Introduction
FRP Floor Co., Ltd. ("we", "our", "us", or "Company") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at frpfloor.com (the "Site"). It also explains your rights under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
Please read this policy carefully. If you do not agree with our practices, please do not use our Site.
1. Information We Collect
1.1 Personal Data You Provide
We may collect the following categories of personal data when you fill out forms, contact us, request quotes, or otherwise interact with our Site:
- Identity Data: Full name, job title, company name.
- Contact Data: Email address, phone number, postal address.
- Communication Data: Messages, inquiries, and other content you send to us.
- Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system and platform.
- Usage Data: Information about how you use our Site, products, and services.
1.2 Automatically Collected Data
When you access our Site, we automatically collect certain technical information through cookies and similar tracking technologies. This includes your IP address, browsing behavior, referring URLs, and device information. See Section 6 (Cookies) for more details.
2. How We Use Your Information
We use your personal data for the following legitimate business purposes:
- To respond to your inquiries and provide requested quotations.
- To process and fulfill orders for our FRP pultruded grating products.
- To send administrative information, including changes to our terms or policies.
- To improve our Site, products, and customer experience.
- To comply with legal obligations and protect our legal rights.
- To send marketing communications (only with your explicit consent, where required by law).
We will not use your personal data for purposes incompatible with those listed above without prior notice.
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), our legal basis for processing your personal data is as follows:
- Consent: Where you have given clear consent for us to process your data for a specific purpose.
- Contractual Necessity: Where processing is necessary to fulfill a contract with you (e.g., processing a product order).
- Legitimate Interests: Where processing is necessary for our legitimate business interests, such as improving our services, provided your rights do not override those interests.
- Legal Obligation: Where we need to comply with a legal or regulatory obligation.
4. Data Storage and Retention
We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including for legal, accounting, or reporting requirements. By default:
- Inquiry and contact data: Retained for 3 years after the last interaction.
- Order and transaction data: Retained for 7 years as required by tax and accounting laws.
- Marketing consent records: Retained until you withdraw consent.
- Technical/usage data: Retained for 12 months.
Your data is stored on secure servers located in multiple jurisdictions, including China and the United States. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.
5. Data Sharing and Disclosure
We do not sell your personal data. We may share your information in the following circumstances:
- Service Providers: With third-party vendors who help us operate our Site, process payments, deliver shipments, or provide analytics (e.g., shipping carriers, CRM platforms).
- Legal Requirements: If required by law, regulation, or legal process (e.g., court order, government request).
- Business Transfers: In connection with a merger, acquisition, or sale of assets, we may transfer your data to the acquiring entity.
- With Your Consent: We may share your data for any other purpose with your explicit consent.
All third parties are contractually bound to process your data in accordance with this Privacy Policy and applicable data protection laws.
6. Cookie Policy
6.1 What Are Cookies
Cookies are small text files stored on your device by your web browser. They help us remember your preferences, analyze Site traffic, and improve your browsing experience.
6.2 Types of Cookies We Use
- Essential Cookies: Required for the Site to function properly (e.g., session management, security). No consent is required for these cookies.
- Analytics Cookies: We use Google Analytics to collect anonymous information about how visitors use our Site. This helps us improve our content and functionality.
- Functional Cookies: These remember your preferences (e.g., language, region) to provide a personalized experience.
- Marketing Cookies: Used to deliver relevant advertisements and measure campaign effectiveness. Only placed with your explicit consent.
6.3 Managing Cookies
You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling essential cookies may affect the functionality of our Site. You can also opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
For EEA users, we display a cookie consent banner on your first visit, allowing you to select your cookie preferences.
7. Your Rights Under GDPR
If you are a resident of the EEA, you have the following rights under the GDPR:
- Right of Access: You may request a copy of the personal data we hold about you.
- Right to Rectification: You may request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where there is no compelling reason for its continued processing.
- Right to Restrict Processing: You may request that we restrict the processing of your data in certain circumstances.
- Right to Data Portability: You may request a structured, commonly used, machine-readable copy of your data.
- Right to Object: You may object to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.
To exercise any of these rights, please contact us at sales@frpfloor.com. We will respond within 30 days.
8. Your Rights Under CCPA
If you are a resident of California, USA, you have the following rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You may request disclosure of the categories and specific pieces of personal data we have collected about you over the past 12 months.
- Right to Delete: You may request deletion of personal data we have collected from you, subject to certain exceptions.
- Right to Opt-Out: We do not sell your personal data. However, you have the right to opt out of any future sale should our practices change.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
To exercise your CCPA rights, please contact us at sales@frpfloor.com or call +86 21 6789 1234. We will verify your identity before processing your request.
9. International Data Transfers
Your personal data may be transferred to and processed in countries outside your country of residence, including China. When transferring data from the EEA to countries not deemed adequate by the European Commission, we implement Standard Contractual Clauses (SCCs) or other appropriate safeguards to ensure your data receives adequate protection.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for all data transmitted via our Site.
- Firewalls and intrusion detection systems.
- Access controls limiting data access to authorized personnel only.
- Regular security audits and vulnerability assessments.
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
11. Third-Party Links
Our Site may contain links to third-party websites (e.g., social media platforms, industry partners). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal data.
12. Children's Privacy
Our Site is not intended for children under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete it promptly.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be notified via email or a prominent notice on our Site.
14. Contact Information
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: sales@frpfloor.com
- Phone: +86 21 6789 1234
- Address: No. 188, Jinji Road, Songjiang District, Shanghai, China
- Company: FRP Floor Co., Ltd.
GDPR Representative: For EEA data subjects, you may also contact our GDPR representative at gdpr@frpfloor.com.
Supervisory Authority: You have the right to lodge a complaint with your local data protection authority if you believe our processing violates applicable law.