Privacy Policy

Company: Foshan Winsen Building Materials Co., Ltd. (“Winsen”, “we”, “us”, or “our”)

Headquarters: 1306A, 13th Floor Weiye International Building, No.75 Lingnan Road, Dali Town, Nanhai District, Foshan, Guangdong, China.

1. Introduction and Scope

Foshan Winsen Building Materials Co., Ltd. is committed to protecting the privacy of our clients, distributors, website visitors, and business partners. As a premier global manufacturer of aluminum tile trims, stainless steel trims, PVC trims, skirting boards, and LED profiles, we engage with a sophisticated business-to-business (B2B) client base.

This Privacy Policy explains how we collect, use, disclose, and safeguard Personal Information and proprietary Intellectual Property (including CAD drawings and OEM specifications) when you visit our website (https://winsen-tiletrim.com/) or engage with our commercial manufacturing services. This policy is designed to comply with applicable global data protection regulations, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the EU General Data Protection Regulation (GDPR), and the Personal Information Protection Law of the People’s Republic of China (PIPL).

2. Information We Collect

We collect information that identifies, relates to, or could reasonably be linked to a particular business contact or consumer. We adhere to the principle of data minimization, collecting only the information necessary to fulfill our commercial obligations and evaluate manufacturing feasibility.

Category of Information	Specific Data Elements Collected	Source of Collection
Contact and Identity Data	Full name, business email address, mobile/phone number, company name, and job title.	Provided directly by users via “Get a Fast Quote” forms, “Contact Us” submissions, and direct email communications.
Commercial and Project Data	Product interests (e.g., Aluminum Cabinet Frames, Tile Leveling Systems), expected order volumes, project specifications, and shipping destinations.	Provided directly by users during the Request for Quotation (RFQ) process.
Proprietary Technical Data	2D/3D CAD models, engineering drawings, material specifications, Bills of Materials (BOMs), and branding/packaging assets.	Uploaded or emailed directly by OEM/ODM clients for manufacturing review.
Technical and Network Data	Internet Protocol (IP) address, browser type, operating system, and geographic location (city/country level).	Collected automatically via server logs and website tracking technologies during browsing sessions.
Usage and Interaction Data	Session metrics, page navigation paths (e.g., interaction with “Arc-shaped Trim” pages), and engagement with FAQ resources.	Collected automatically via analytics cookies and web beacons.

3. Purpose and Legal Basis for Processing

We process your Personal Information and Technical Data for specific, legitimate business purposes. For individuals located in the European Economic Area (EEA) or the United Kingdom (UK), our legal bases for processing under the GDPR are explicitly defined below:

Quotation and Contract Fulfillment: We utilize your contact data and project specifications to evaluate RFQs, perform Design for Manufacturability (DFM) reviews on submitted drawings, generate accurate pricing, and execute manufacturing contracts. The legal basis for this processing is the performance of a contract to which you are a party, or taking steps at your request prior to entering into a contract.

Customer Support and Communication: We process your information to respond to inquiries regarding batch color consistency, surface protection, dimensional control, and global shipping logistics. The legal basis for this processing is our legitimate business interest in providing responsive customer service and technical support.

Marketing and Industry Updates: We utilize your email address to distribute newsletters, updates regarding our participation in international trade fairs (such as the Canton Fair or BIG5 exhibitions), and new product announcements. The legal basis for this processing is your explicit consent (where required by law) or our legitimate interest in conducting direct B2B marketing with existing clients, provided such interests are not overridden by your fundamental rights.

Regulatory and Legal Compliance: We process necessary operational data to maintain precise accounting records, ensure export compliance, investigate potential fraud, and enforce our Terms of Service. The legal basis for this processing is compliance with our legal and regulatory obligations.

4. Original Equipment Manufacturer (OEM) Confidentiality and IP Protection

In the specialized manufacturing sector, safeguarding your intellectual property is as critical as protecting personal data. Winsen provides comprehensive OEM and ODM services based entirely on client-supplied drawings and samples. We enforce strict industrial confidentiality protocols for all technical files submitted to our engineering teams.

Access to CAD files, engineering drawings, and branding assets is strictly controlled and limited exclusively to authorized personnel directly involved in quotation, engineering review, tooling development, and production planning. Winsen explicitly guarantees that customer-supplied technical files, exclusive non-public designs, and proprietary tooling molds will not be sold, published, benchmarked, or displayed publicly (including as website case studies) without explicit written authorization from the client.

Furthermore, proprietary project documents, 3D models, and technical specifications are never utilized for generalized Artificial Intelligence (AI) training, algorithmic benchmarking, or unrelated internal product development. We actively support the execution of formal Non-Disclosure Agreements (NDAs) prior to the transmission of highly sensitive product designs. Once an NDA is executed, its specific contractual terms supersede any conflicting general clauses within this Privacy Policy.

5. Data Sharing and Third-Party Disclosures

Winsen does not sell your Personal Information to data brokers or third-party marketers for monetary consideration. We only disclose information to trusted third parties under strict confidentiality and data protection obligations, and only when absolutely necessary to fulfill our manufacturing, logistical, and legal obligations.

Category of Third Party	Purpose of Data Disclosure	Data Elements Shared	Security and Control Boundary
Logistics and Freight Forwarders	To facilitate the global shipping and delivery of reinforced cartons and packaged profiles.	Name, delivery address, phone number, and commercial invoice details.	Restricted to shipment-related information only. CAD files and engineering specs are never shared with logistics providers.
Sub-Tier Manufacturing Partners	To support required secondary operations (e.g., specialized surface finishing) related to a submitted project.	Material type, finish requirements, and part quantities.	Shared under strict non-disclosure obligations. Personally identifiable information and full commercial backgrounds are scrubbed prior to sharing.
IT and Cloud Service Providers	To host our website, manage CRM databases, and facilitate secure email communications.	Encrypted storage of contact and project data.	Governed by Data Processing Agreements (DPAs) ensuring vendors uphold equivalent privacy protections.
Legal and Regulatory Authorities	To comply with subpoenas, court orders, or lawful requests by public authorities.	As legally mandated.	Disclosure is strictly limited to the scope of the lawful request, including customs and export control compliance.

6. International Data Transfers

As a manufacturer headquartered in Foshan, China, with a global client base spanning the Middle East, the Americas, Europe, and Southeast Asia, the data we collect may be transferred to, stored, and processed in China or other jurisdictions where our service providers operate. We ensure that all cross-border data transfers comply with applicable legal frameworks.

For transfers of personal data originating from the European Economic Area (EEA) to China, we implement appropriate safeguards, including the execution of the European Commission’s Standard Contractual Clauses (SCCs), to ensure your data receives adequate protection comparable to EU standards. When transferring data subject to China’s Personal Information Protection Law (PIPL) to overseas entities, Winsen complies with the security assessment requirements and standard contractual clause frameworks mandated by the Cyberspace Administration of China (CAC).

7. Data Retention and Security Protocols

Winsen implements robust physical, technical, and administrative security measures to protect your data against unauthorized access, accidental loss, destruction, or alteration. Our digital infrastructure utilizes industry-standard encryption for data in transit (SSL/TLS). Physical access to our 46,000-square-meter production facility, server infrastructure, and engineering departments is strictly controlled and monitored.

We retain B2B contact information and project files only for as long as reasonably necessary to fulfill the purposes outlined in this policy. Standard commercial inquiries and RFQs that do not result in a formalized contract are purged according to our internal data lifecycle schedule. For completed manufacturing orders, essential data is retained to uphold our product quality guarantees, process post-sales support, resolve disputes, and comply with binding tax and legal archiving requirements.

8. Your Global Privacy Rights

Depending on your geographic location, you possess specific statutory rights regarding your personal information. Winsen provides mechanisms to exercise these rights to all our clients to ensure global operational transparency.

California Privacy Rights (CCPA/CPRA): Effective January 1, 2023, the California Privacy Rights Act removed the exemption for B2B data. If you are a California resident acting in a commercial capacity, you possess the right to request disclosure of the specific pieces and categories of personal information we have collected about you, the sources of that data, and the business purpose for its collection. You possess the right to request the deletion of your personal information, subject to certain legal exceptions, and the right to correct inaccurate data. While Winsen does not sell personal information for monetary value, you possess the right to opt-out of the sharing of your personal information for cross-context behavioral advertising. Winsen will not discriminate against you for exercising any of these CCPA rights.

European Privacy Rights (GDPR): If you reside within the EEA or the UK, you possess the right to access, rectify, or request the erasure of your personal data. You may restrict or object to the processing of your data, particularly in instances regarding direct marketing. You possess the right to request data portability, allowing you to receive your data in a structured, machine-readable format. Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal. Furthermore, you retain the right to lodge a formal complaint with a supervisory data protection authority in your jurisdiction.

Exercising Your Rights: To exercise any of the statutory rights listed above, or to submit a formal Data Subject Access Request (DSAR), please contact our compliance team via email at winsen@wincheng.net or by telephone at +86-180 3881 5217. We aim to acknowledge and review legitimate privacy requests within the legally mandated timeframes (e.g., 30 days under GDPR, 45 days under CCPA). We will require verification of your identity prior to processing your request to protect your data from unauthorized access.

9. Cookie Policy and Tracking Mechanisms

Our website utilizes cookies and similar tracking technologies to function efficiently and to generate analytical insights regarding user engagement. We deploy essential cookies that are required for basic website functionality, security, and remembering language preferences. We also utilize analytical cookies to understand how visitors navigate our site, which assists us in optimizing our user interface and product categorizations.

Upon your initial visit to our website, you will be presented with a cookie consent mechanism. You may configure your browser settings to refuse cookies or to alert you when cookies are being transmitted. Please note that disabling essential cookies may impact the availability of certain website features and navigation.

10. Children’s Privacy

Our website and commercial manufacturing services are designed and intended strictly for adult professionals operating within the B2B commercial sector. We do not knowingly collect, solicit, or process personal information from individuals under the age of 16. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate and appropriate steps to delete such information from our digital systems.

11. Policy Modifications

Winsen reserves the right to update or modify this Privacy Policy periodically to reflect changes in our manufacturing practices, technological advancements, or amendments in international data protection jurisprudence. The most current version of the policy will always be posted on this page, with the “Effective Date” updated accordingly. We encourage all clients and visitors to review this policy whenever interacting with our digital platforms to remain informed about our information handling practices.