Privacy and data protection concept with a signed document and pen
Last Updated: January 15, 2025

Privacy Policy

Your privacy is critically important to us. This policy explains what information we collect, how we use it, and the choices you have.

GDPR Compliant CCPA Ready ISO 27001 Aligned
1

Information We Collect

Categories of data collected through our website and business interactions

Business documents, calculator and laptop representing data collection

Information You Provide Directly

  • Contact details: name, business email address, phone number, and company name when you submit an inquiry or RFQ.
  • Business information: product specifications, order details, shipping addresses, and any custom requirements you share with us.
  • Communication data: records of your correspondence with our team, including emails, chat messages, and meeting notes.
Analytics dashboard with data charts and graphs

Information Collected Automatically

  • Device & browser data: IP address, browser type, operating system, screen resolution, and language preferences.
  • Usage data: pages visited, time spent on the site, click paths, download interactions, and referring URLs.
  • Cookie data: information stored via cookies and similar tracking technologies as described in our Cookie Policy below.

Important: We do not collect sensitive personal data such as racial origin, political opinions, religious beliefs, health information, or biometric data unless required by law or explicitly provided by you.

2

How We Use Your Information

The lawful bases and business purposes for processing your data

Respond to Inquiries

To answer your questions, provide quotations, share product catalogs, and communicate about your business needs.

Process Orders & Deliveries

To manage purchase orders, arrange production, coordinate shipping, and fulfill contractual obligations.

Improve Our Website

To analyze usage patterns, optimize user experience, and develop new features and content that matter to you.

Send Marketing Communications

With your consent, we may send you newsletters, new product announcements, and industry insights. You can opt out at any time.

Legal Compliance & Security

To comply with applicable laws and regulations, prevent fraud, protect our rights, and ensure the security of our systems.

Legal Basis for Processing (GDPR)

Art. 6(1)(a)

Consent: Marketing communications and optional cookie usage.

Art. 6(1)(b)

Contract: Fulfilling orders and providing requested services.

Art. 6(1)(f)

Legitimate Interests: Website analytics, security, and business development.

Art. 6(1)(c)

Legal Obligation: Tax, accounting, and regulatory reporting requirements.

4

Data Security Measures

Technical and organizational safeguards to protect your data

Cybersecurity concept with a shield and digital lock

Encryption in Transit & At Rest

All data transmitted via TLS 1.3 encryption. Stored data is encrypted using AES-256 standards.

Access Control & Authentication

Role-based access control, multi-factor authentication, and strict internal data access policies.

Regular Security Audits

Continuous vulnerability scanning, penetration testing, and compliance reviews by independent auditors.

Retention Periods

Inquiry and quotation records 24 months
Order and contract documentation 7 years (tax/legal)
Email and communication logs 36 months
Website analytics data (aggregated) 26 months
5

Data Sharing & Disclosure

When and with whom we share your information

We do not sell, rent, or trade your personal information to third parties. We only share data with trusted service providers who assist us in operating our business, under strict contractual obligations.

Logistics Partners

Shipping carriers and freight forwarders require delivery addresses and contact details to fulfill orders.

Analytics Providers

Aggregated, anonymized usage data shared with tools like Google Analytics to understand site performance.

Legal & Regulatory Authorities

When required by law, court order, or government regulation, we may disclose information to comply.

Third-Party Processors We Work With

Google Analytics Microsoft 365 (Email) Salesforce (CRM) DHL / FedEx / UPS Alibaba Cloud (Hosting) Stripe (Payments)
6

Your Rights & Choices

Control over your personal data under GDPR, CCPA, and other regulations

Person signing a legal document representing user rights
1

Right to Access

Request a copy of the personal data we hold about you.

2

Right to Rectification

Correct inaccurate or incomplete personal information.

3

Right to Erasure

Request deletion of your personal data, subject to legal obligations.

4

Right to Restrict Processing

Limit how we process your data in certain circumstances.

5

Right to Data Portability

Receive your data in a structured, machine-readable format.

6

Right to Object

Object to processing based on legitimate interests or direct marketing.

How to Exercise Your Rights

To exercise any of the rights above, please contact our Data Protection Officer using the details in the Contact section. We will respond within 30 days. For CCPA residents, we will not discriminate against you for exercising your privacy rights.

7

International Data Transfers

How your data is handled when transferred across borders

Our headquarters is located in China, and we serve clients globally. When personal data is transferred outside your country of residence, we ensure appropriate safeguards are in place.

Standard Contractual Clauses (SCCs)

For transfers from the EU/EEA, we rely on European Commission-approved SCCs to ensure adequate protection.

Adequacy Decisions

Where the European Commission recognizes a country as providing adequate data protection, transfers proceed accordingly.

Note: By submitting your information to us, you acknowledge that your data may be transferred to and processed in countries outside your jurisdiction, including China and the United States.

8

Children's Privacy

Our commitment to protecting minors' data

Child playing with toys representing protection of children's data

Our website and services are designed for business-to-business (B2B) use and are not directed at children under the age of 16 (or the minimum age in the applicable jurisdiction).

We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately, and we will take steps to delete such information promptly.

COPPA & GDPR-K Compliance

We comply with the Children's Online Privacy Protection Act (COPPA) in the US and GDPR-K provisions in the EU. Parental consent mechanisms are not applicable as we do not target minors.

9

Policy Updates

How we communicate changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will:

  • Post the revised policy on this page with an updated "Last Updated" date.
  • Notify active business partners via email with a summary of significant changes.
  • Seek renewed consent where required by applicable law.

Version History

Track changes to this document

v2.1 -- Jan 15, 2025
10

Contact Us

Questions or privacy requests -- we're here to help

Business team collaborating in an office meeting

Data Protection Officer

For all privacy-related inquiries and data subject requests:

privacy@apexkitchen.com

Mailing Address

Apex Kitchen Tools Industrial Co., Ltd.
No. 88, Innovation Road, Binhai Industrial Zone
Ningbo, Zhejiang Province 315800, China

Phone & Hours

+86 574 8888 6666
Monday - Friday: 9:00 AM - 6:00 PM (CST)

Privacy Compliance: GDPR CCPA PIPL COPPA
© 2025 Apex Kitchen Tools Industrial Co., Ltd. All rights reserved.