Privacy Notice.

1. Who we are

The organisation deciding how and why information is used is the data controller.

Controller: [FULL LEGAL COMPANY NAME]
Registered address: [REGISTERED ADDRESS]
Privacy email: [PRIVACY EMAIL]
UK representative, if required: [NAME AND CONTACT]

2. Information we collect

• company name, registration, VAT, website and address information;
• contact name, business email and WhatsApp telephone number;
• sales channels, intended level, demand forecasts, launch timing, products and regions of interest;
• application, verification, correspondence and review records;
• for approved partners: account identity, orders, delivery, fulfilment, messages, claims, deposit and ledger records;
• IP address, device and security logs where recorded by hosting or security providers.

Do not submit special-category information, payment-card details or information that is not needed for the service.

3. Why we use it

• Applications: to save an initial enquiry, verify the business, assess programme fit and communicate a decision. Our bases are requested pre-contract steps and legitimate interests.
• Accounts and fulfilment: to manage access, prices, stock, orders, dispatch, claims and records under the business contract and our legitimate interests.
• Legal, safety and security: for accounting, traceability, fraud prevention, system protection and regulatory cooperation, based on legal obligations and legitimate interests.
• Communications: to send necessary application, order, deposit, service and security notices. Marketing is sent only where permitted and includes an opt-out.

Authorised personnel review applications. We do not intend to make legally significant decisions using solely automated processing.

4. Sharing and international access

Where necessary, information may be shared with contracted hosting and IT providers, UK warehouse and fulfilment operators, carriers, payment or banking providers, professional advisers, verification and fraud-prevention providers, insurers, regulators and law enforcement.

Manufacturing and operational teams in China may need authorised access to applicant or partner information. Before launch, the controller will confirm the transfer route, complete any required transfer-risk assessment and put an appropriate UK transfer mechanism in place. The safeguard and how to obtain a copy will then be stated here.

5. Retention and security

Our intended retention schedule is: incomplete enquiries for up to 90 days; unsuccessful or withdrawn applications normally for 12 months; active account, contract, order and ledger records for the relationship and normally seven years afterwards; and safety, warranty and traceability records for their legally required or relevant lifecycle. A dispute, investigation or legal hold may extend a period.

We restrict access by role and use organisational and technical security measures. No online service is completely secure, and production launch remains subject to completion of the portal security programme.

6. Your rights and contact

Depending on the circumstances, you may have rights to access, correct, erase, restrict, object to or receive certain information in a portable form. You may withdraw consent where consent is used.

Your right to object: you may object to direct marketing at any time, and may object to processing based on legitimate interests.

Contact [PRIVACY EMAIL] to exercise a right or ask a question. You may also complain to the Information Commissioner's Office. We may update this notice and will show the new version date.