This page is a working template based on the confirmed data flow. It has not received final legal or privacy sign-off.
Data controller
- Legal name
- 广州华厦生物制药有限公司
- Registered region
- 中国广东广州
- Address
- 中国广东省广州市白云区钟落潭镇金盆村政农路6号B幢厂区一、二楼
- Contact and privacy email
- xboxgamepasseueb@gmail.com
We are not creating a domain email address at this time. The Gmail address above is the current contact channel.
Information we process
An inquiry may include a name or contact details, company, work email, category interest, and project note. The source page, UTM parameters, and a submission_id are persisted with the inquiry in the Cloudflare D1 inquiry ledger (approved 2026-08-03) for response, attribution, and duplicate prevention. IP addresses are not persisted as inquiry business fields, although Cloudflare, including Turnstile, may temporarily process IP and request metadata for network delivery, security, and spam prevention.
Purposes and legal bases
Inquiry data is used to receive, assess, and answer a business request initiated by the visitor and to protect the service. Depending on the context, the basis may include steps taken at the visitor’s request before a contract, applicable obligations, and legitimate interests in secure website and business communications. Processing that requires consent will request it separately. Answering an inquiry is not a marketing subscription; future marketing requires a separate, optional choice.
Analytics choice
Cloudflare Web Analytics is off by default on a first visit. Its cookieless Beacon is loaded manually only after you choose “Allow analytics.” The choice is stored in the first-party localStorage key huaxia.analytics-consent.v1, whose only valid values are granted and denied. This key remembers the choice only; it is not used for profiling or to store other behavioral data. Use the footer’s “Privacy settings” button to change it, or clear this site’s storage in your browser.
Withdrawal removes the current Beacon and reloads the page to prevent future analytics reports. It cannot retrieve data already sent. Visits that decline analytics do not appear in Cloudflare referrer reporting, so aggregate metrics have a known coverage gap.
Current processors
The currently approved website processor set is limited to Cloudflare (hosting, Turnstile spam prevention, consent-gated Web Analytics, and D1 inquiry ledger storage) and Resend (internal inquiry notification email). Inquiry data is persisted in the Cloudflare D1 inquiry ledger; D1 belongs to Cloudflare, so no additional third-party processor is introduced (approved 2026-08-03).
Google is not currently enabled and is not a current processor. Google Search Console and Google Ads are future plans only. Before either is enabled, the cookie assessment, consent, and privacy policy must be reviewed and updated. Google Sheets and Apps Script are not part of the current data flow.
International transfers
Cloudflare and Resend may process or transfer relevant data outside China. Applicable safeguards include encryption in transit, access controls, data minimization, applicable data protection terms, and necessary contractual and organizational measures. This page does not invent signed agreements, certifications, or specific legal conclusions.
Retention and deletion
- Spam, sales pitches, or invalid inquiries: 90 days.
- Valid inquiries that do not become customers: 24 months from the last substantive communication.
- Customers: a separate retention schedule for contract, finance, and legal obligations.
Deletion at the end of a period should cover Resend email copies, the Cloudflare D1 inquiry ledger (approved), and every other controllable copy.
Your rights
You may request access, correction, deletion, or restriction of personal information, object where applicable, and withdraw consent-based processing. Send a request to the email below. We will verify the requester and apply the law relevant to the request. CCPA applicability depends on statutory thresholds; this policy offers transparency without claiming that the company is necessarily subject to it.
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.
Privacy request email:xboxgamepasseueb@gmail.com
Policy changes
We will update this page when the data flow, processors, or purposes change. Google services, advertising pixels, chat plugins, embedded video, or other device-data processing must not be enabled until the relevant policy and consent are updated.
Last updated: August 19, 2026