DafluidDafluid
Legal · Privacy

Privacy Policy

Last updated: 2026-08-01

1. Introduction

Dafluid Industrial Co., Ltd.(“we”, “us”, “our”) operates the website dafluid.com(the “Service”). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service.

2. Data Controller

The data controller for the processing of your personal data is:
Dafluid Industrial Co., Ltd.
Industrial Park, North District, Ningbo, Zhejiang 315800, P.R. China
Email: contact@dafluid.com

3. Information We Collect

We collect the following types of information:

  • Inquiry form data (required): your name, work email, country, and message content you voluntarily provide when submitting an inquiry. Country is required for export compliance screening and sales-team routing.
  • Inquiry form data (optional): company name and WhatsApp or phone number, only if you choose to provide them.
  • Account data: email, name, and hashed password when an administrator account is created for the content management portal.
  • Usage data: IP address, browser type, referrer URL, UTM campaign parameters, and pages visited (for analytics, sales attribution, and security purposes).
  • Cookies: essential session cookies required for the Service to function, and — with your explicit consent — analytics cookies set by Google Analytics 4.

4. How We Use Your Information

We use the collected data for the following purposes:

  • To respond to your inquiries and provide requested quotes within 24 business hours.
  • To route inquiries to the appropriate regional sales representative based on your country.
  • To process and fulfill orders, including shipping, customs documentation, and invoicing.
  • To perform export-control screening against applicable sanctions lists (UN, EU, OFAC) before any cross-border transaction.
  • To maintain and improve our Service, products, and customer experience.
  • To send you technical updates, product information, and marketing communications (with your consent where required by law).
  • To comply with legal obligations and enforce our terms.

5. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), our legal basis for collecting and using your personal data depends on the context:

  • Performance of a contract: when you request a quote, place an order, or negotiate supply terms.
  • Consent: for marketing communications and non-essential cookies (analytics).
  • Legitimate interests: to operate, secure, and improve our Service; to prevent fraud; to maintain business records.
  • Legal obligation: to comply with applicable export-control, customs, accounting, and tax laws.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Our specific retention periods are:

  • Inquiry submissions (name, email, country, company, phone, message): 24 months from the date of submission. After this period, the record is archived and PII is anonymized unless a quote, sample, or order is in progress.
  • Customer order records (PO, invoice, shipping documents): 7 years from the order date, in accordance with Chinese accounting and tax law (Accounting Law of the PRC) and EU VAT record-keeping requirements.
  • Administrator account data: retained while the account is active, plus 12 months after account deletion for audit and recovery purposes.
  • Security audit logs (login attempts, IP, user agent): 12 months from the event date.
  • Marketing consent records: retained until you withdraw consent or for 24 months after the last interaction, whichever comes first.
  • Analytics data (Google Analytics 4): retained for the default GA4 period of 14 months, after which it is automatically aggregated and anonymized.

7. Your Rights (GDPR)

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your personal data (subject to the legal retention requirements in Section 6).
  • Object to or restrict the processing of your data.
  • Request data portability in a machine-readable format.
  • Withdraw consent at any time (where processing is based on consent).
  • Lodge a complaint with your local data protection authority.

To exercise these rights, contact us at contact@dafluid.com. We respond within 30 days.

8. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the People's Republic of China (where our servers and operations are located). When transferring data out of the EEA, we implement appropriate safeguards, including:

  • Standard Contractual Clauses (SCC) approved by the European Commission.
  • Technical measures: TLS 1.3 encryption in transit, AES-256 encryption at rest.
  • Organizational measures: access controls, employee training, periodic security reviews.

9. Data Security

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (HTTPS / TLS 1.3), access controls based on the principle of least privilege, hashed password storage (bcrypt, cost factor 12), and regular security reviews. However, no method of transmission over the Internet is 100% secure.

10. Third-Party Services

We use the following third-party service providers that may process your data:

  • Hostinger — website hosting and database infrastructure (EU-based servers).
  • Hostinger SMTP — transactional email delivery (inquiry notifications, order confirmations).
  • Google Analytics 4 — website analytics, loaded only with your explicit consent via the cookie banner.
  • OpenStreetMap — embedded map tiles on the contact page, subject to the Open Data Commons Open Database License (ODbL).

These providers have access to your data only to perform specific tasks on our behalf and are obligated to protect it under data-processing agreements.

11. Cookie Policy

We use a minimal set of cookies, presented to you via a consent banner on your first visit. You can change your choice at any time by clearing your browser's site data for dafluid.com:

  • Strictly necessary cookies (always on): session cookies that enable the contact form, admin login, and language preference. These cannot be disabled as the Service would not function.
  • Analytics cookies (optional, require consent): Google Analytics 4 cookies (_ga, _ga_*) used to measure aggregate website traffic and improve the Service. No personally identifiable information is collected; IP addresses are anonymized.

We do not use advertising cookies, third-party tracking pixels, or social media tracking cookies.

12. Export Control and Sanctions Compliance

As a B2B supplier of industrial components, we are subject to export-control and sanctions laws in multiple jurisdictions. By using the Service and submitting an inquiry, you acknowledge and agree that:

  • We may screen your name, company, and country against applicable sanctions lists (UN, EU, OFAC, UK OFSI, Chinese MOFCOM) before responding to your inquiry or accepting an order.
  • Certain destinations, end uses, and end users are restricted or prohibited under U.S. Export Administration Regulations (EAR), EU Dual-Use Regulation 2021/821, and the Chinese Export Control Law (2020). We reserve the right to decline any transaction that would violate these regulations.
  • Information submitted via the Service may be retained for compliance and audit purposes even after the standard retention period described in Section 6.

13. Children's Privacy

Our Service is intended for business users and is not directed to anyone under the age of 16. We do not knowingly collect personal data from children.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by posting a notice on the Service homepage and updating the “Last updated” date. For significant changes affecting your rights, we will provide at least 30 days' prior notice via email where we have your contact information.

15. Contact

For any questions about this Privacy Policy, to exercise your data-protection rights, or to lodge a complaint, please contact:
Dafluid Industrial Co., Ltd.
Data Protection Contact: contact@dafluid.com
Industrial Park, North District, Ningbo, Zhejiang 315800, P.R. China

For EEA residents, you also have the right to lodge a complaint with your local data protection authority. A list of national authorities is available on the European Data Protection Board website.