Privacy

How inquiry data is handled on this site. Final legal text is pending formal review; this page states the operating policy.

This page is a working template based on the confirmed data flow. It has not received final legal or privacy sign-off.

Data controller

Legal name
广州华厦生物制药有限公司
Registered region
中国广东广州
Address
中国广东省广州市白云区钟落潭镇金盆村政农路6号B幢厂区一、二楼
Contact and privacy email
xboxgamepasseueb@gmail.com

We are not creating a domain email address at this time. The Gmail address above is the current contact channel.

Information we process

An inquiry may include a name or contact details, company, work email, category interest, and project note. The source page, UTM parameters, and a submission_id are persisted with the inquiry in the Cloudflare D1 inquiry ledger (approved 2026-08-03) for response, attribution, and duplicate prevention. IP addresses are not persisted as inquiry business fields, although Cloudflare, including Turnstile, may temporarily process IP and request metadata for network delivery, security, and spam prevention.

Purposes and legal bases

Inquiry data is used to receive, assess, and answer a business request initiated by the visitor and to protect the service. Depending on the context, the basis may include steps taken at the visitor’s request before a contract, applicable obligations, and legitimate interests in secure website and business communications. Processing that requires consent will request it separately. Answering an inquiry is not a marketing subscription; future marketing requires a separate, optional choice.

Analytics choice

Cloudflare Web Analytics is off by default on a first visit. Its cookieless Beacon is loaded manually only after you choose “Allow analytics.” The choice is stored in the first-party localStorage key huaxia.analytics-consent.v1, whose only valid values are granted and denied. This key remembers the choice only; it is not used for profiling or to store other behavioral data. Use the footer’s “Privacy settings” button to change it, or clear this site’s storage in your browser.

Withdrawal removes the current Beacon and reloads the page to prevent future analytics reports. It cannot retrieve data already sent. Visits that decline analytics do not appear in Cloudflare referrer reporting, so aggregate metrics have a known coverage gap.

Current processors

The currently approved website processor set is limited to Cloudflare (hosting, Turnstile spam prevention, consent-gated Web Analytics, and D1 inquiry ledger storage) and Resend (internal inquiry notification email). Inquiry data is persisted in the Cloudflare D1 inquiry ledger; D1 belongs to Cloudflare, so no additional third-party processor is introduced (approved 2026-08-03).

Google is not currently enabled and is not a current processor. Google Search Console and Google Ads are future plans only. Before either is enabled, the cookie assessment, consent, and privacy policy must be reviewed and updated. Google Sheets and Apps Script are not part of the current data flow.

International transfers

Cloudflare and Resend may process or transfer relevant data outside China. Applicable safeguards include encryption in transit, access controls, data minimization, applicable data protection terms, and necessary contractual and organizational measures. This page does not invent signed agreements, certifications, or specific legal conclusions.

Retention and deletion

  • Spam, sales pitches, or invalid inquiries: 90 days.
  • Valid inquiries that do not become customers: 24 months from the last substantive communication.
  • Customers: a separate retention schedule for contract, finance, and legal obligations.

Deletion at the end of a period should cover Resend email copies, the Cloudflare D1 inquiry ledger (approved), and every other controllable copy.

Your rights

You may request access, correction, deletion, or restriction of personal information, object where applicable, and withdraw consent-based processing. Send a request to the email below. We will verify the requester and apply the law relevant to the request. CCPA applicability depends on statutory thresholds; this policy offers transparency without claiming that the company is necessarily subject to it.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

Privacy request email:xboxgamepasseueb@gmail.com

Policy changes

We will update this page when the data flow, processors, or purposes change. Google services, advertising pixels, chat plugins, embedded video, or other device-data processing must not be enabled until the relevant policy and consent are updated.

Last updated: August 19, 2026