Privacy Policy

1. Information We Collect

We collect information that you voluntarily provide when using our website, primarily through our contact form and WhatsApp integration.

1.1 Contact Form Data

When you submit a quote request or inquiry via our contact form, we collect:

• Full Name — required for personalized communication
• Email Address — for sending quotations and project updates
• Phone / WhatsApp Number — for direct communication
• Company Name — for B2B client identification
• Project Description — technical requirements, dimensions, quantity
• Delivery Country — for shipping and compliance purposes

1.2 WhatsApp Data

When you contact us via WhatsApp (through the floating chat button), we may receive:

• Your WhatsApp phone number
• Message content and timestamps
• Media files (images, drawings, documents) you share

1.3 Automatically Collected Data

We collect anonymized technical data through cookies and analytics tools:

• IP address (anonymized)
• Browser type and version
• Pages visited and time spent on site
• Referrer URL (how you found our website)
• Device type (desktop/mobile/tablet)

2. How We Use Your Information

We use your data strictly for legitimate business purposes:

We never sell, rent, or share your personal data with third parties for marketing purposes.

3. Cookies & Tracking Technologies

Our website uses the following types of cookies:

You can manage or disable cookies through your browser settings. Note that disabling essential cookies may affect website functionality.

4. Data Storage & Security

We implement industry-standard security measures to protect your data:

• Encryption in Transit: All data transmitted between your browser and our servers is protected using TLS 1.3 (HTTPS) encryption.
• Secure Storage: Contact form data is processed through FormSubmit.co and stored in our encrypted business email system (Google Workspace Enterprise).
• Access Control: Personal data is accessible only to authorized staff members (General Manager, Sales Director, and Project Engineers) who are bound by confidentiality agreements.
• Physical Security: Our offices have controlled access and surveillance systems.

5. Third-Party Services

We use the following third-party services to operate our website and process inquiries:

6. International Data Transfer

Laotie Steel Structure is headquartered in China. Our data processing infrastructure spans multiple countries:

• Contact form data is processed by FormSubmit.co (US-based) and forwarded to our Google Workspace account.
• WhatsApp messages are processed by Meta Platforms, Inc. (US-based).
• Website analytics data is processed by Google LLC (US-based).

These transfers are safeguarded by the EU Standard Contractual Clauses (SCCs) and equivalent legal mechanisms to ensure adequate data protection.

7. Your Rights (GDPR / CCPA / PIPL)

Depending on your location, you have the following rights regarding your personal data:

7.1 GDPR Rights (EU/EEA)

• Right to Access: Request a copy of all personal data we hold about you.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing: Limit how we use your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to data processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw cookie consent at any time via the cookie banner.

7.2 CCPA Rights (California)

• Right to Know: Request disclosure of categories and specific pieces of personal information collected.
• Right to Delete: Request deletion of personal information.
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell data).
• Right to Non-Discrimination: You will not receive different pricing or service for exercising your rights.

7.3 PIPL Rights (China)

• Right to Access and Copy: Request access to your personal information.
• Right to Correction: Request correction of inaccurate personal information.
• Right to Deletion: Request deletion when processing violates law or agreement.

8. Data Retention

We retain your personal data only for as long as necessary:

• Active Clients: During the project lifecycle and for 5 years after project completion (for warranty and after-sales support).
• Prospective Clients: For 2 years after last contact, unless you request deletion earlier.
• Analytics Data: Anonymized Google Analytics data is retained for 14 months.
• Legal Requirements: We may retain data longer if required by tax, accounting, or export control laws.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. We will notify you of material changes by:

• Posting a notice on our website homepage
• Sending an email to active clients (if we have your email)
• Updating the "Last Updated" date at the top of this page

We encourage you to review this policy periodically.