Privacy & data policy

1. Who is responsible

Dongguan Xingchao Metal Products Co., Ltd. (trading as HSINGCHAO MOULD), Room 101, Building 6, No. 238 Kuiqing Road, Qingxi Town, Dongguan, Guangdong, China. For anything about your data, write to [email protected].

2. What we collect

When you send an enquiry — the fields you fill in: company, country, name, email, phone / WhatsApp, product, steel grade, part size, hardness, quantity, target date and notes. We also record the page you were on, the site you arrived from, the pages you viewed in that tab and roughly how long you spent, so the sales desk has context for your request.

When you just browse — a lightweight script records the pages opened in the current tab, time on each page, how far you scrolled, the referring domain, device width, time zone, and the name of the network owner (for example a company name or an internet provider) plus the country and city inferred by our hosting provider. It runs only after you have viewed at least two pages and stayed 15 seconds, so casual visits and search-engine crawlers are ignored.

When you use the chat assistant — the messages you type are sent to our language-model provider only to generate a reply. A short-lived request counter is applied to stop automated abuse of the chat endpoint. If you ask to speak to a person, the conversation summary is passed to our sales desk together with the contact details you choose to give.

When you email us — your email address, subject and message body are read by an automated assistant in order to send one immediate acknowledgement of a business enquiry. Only the first message in a conversation is answered automatically; every follow-up is handled by a person at our sales desk. System mail, automated replies and messages that are not enquiries are not answered. Attachments are counted but never opened or analysed by the assistant. A brief processing record is kept for 30 days to prevent duplicate replies.

3. What we do not collect

We do not store your IP address, we do not set cookies, and we do not place any identifier that survives after you close the tab. To protect the chat endpoint from automated abuse we keep a one-way hash of the network address for about two minutes, holding only a request count. It cannot be reversed into an IP address and is never linked to your messages. Browsing data lives in your browser's sessionStorage for that tab only and is sent once when you leave. We do not track you across other websites, we do not build advertising profiles, and we never sell or rent data. We cannot identify an individual visitor from browsing data alone — the company name, where available, comes from the network they are connected to.

4. Why we use it

To answer your enquiry and to understand which product pages are useful to buyers. Our lawful basis is taking steps at your request before a contract, and our legitimate interest in running a business-to-business sales desk. Nothing here is used for automated decisions about you. The email acknowledgement is a courtesy confirmation only: it makes no offer, sets no price and creates no commitment, and a sales engineer reviews every enquiry personally.

5. How long it is kept

Enquiry emails are kept in our sales mailbox for as long as needed to serve the customer and meet accounting obligations. Browsing summaries are kept only as short-term daily aggregates for traffic reporting; they are not stored in a long-term visitor database. The short processing record used to prevent duplicate automatic email replies expires after 30 days.

6. Who processes it

This site is served by Cloudflare, which supplies the network information and content delivery. Enquiry and notification emails are delivered by Resend, which also receives a forwarded copy of incoming customer emails on a dedicated subdomain. Chat messages and the text of incoming business emails are processed by our language-model provider only to generate a reply; they are not used to train models. All act as processors under their own privacy policies. Data may therefore be handled outside your country of residence.

7. Your rights

You may ask for a copy of the data we hold about you, ask us to correct or delete it, object to processing, or withdraw consent where consent was the basis. Under the EU GDPR you may also complain to your local supervisory authority; under China's PIPL you have equivalent rights over your personal information. Email [email protected] and we will respond within one business day. We may need to verify your identity first.

8. Changes

If we change what we collect, we update this page and its date. Material changes are also noted on the homepage.

Contact us →