Privacy Policy | Jingtai Hardware

Effective Date: April 19, 2026

Jingtai Hardware ("we", "us", "our") is committed to safeguarding the privacy and personal data of all users ("you", "your") who access our website (https://cngtxc.com, "Website"), engage with our services, or conduct business with our enterprise. This Privacy Policy details the methods by which we collect, utilize, store, disclose, and protect your personal data, in full compliance with the European Union (EU) General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and other applicable data protection legislation. By accessing or using our Website, you acknowledge that you have read, understood, and consented to the terms and conditions set forth in this Privacy Policy.

1. Definitions

Personal Data: Any information relating to an identified or identifiable natural person (data subject), including but not limited to your name, email address, telephone number, company name, job title, and any other information you provide to us that is capable of identifying you personally. As a B2B-focused hardware manufacturer, we primarily collect personal data associated with business contacts and procurement activities.
Processing: Any operation or set of operations performed on personal data, including but not limited to collection, storage, utilization, disclosure, alignment, or erasure.
Data Controller: Jingtai Hardware, which determines the purposes and means of processing your personal data in accordance with applicable laws.
Data Processor: Any third party engaged by us to process personal data on our behalf, in strict adherence to our instructions and the requirements of the GDPR.

2. Personal Data We Collect

In accordance with the GDPR principle of data minimization, we only collect personal data that is necessary for the performance of our business objectives. The personal data we collect is categorized as follows:

2.1 Personal Data You Voluntarily Provide

When you contact our enterprise, submit a quote request, lodge an inquiry, register for updates, or engage in business transactions with us (e.g., as a B2B buyer, wholesaler, or OEM partner), you may provide us with the following personal data:

Contact information: Full name, email address, telephone number, company name, job title, and business address.
Business-related information: Procurement requirements, product inquiries, order details, and any other information you provide to facilitate the provision of our services (e.g., drawings or specifications for custom hardware products).
Other information: Any additional personal data you voluntarily choose to provide (e.g., communication preferences).

2.2 Data Collected Automatically

When you access our Website, we use only essential cookies and browser local storage to keep the site functional and to remember your language and consent preferences, as described in our Cookie Policy. We do not use analytics, advertising or tracking tools, and we do not collect personal data through your browsing of our Website.

3. Purposes of Processing Personal Data

We process your personal data exclusively for the following legitimate purposes, in full compliance with GDPR requirements:

To provide and fulfill our services: To respond to your inquiries, process quotes, fulfill orders, deliver products, and provide after-sales support for our hinge bearings, wire forming products, and other hardware solutions.
To communicate with you: To send you updates, product information, and business-related communications (e.g., order confirmations, delivery notifications) that are necessary for the maintenance of our business relationship.
To improve our Website and services: To maintain and enhance the functionality, performance and user experience of our Website, and to develop new products that meet the needs of our global B2B partners.
To comply with legal obligations: To maintain records for tax, accounting, and regulatory purposes, and to respond to lawful requests from regulatory authorities or law enforcement agencies.
To protect our legitimate business interests: To prevent fraud, ensure the security of our Website and data, and enforce our Terms of Service.

We shall not process your personal data for any purpose not explicitly stated in this Privacy Policy without obtaining your express prior consent.

4. Legal Basis for Processing

Pursuant to the GDPR, we process your personal data based on the following legal bases:

Performance of a contract: Processing is necessary to fulfill our contractual obligations to you (e.g., processing orders, delivering products, or providing quotes).
Legitimate interests: Processing is necessary for the pursuit of our legitimate business interests (e.g., improving our services, communicating with business partners, or ensuring Website security), provided that such interests do not override your fundamental rights and freedoms.
Consent: Where required by law, we shall obtain your explicit consent prior to processing your personal data for specific purposes (e.g., marketing communications). You may withdraw your consent at any time, with such withdrawal taking effect immediately.
Legal obligation: Processing is necessary to comply with our legal obligations (e.g., tax, accounting, or regulatory requirements).

5. Disclosure of Personal Data to Third Parties

We do not sell, rent, or otherwise disclose your personal data to third parties for marketing purposes. We may disclose your personal data to the following third parties, solely to the extent necessary to fulfill our business objectives and in compliance with GDPR requirements:

Service providers: Third-party vendors who assist us with website hosting, order processing, delivery, payment processing, and data storage. We only engage service providers who comply with the GDPR and other applicable data protection laws, and we enter into data processing agreements (DPAs) with such providers to ensure the protection of your personal data.
Affiliates and partners: Our business partners who are involved in the provision of our services and adhere to the same data protection standards as those adopted by our enterprise.
Regulatory authorities and law enforcement: We may disclose your personal data if required by law, court order, or regulatory request, in order to comply with our legal obligations.

6. Data Retention

We retain your personal data only for the period necessary to fulfill the purposes for which it was collected, or as required by applicable law. The retention period varies depending on the type of personal data and the purpose of processing:

Business contact and order-related data: Retained for 7 years following the termination of our business relationship, to comply with tax and accounting obligations.
Language and consent preferences (local storage): Retained until you clear your browser's local storage.
Data collected with consent: Retained until you withdraw your consent, or for the period necessary to fulfill the purpose for which consent was granted.

Upon the expiration of the retention period, we shall securely erase or anonymize your personal data to ensure that it can no longer identify you.

7. Data Security

We take the security of your personal data seriously and implement appropriate technical, administrative, and physical measures to protect it from unauthorized access, disclosure, alteration, or destruction. These measures include:

Encryption of personal data in transit (via HTTPS).
Secure hosting of data on servers equipped with access controls and firewalls.
Regular security audits and updates to our systems and software.
Training for our staff on data protection and GDPR compliance.

While we take all reasonable measures to protect your personal data, no method of data transmission or storage is entirely secure. We cannot guarantee the absolute security of your personal data; however, we shall notify you promptly in the event of a data breach that is likely to result in a high risk to your rights and freedoms, in accordance with GDPR requirements.

8. Your Data Protection Rights

Pursuant to the GDPR, you have the following rights with respect to your personal data. To exercise any of these rights, please contact us using the details provided in Section 10:

Right of access: You have the right to request a copy of the personal data we hold About you, as well as information regarding the processing of such data.
Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold About you.
Right to erasure ("right to be forgotten"): You have the right to request that we erase your personal data if it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent.
Right to restriction of processing: You have the right to request that we restrict the processing of your personal data (e.g., if you dispute the accuracy of the data).
Right to data portability: You have the right to request that we provide your personal data in a structured, commonly used, and machine-readable format, or to transmit it directly to another data controller, where technically feasible.
Right to object: You have the right to object to the processing of your personal data for legitimate interests or marketing purposes. We shall cease processing your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests.
Right to withdraw consent: If we process your data based on your consent, you may withdraw your consent at any time. Such withdrawal shall not affect the lawfulness of processing based on consent prior to its withdrawal.

We shall respond to your request within one month of receipt; for complex requests, we may extend this period to a maximum of three months. We shall not charge you for exercising your rights, unless your request is excessive or repetitive.

9. International Data Transfers

Our enterprise is based in China, and our Website is hosted on servers located in Hong Kong. When it is necessary to transfer personal data to countries outside the EU (including China and Hong Kong) for processing (e.g., data storage, order processing), we ensure that appropriate safeguards are in place to protect your data, in compliance with GDPR requirements. These safeguards may include:

The use of EU Commission-approved standard contractual clauses (SCCs) for data transfers to third countries.
Ensuring that the receiving country maintains an adequate level of data protection, as determined by the EU Commission.

Upon your request, we may provide you with a copy of the safeguards used for international data transfers.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, your personal data, or our data protection practices, please contact us via the following channels:

Email: CNGTXC@163.com

If you are not satisfied with our response, you have the right to lodge a complaint with a data protection authority in your EU member state.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in data protection laws, our business practices, or the services we provide. Any updates shall be posted on this page, and the "Effective Date" shall be revised accordingly. We encourage you to review this Privacy Policy regularly to remain informed About how we protect your personal data.