Privacy Policy

1. Data controller and contact

This website is presented under the HEXVARO brand and operated by 山西寰鼎盛工贸有限公司 (Shanxi Huandingsheng Industry and Trade Co., Ltd., the website's external-use English name), with registered address at Room 2402, 24th Floor, Building 8, Wanguocheng, No. 16 Changfeng West Street, Wanbailin District, Taiyuan, Shanxi, China. Privacy requests may be sent to [email protected]. The English name is not represented as an English name printed on the Chinese business license.

2. Information we collect

We may collect your name, business email, company, country, product category, product and standard details, size or specification, material or grade, surface finish, estimated quantity, inquiry details and consent record. The initial launch RFQ accepts text fields only; technical drawing uploads are disabled while content validation, malware handling and secure-transfer controls are reviewed. Hosting and security services may also process IP address, browser, device, bot-protection and request-log data needed to operate and protect the service.

3. RFQ use purposes

RFQ data is used to review and respond to an inquiry, clarify specifications, coordinate quotations, arrange samples, communicate with relevant independent manufacturing partners, and coordinate potential export logistics. Submitting an RFQ does not create a purchase order.

4. Legal bases

Depending on the applicable law, processing may be necessary to take requested steps before a contract, support legitimate B2B inquiry handling and service security, comply with legal obligations, or rely on consent where required. Consent for optional analytics is separate from the RFQ. The appropriate legal basis and any required notices for each market remain subject to the applicable law.

5. Service providers and sharing

Cloudflare Pages and Functions host and process the website request; Cloudflare Turnstile processes the bot-protection check; Resend may process the inquiry for email delivery when production email is enabled; and Google Gmail may store the delivered inquiry in the configured recipient mailbox. Inquiry details may be shared only as reasonably necessary with relevant professional advisers, logistics providers or independent manufacturing partners evaluating the request. Provider access and terms may vary by account and applicable service configuration.

Resend's published GDPR information states that it acts as a processor for customer data, stores customer data in the United States, and provides a public Article 28 DPA reference. HEXVARO does not represent that it has signed a separate negotiated agreement; the applicable account terms govern the service.

6. International transfers

Because we are based in China and serve international buyers, information may be transferred across borders. Resend's published materials describe United States processing and Standard Contractual Clause mechanisms for relevant transfers. Cloudflare describes processing limited end-user metadata in United States and European data centers. Applicable safeguards depend on the selected account configuration and applicable law.

7. Retention and deletion

For an ordinary RFQ that did not result in a transaction and for which substantive follow-up has ended, HEXVARO's stated policy is a maximum retention period of 12 months from the date of the last substantive business communication and closure of follow-up. This is not an automatic 12-month deletion promise across every provider. Quotes, samples and purchasing discussions that remain active are retained while needed to manage them. Completed orders, tax, accounting, legal, dispute, security and other records that must be kept under applicable obligations follow separate retention rules.

Resend's current published GDPR information describes 30-day email and log retention on Free, Pro and Scale plans, deletion of remaining customer data within 90 days after account termination, and seven-day backup persistence, subject to the applicable plan and terms. A specific message-removal request may require contacting Resend. Gmail mailbox retention and backups, and Cloudflare log settings, are not controlled by this website and no provider-specific deletion deadline is promised here.

8. Your privacy requests

Subject to applicable law, you may request access to, correction of, deletion of or restriction of personal information, object to certain processing, or withdraw consent without affecting earlier lawful processing. Email [email protected] with the request and enough context to locate it. We may request reasonable identity verification and may retain or refuse to delete information where necessary to protect another person's rights, comply with legal, tax or accounting obligations, preserve records for disputes or security, or apply another lawful exception.

Where the GDPR applies, HEXVARO will respond without undue delay and, in any event, within one month of receiving the request. That period may be extended by up to two further months where necessary because of the complexity or number of requests; HEXVARO will notify the requester of the extension and reasons within the first month. If HEXVARO does not take action, it will explain why within one month and identify the applicable complaint or judicial-remedy route. Other laws may provide different deadlines or procedures.

Where applicable, you may also lodge a complaint with the relevant data-protection supervisory authority. Lawful exceptions, including legal, tax, accounting, dispute, security and rights-of-others exceptions, may limit or delay access, correction or deletion.

9. Cookies and analytics

At initial launch, Google Analytics and other non-essential analytics are not enabled and no non-essential analytics script is loaded. The site may use essential browser storage for operational functions such as remembering an analytics choice if optional analytics is later enabled. Analytics events must not include contact details, RFQ text or uploaded content. See the Cookie Policy.

10. Privacy inquiries and updates

Contact [email protected] about privacy or this policy. Material updates will be reflected on this page with a revised publication date.