemix.com and we will delete within 7 days.
3. Why We Use Your Data (Lawful Basis)
| Purpose | Data used | Lawful basis (GDPR) |
|---|---|---|
| Respond to your quotation / RFQ / sample request | Contact form fields | Pre-contractual steps (Art. 6(1)(b)) |
| Send commercial quotations and follow-up emails | Email, name, country, product interest | Legitimate interest (Art. 6(1)(f)) — you can opt out at any time |
| Customs, export documentation, and Incoterms execution | Shipping address, tax ID, end-use statement | Legal obligation (Art. 6(1)(c)) |
| Aggregate website analytics (GA4) | Hashed user ID, page events | Consent (cookie banner) |
| Serve contextual and interest-based advertising (Google AdSense) | Cookies set by Google | Consent (cookie banner) |
| Defend legal claims | Server logs, email archive | Legitimate interest (Art. 6(1)(f)) |
4. Who We Share Data With
- Google LLC — analytics (GA4) and advertising (AdSense). Subject to Google’s controller-processor terms. Privacy policy: policies.google.com/privacy.
- SiteGround / hosting provider — server logs. Located in EU (Frankfurt) and Singapore regions.
- Courier partners (DHL, FedEx, TNT, SF International) — only shipping address and contact name, only when you request a sample shipment.
- Government authorities — only when compelled by law (customs declarations, tax authorities).
We do not sell personal data. We do not share personal data with brokers or marketing-list vendors.
5. International Data Transfers
Our headquarters and primary servers are in China. When we transfer your data to Google (US), courier partners (global), or EEA-based hosting, we rely on the European Commission’s Standard Contractual Clauses (2021/914) or equivalent safeguards. For PIPL compliance, we enter into a standard contract for cross-border PI transfer where the recipient is outside mainland China and the data crosses the border.
6. How Long We Keep Your Data
| Data category | Retention period | Reason |
|---|---|---|
| Quotation / RFQ emails and form submissions | 7 years from last interaction | Tax law, commercial dispute window (PRC) |
| Sample shipment records | 3 years from shipment | Courier dispute window |
| Server logs | 90 days | Security and abuse prevention |
| GA4 event data | 14 months (GA4 default) | Analytics |
| Unsolicited marketing opt-out requests | Permanent (suppression list) | Compliance with opt-out preference |
7. Your Rights
7.1 If you are in the EEA, UK, or Switzerland (GDPR)
You have the right to:
- Access the personal data we hold about you (Art. 15)
- Rectify inaccurate data (Art. 16)
- Request erasure (“right to be forgotten”, Art. 17)
- Restrict or object to processing (Arts. 18, 21)
- Data portability in a machine-readable format (Art. 20)
- Withdraw consent at any time (Art. 7(3)) without affecting prior lawful processing
- Lodge a complaint with your national supervisory authority (Art. 77)
To exercise any of these rights, email privacy@hydrochemix.com. We respond within 30 days. No fee is charged.
7.2 If you are in California (CCPA / CPRA)
You have the right to know what categories of personal information we collect, to delete personal information we have collected from you, to correct inaccurate personal information, and to limit the use of sensitive personal information. We do not sell or share your personal information for cross-context behavioral advertising.
7.3 If you are in mainland China (PIPL)
You have the right to know, to decide, to access, to correct, to delete, to request portability, and to withdraw consent. Cross-border transfer requires separate consent. Email privacy@hydrochemix.com to exercise.
8. Security Measures
- TLS 1.2+ encryption in transit (HTTPS).
- Access to production systems restricted to two named engineers with hardware-key 2FA.
- Database encryption at rest.
- Annual third-party penetration test (most recent: Q2 2026, no critical findings).
- Staff training on data handling and PIPL/GDPR basics (annual, completed August 2026).
9. Changes to This Policy
Material changes will be announced by a banner on the homepage for 30 days before they take effect. The “Effective” date at the top of this page reflects the current version.
Last reviewed: 10 September 2026 — Helen Liang, General Manager.