Last updated: 2026-10-29
1. Who is responsible
The legal operator's name and registered address are being verified. Please contact us for these details before submitting personal information.
For privacy questions or requests: info@shandongmach.com.
2. Information we use
We receive the name, work email, company, WhatsApp number, equipment, quantity, application, destination country or port, and other requirements you provide. Name, email and quantity are needed to submit the online enquiry; optional fields help us prepare a relevant reply. We also keep correspondence, the enquiry reference, its status and dates, and your optional manufacturer-contact choice. Please do not include sensitive personal information or other people's private details.
Our hosting and security services process technical data such as IP addresses and request information to deliver and protect the site. The enquiry system uses a hashed identifier to limit repeated submissions. We retain the relevant page with only necessary product, category or application context; for the referring site, we keep its origin without its page path or query. Advertising campaign tags and click identifiers are saved with an enquiry only if you allow advertising measurement.
3. Why we use it
Where the GDPR applies, we use the following bases:
- Responding to an individual who requests steps toward their own contract: necessary pre-contractual steps at that person's request (Article 6(1)(b)).
- Communicating with someone representing a company, checking equipment suitability and coordinating a requested quotation: our legitimate interests in handling genuine business enquiries and arranging sourcing (Article 6(1)(f)), balanced against your rights. Site security and preventing abuse also rely on these legitimate interests.
- Letting a relevant manufacturer contact you directly, optional analytics and advertising measurement: your separate, withdrawable consent (Article 6(1)(a)). Submitting an enquiry does not subscribe you to promotional emails; any future marketing subscription needs a separate choice.
You can enquire without agreeing to manufacturer direct contact or optional cookies. Without the contact details needed to reply, we may be unable to handle your request. Any retention required by an applicable legal duty is assessed separately; we do not treat every business record as legally required.
4. Who receives information
Our enquiry team and the following service providers process information needed for their roles. The services and countries relevant to a request may differ.
- Vercel — Website hosting and handling your web requests, including technical connection data and submitted forms.
- Neon — Stores enquiry records and the information needed to manage and deliver them. Processing locations: 美国东部 — 华盛顿特区 / United States — Washington, D.C. (iad1; database region / 数据库区域)
- Zoho Mail — Receives our enquiry notifications and correspondence, including enquiry details and attachments.
- Hostinger Email — Sends enquiry notifications through SMTP; processes recipient addresses, message contents and delivery information.
- Google Ads — After advertising-measurement consent, processes technical connection data, page context and advertising click information for campaign attribution. The website does not send enquiry text, names or contact details to this tag.
- Hotjar — After analytics consent, provides heatmaps and session recordings using page URLs, clicks, scrolling, device/browser information and session identifiers. Enquiry form content and enquiry references are masked; we do not identify visitors to Hotjar using their names or contact details.
Neon's listed location is the confirmed database region. It does not confirm all backup, log or support-access locations; those details remain under review.
For technical or quotation coordination, we share only necessary equipment requirements with relevant manufacturers and remove personal identifiers where they are not needed. We forward your name and contact details for a manufacturer to contact you directly only when you select the optional permission. You may ask which manufacturer will receive them or withdraw permission at any time by emailing us. We record the withdrawal and stop further sharing under that permission. This does not recall sent messages; our team must separately notify any manufacturer already given your details. A manufacturer may act as a separate controller for its own correspondence, and we can help route your privacy request to it.
If you choose WhatsApp, you leave this site and use WhatsApp/Meta under its own privacy terms; the link may include equipment and page context. An email link opens your chosen mail service. Review the message before sending. Using these options is voluntary.
5. International processing
Your enquiry may involve manufacturers and service providers outside your country or the European Economic Area. Local privacy protections may differ.
We are still verifying the relevant account locations and contractual safeguards. We do not currently represent that a particular transfer mechanism has been confirmed for every provider. You may request this information before submitting an enquiry.
Contact info@shandongmach.com for the destinations and safeguards applicable to your information and a copy of any applicable safeguards, with confidential details removed where necessary.
6. How long we keep information
Ordinary enquiries that have not resulted in a completed transaction are queued for automatic deletion from the website database once both their creation and last update are at least 12 months old, unless a documented legal obligation or active dispute requires retention. Cleanup runs daily in batches. Records with a notification delivery in progress wait until it finishes.
Completed or closed enquiries, required accounting records and disputes are reviewed separately and kept only as long as their purpose or applicable retention requirement needs. Email messages, attachments, local exports and manufacturer copies are handled separately by our team; deleting a website record does not recall them. Restricted backups follow the relevant provider's retention cycle. We can explain the period applicable to your particular record.
After database deletion, a hashed submission identifier is retained for 12 months to prevent accidental resubmission; it does not contain your original enquiry or contact details. Privacy-operation records contain no enquiry reference or contact details and are also retained for 12 months. These records are removed in scheduled batches after expiry. Security rate limits expire after their short protection window; provider logs follow the applicable service's retention rules.
7. Your rights and requests
Where the GDPR applies, you may request access, a copy, correction, erasure or restriction of your personal data; object to processing based on legitimate interests; and request portability where the legal conditions apply. You can withdraw consent at any time without changing the lawfulness of earlier processing. These rights have conditions and exceptions. We do not make decisions with legal or similarly significant effects about you solely by automated processing.
Email info@shandongmach.com with your request and enquiry reference if available. We may ask for proportionate information to verify your identity, preferably through the original contact address. We normally respond within one month. If a complex or numerous request needs up to two further months, we explain the extension within the first month. We normally handle requests free of charge and explain any restriction or refusal.
You may also complain to the data protection authority in the EEA country where you live, work or believe an infringement occurred. Find a supervisory authority.
8. Cookies and similar storage
Necessary storage supports security, administrator sign-in and remembering your privacy choices. Your cookie preference is kept in this browser for six months, or until you clear it or the policy changes. It is not used to track you across sites. You can browse and enquire without optional cookies.
- Analytics — Google Analytics 4 is not enabled on this deployment.
- Google Ads enquiry conversions — If advertising measurement is allowed when the website confirms a successful online enquiry, we send a conversion event and its randomly derived enquiry reference to Google Ads to prevent duplicate counting. Names, email addresses, WhatsApp numbers and enquiry contents are not included in this event. Page views, contact-button clicks, failed submissions and opening an email draft are not successful enquiry conversions.
- Contact-click measurement — When separately configured and advertising measurement is allowed, clicking a business WhatsApp or email control sends a contact-click conversion to Google Ads. It measures an attempt to contact us, not a delivered message or a successful enquiry. These events do not include your name, contact details, message text or the destination link.
- Hotjar — Hotjar loads only after you allow analytics, to help improve page usability through heatmaps and session recordings. It uses _hj* cookies and Hotjar local/session storage to distinguish visitors and sessions; lifetimes depend on the storage item, account settings and browser limits. Form content is masked, and administrator pages do not load the tracking component. Rejecting analytics keeps Hotjar off. Withdrawing analytics reloads the page to stop an already loaded recorder and removes Hotjar browser data we can control.
- Advertising measurement — Only with your permission, campaign tags and advertising click identifiers are retained for this browser-tab session and may accompany an enquiry. The Google Ads tag loads only after you allow advertising measurement. It processes page context and ad-click information and may use _gcl_* cookies for attribution, with retention subject to Google tag settings and browser limits. The base tag does not treat viewing a page or clicking WhatsApp as a successful enquiry. Meta Pixel is not enabled on this deployment. This site does not use remarketing, Google advertising personalization or Google Signals.
Use the Cookie settings button at any time to allow or refuse each optional category, including withdrawing an earlier choice. Withdrawing stops the relevant tracking on this site, removes the associated browser data we can control and may reload the page. It does not erase data already received by a provider; contact us for a data request. Your browser can also block or delete cookies.
Provider information: Google Analytics cookies · Google advertising cookies · Meta cookies · WhatsApp privacy.
9. Updates
We update this notice when our processing changes and show the new date here. Where a change requires a new choice or notice, we will request it before using your information for that new purpose.