Privacy Policy

Scope and controller

This Privacy Policy explains how Hengyuan Covers ("Hengyuan", "we", "us" or "our") handles personal information collected through hengyuan-covers.com, our enquiry forms and related business communications.

Hengyuan Covers is responsible for deciding why and how information submitted through this website is processed. The site is intended primarily for business customers, sourcing teams, brands, retailers, suppliers and other professional contacts.

This policy applies to website visitors, people who submit enquiries, representatives of customers and prospective customers, supplier contacts and others who communicate with us about our products or services.

Information we collect

• Contact details: name, company, job title, business email, telephone number and country or region.
• Project details: product type, application, dimensions, materials, quantities, drawings, photographs, specifications and correspondence.
• Commercial records: quotations, samples, orders, delivery, quality reviews and customer-service communications.
• Technical data: IP address, browser, device, referring page, requested pages, date and time, security events and error logs.
• Measurement data: cookie or device identifiers, campaign parameters, consent status and conversion events when analytics or advertising tools are enabled.

We usually receive this information directly from you. We may also receive relevant business contact details from your organisation, a project partner, a public business source or a service provider.

Payment-card details are not requested through our public enquiry forms. If you provide information about another person, please ensure that you are authorised to do so.

How we use information

We use information to:

• respond to enquiries and prepare quotations;
• develop samples, fulfil orders and provide customer service;
• manage suppliers, production, delivery and quality;
• operate, secure and improve the website;
• measure marketing performance and send relevant B2B communications; and
• meet accounting, audit, legal and compliance obligations.

Where required by law, processing is based on steps requested before a contract, performance of a contract, our legitimate business interests, compliance with legal obligations or your consent. You may withdraw consent at any time where consent is the applicable basis.

Cookies, consent and measurement

Optional analytics and advertising permissions are off by default for all visitors, including visitors in Europe, the United Kingdom and Switzerland. Continuing to browse, scrolling or closing the settings window does not give consent. You can accept all, reject optional uses, or choose individual purposes. The website and enquiry forms remain available if you reject optional uses.

Open Cookie settings to review your choices or withdraw consent at any time. The Cookie settings control is also available throughout the website. Withdrawal changes future processing; it does not undo processing that took place before withdrawal.

• Necessary storage: security and form sessions, your saved privacy choices and the session-only welcome-animation preference. These support website operation and do not enable analytics or advertising.
• Analytics: if allowed, Google Analytics 4 (Google) and Baidu Analytics (Baidu) receive website-usage information such as page visits, browser/device details and technical network information. They may set identifiers such as _ga, _ga_* and Hm_*. Neither analytics script is loaded before analytics consent. Google Analytics cookies are configured for a maximum of 180 days; cookies may be renewed during permitted visits. Baidu controls the expiry of its own analytics cookies.
• Advertising storage: permits saving advertising identifiers such as gclid, gbraid and wbraid. Our enquiry-source feature saves these only when both advertising storage and advertising user-data permission are granted.
• Advertising user data: allows advertising-related data to be used for Google advertising measurement where advertising features are configured.
• Personalized advertising: allows advertising-related data to be used for personalized advertising where those features are configured. This is a separate choice from analytics.

Google Consent Mode v2 reflects your selections through analytics_storage, ad_storage, ad_user_data and ad_personalization. All four default to denied. A permission does not itself install a Google Ads conversion tag. Analytics consent alone does not authorize personalized advertising.

We store a versioned record of your choices and their timestamp in this browser's local storage (hengyuan-consent-v1) for up to 180 days, then ask again. This necessary record is not a cross-device preference. If storage is blocked or cleared, we may ask again. Consented enquiry campaign information is held in session storage (hengyuan-inquiry-source-v1) and cleared when the relevant permission is withdrawn. We remove accessible first-party analytics or advertising cookies when their permission is withdrawn and reload the page to stop previously loaded analytics code. Cookies held on a provider's own domain may also need to be removed through browser controls.

Optional measurement is based on your consent. Google and Baidu may process data outside your country, including in the United States or China, under their applicable terms. Read how Google uses data, Google's Privacy Policy and Baidu's Privacy Policy. To request access, deletion or other applicable rights, use the contact details below. You may also complain to your local data protection authority.

Sharing and international transfers

We do not sell or rent personal information. We share information only when reasonably necessary with:

• Hengyuan teams involved in sales, development, production, quality, logistics, finance or IT;
• hosting, email, security, analytics, advertising and technical providers;
• shipping, customs, testing, banking and professional advisers; and
• authorities or business successors where required or permitted by law.

Because Hengyuan operates in China and Cambodia and serves customers internationally, information may be processed outside the country where it was collected. Where required, we use appropriate contractual, access and security safeguards.

Service providers are expected to use information only for the agreed service, protect it appropriately and comply with applicable obligations.

Data retention

We retain information only for as long as reasonably needed for the purpose for which it was collected:

• enquiry records are kept during our response and a reasonable follow-up period;
• business and transaction records may be kept for warranty, quality, accounting, tax, legal or dispute purposes; and
• technical logs are normally kept for a shorter operational period unless needed to investigate an incident.

When information is no longer required, we take reasonable steps to delete, anonymise or securely isolate it, subject to backup and legal requirements.

Information security

We use reasonable technical and organisational measures, including access controls, server protection, backups and supplier controls, to protect information against loss, misuse or unauthorised access. No internet or email system is completely secure, so please avoid sending sensitive information through an unsecured channel.

Access is limited according to business need, and we maintain procedures for handling security issues. However, no security measure can guarantee complete protection.

Your choices and rights

Depending on applicable law, you may ask us to:

• provide access to, correct or delete your personal information;
• restrict or object to certain processing;
• provide a portable copy where applicable; or
• withdraw consent or stop direct marketing.

Contact us to exercise a right. We may need to verify your identity, and legal exceptions may apply. You may also complain to the relevant privacy authority.

You may opt out of promotional email at any time. We may still send necessary project, service or transaction communications.

Other information

This business website is not intended for children, and we do not knowingly collect their information. We do not use public enquiry information for solely automated decisions with legal or similarly significant effects.

Links to third-party websites are governed by their own privacy practices. We are not responsible for how those organisations handle information.

We may update this policy when our website, services or legal obligations change. The date at the top identifies the current version, and material changes may be highlighted on the website.