Privacy Policy

1. Introduction & Scope

This Privacy Policy applies to all visitors and users of the Anhui Nanbo Intelligent Environmental Equipment Co., Ltd website (the "Site"). It explains how we, as the data controller, collect, use, and protect your personal data.

This Privacy Policy does not cover third-party websites or services that may be linked from our Site. These third parties have their own privacy policies, and we encourage you to review them.

By using our Site and providing your personal data, you acknowledge that your personal data will be processed in accordance with this Privacy Policy. If you do not agree with the practices described, please do not provide personal data or use the Site.

2. What Personal Data We Collect

When you voluntarily interact with our Site, we may collect the following personal data:

• Full name (first and last name)
• Company name
• Contact information (phone number, email address, postal address)
• Internet Protocol (IP) address
• Product inquiry details and communication history
• Other information you voluntarily provide through forms, emails, or chat

3. When We Collect Personal Data

Unless you voluntarily choose to disclose such information, we will not collect any personal data from you through this Site. We may ask you to provide certain personal data at different times, including:

• When you submit a product inquiry or request a quotation
• When you contact customer service or use our "Inquire Now" function
• When you subscribe to our newsletter or product updates
• When you open or reply to our emails
• When you voluntarily provide information through customer surveys
• When you connect, link, or share our Site through social networking sites

If you provide us with personal data of a third party, you must have obtained the third party's consent and authorization to share such information with us.

4. How We Use Your Personal Data

We use the personal data we collect to provide you with services and to fulfill contractual agreements. Specifically, we may use your personal data to:

• Process your product inquiries, orders, and quotations
• Provide customer service, answer questions, and respond to requests
• Send reminders, updates, support messages, and service announcements
• Operate, maintain, and improve our Site, services, and products
• Perform analytics and conduct customer research
• Verify your eligibility for certain products or services
• Manage online surveys or special offers
• Notify you of new products, services, or promotions that may interest you (with your consent where required)
• Prevent fraud, protect public safety, and enforce our terms and conditions
• Comply with applicable laws, regulations, court orders, or other legal procedures

5. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Consent: When you give us explicit consent (e.g., subscribing to a newsletter, submitting a contact form).
• Contract Performance: When processing is necessary to fulfill a contract with you or to take pre-contractual steps at your request.
• Legal Obligation: When processing is necessary to comply with a legal obligation.
• Legitimate Interests: When processing is based on our legitimate business interests (e.g., fraud prevention, website security), balanced against your rights.
• Vital Interests: When processing is necessary to protect your vital interests or those of another person.

6. Sensitive Personal Data

"Sensitive personal data" refers to data related to race or ethnicity, political opinions, religion, health, genetic or biometric data, sexual orientation, criminal background, or union membership. We only collect sensitive personal data in the following limited circumstances:

• With your explicit consent
• To protect the vital interests of you or others when you cannot physically or legally consent
• When required for preventive or occupational medicine, or to establish, exercise, or defend legal claims

Unless required by applicable laws, you do not need to provide any sensitive personal data when using our Site. Refusing to provide it will not affect your ability to use the Site.

7. Automatically Collected Information

When you browse and interact with our Site, we may use automatic collection technologies to collect certain information about your device, browsing operations, and patterns, including:

• Pages visited, resources used, traffic data, and location data
• Date, time, and frequency of access
• Operating system, browser type, host domain, and ISP
• Referring website (URL) and exit page
• Screen resolution, language, and connection information

This statistical data is used to improve our Site, measure performance, identify popular content, and provide a better user experience. We do not sell this aggregated information to third parties.

8. Cookies & Tracking Technologies

When you visit our Site or interact with our emails, we use cookies, web beacons, pixel tags, and similar technologies to identify you, analyze how our Site is used, and provide a personalized experience. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Site to function properly (e.g., session, security).
• Performance/Analytics Cookies: Help us understand how visitors interact with the Site (e.g., page visits, traffic source).
• Functional Cookies: Remember your preferences (e.g., language, region).
• Marketing/Advertising Cookies: Used to deliver relevant advertisements and track campaign performance (only with your consent).

Most browsers allow you to control cookies through their settings. You can disable or delete cookies at any time. However, doing so may affect your ability to use certain features of our Site.

Note on Social Media Plugins: Our Site may use social plugins from Facebook, Twitter, LinkedIn, and other networks. When you visit a page with these plugins, the social network may receive information about your visit. If you do not want social networks to collect data about you through our Site, you must log out of the social network before visiting the Site.

9. How We Share Information

We are committed to keeping your personal data confidential. Except as described in this Privacy Policy, we will not sell, trade, or rent your personal data to third parties. We may share your personal data in the following circumstances:

• With Affiliates: Our affiliated companies may use your personal data only for the purposes described in this Privacy Policy (e.g., to respond to your inquiries).
• With Service Providers: Contractors, vendors, and suppliers who provide services on our behalf (e.g., order processing, data storage, email distribution, fraud prevention, logistics).
• Business Transfers: If we or our affiliates undergo corporate reorganization, merger, acquisition, or sale of business units, your personal data may be transferred as part of the transaction.
• Legal Compliance: To comply with legal orders, government requirements, audits, compliance, and corporate governance functions.
• Fraud Prevention: To combat fraud or criminal activity and protect the rights of our company, users, and business partners.

10. Data Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws. The retention periods are generally as follows:

• Inquiry Data: Retained for up to 3 years from your last interaction, to support ongoing business communications and follow-up.
• Order & Contract Data: Retained for up to 7 years to meet tax, accounting, and legal record-keeping obligations.
• Marketing Consent Data: Retained until you withdraw consent or unsubscribe.
• Server Logs & Analytics: Retained for up to 12 months for security and performance analysis.

When the retention period expires, we will securely delete or anonymize your personal data.

11. International Data Transfers

Anhui Nanbo Intelligent Environmental Equipment Co., Ltd is headquartered in China. Your personal data may be transferred to, stored, and processed in countries outside your country of residence, including China and other countries where we or our service providers operate.

When we transfer personal data outside of the EEA, UK, or other regions with data protection laws, we ensure the transfer is made in compliance with applicable data protection laws. We use appropriate safeguards such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Binding Corporate Rules (BCRs) where applicable
• Other lawful transfer mechanisms recognized under applicable law
• Your explicit consent to the transfer

12. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete personal data.
• Erasure ("Right to Be Forgotten"): Request deletion of your personal data, subject to legal retention obligations.
• Restriction: Request that we restrict the processing of your personal data.
• Data Portability: Receive your personal data in a structured, machine-readable format and transmit it to another controller.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Withdraw Consent: Withdraw consent at any time for processing based on consent (e.g., marketing emails).
• Right Not to Be Subject to Automated Decision-Making: Including profiling, in certain circumstances.

To exercise any of these rights, please contact us using the information in Section 17. We will respond to your request within 30 days.

If you are in the EEA, you also have the right to lodge a complaint with your local Data Protection Authority (DPA) if you believe we have not handled your personal data properly.

13. California Consumer Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:

• Right to Know: The categories of personal data collected, the sources, the purpose, and the third parties with whom we share it.
• Right to Delete: Request deletion of your personal data, subject to exceptions.
• Right to Opt-Out: Opt-out of the "sale" or "sharing" of your personal data for cross-context behavioral advertising.
• Right to Non-Discrimination: Receive equal service and pricing even if you exercise your privacy rights.

To exercise your CCPA rights, submit a verifiable consumer request by contacting us at yuki.chong@ahnanbo.com.

We do not sell personal data of California residents for monetary consideration.

14. Data Security Measures

We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission between your browser and our servers
• Access controls and authentication for internal systems
• Regular security assessments and vulnerability scans
• Employee training on data protection and confidentiality
• Secure data backup and disaster recovery procedures

However, no method of transmission or storage is 100% secure. If a data breach occurs that poses a risk to your rights, we will notify you and the relevant authorities in accordance with applicable laws.

15. Children's Privacy

Our Site and services are not directed to children under 16 years of age (or the age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have collected personal data from a child, please contact us immediately, and we will delete such data.

16. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes, we will provide notice on our Site before the changes take effect. You can determine the latest revision date by referring to the "Last Updated" date at the top of this page.

We recommend that you review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal data.

17. Contact Us & Exercise Your Rights

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us using the information below:

We will respond to your request within 30 days. For verification purposes, we may request additional information to confirm your identity before processing your request.