Privacy Policy

Controller and contact

Controller/site operator: 广东零二零科技有限公司, operating under the Quanqiu IoT brand.

No. 848 Maogang Road, Huangpu District, Guangzhou, China

Privacy and data requests: [email protected]. General business contact is also available through the published WhatsApp, WeChat, or contact form channels.

Data we collect

Inquiry data: name, work email, target country or region, project brief, and any device, quantity, traffic, or delivery information that a buyer chooses to submit.

Operation data: IP address, browser, device, page requests, timestamps, errors, and security logs may be processed by the website, host, Cloudflare, or related technical services as needed to provide and protect the site.

Analytics data: the site loads Google Analytics 4 measurement ID G-4VJRXE3ZDN to understand visits and page performance; this policy does not describe it as a personalized advertising system.

Purposes and legal basis

To handle inquiries, assess catalog versus project-quote routing, reply to buyers, and conduct necessary sales follow-up; this is generally based on pre-contract communications initiated by the buyer or steps requested before a contract.

To operate the site, troubleshoot errors, prevent abuse, protect systems, and maintain business records; this is generally based on operational and security interests or applicable legal requirements.

For analytics or cookie uses that require consent, the legal basis depends on applicable law and the consent mechanism actually deployed; this policy does not replace cookie-consent configuration.

Storage, sharing, and transfers

Inquiry submissions are first stored as private sales-inquiry records in the website backend and, when available, are forwarded to the sales email channel.

We may disclose necessary data to providers supporting hosting, site security, analytics, email, or infrastructure, but this policy does not invent a named vendor list where it has not been verified.

Those services may process data in China or other countries. The specific safeguards for an international transfer must be confirmed against the actual provider, contract, and applicable law.

Retention and security

Retention is determined by the shortest reasonable period needed for inquiry handling, business records, disputes, security review, and legal obligations; no single fixed period is claimed for every data category.

We use access controls, input sanitization, private backend storage, HTTPS/Cloudflare paths, and necessary system safeguards; no security measure can guarantee absolute security.

GDPR rights

Where applicable, an individual may request access, correction, erasure, restriction, objection, data portability, withdrawal of consent where processing relies on consent, and the right to complain to a supervisory authority.

Submit a request to [email protected]. We may need reasonable information to verify identity and will apply lawful exceptions, fees, and response periods where applicable.

CCPA/CPRA rights

If the CCPA/CPRA applies to an individual, rights may include knowing, deleting, correcting, limiting certain sensitive-personal-information uses, non-discrimination, and opting out of sale or sharing.

The current site is not operated for the purpose of selling personal information. Privacy, opt-out, or authorized-agent requests may be sent to [email protected] and will be verified as required by applicable law.

The scope of a “Do Not Sell or Share” request depends on whether the CCPA/CPRA applies to the individual and processing activity; this policy does not invent an advertising-sale mechanism that the site does not operate.

Policy updates

We may update this page when data practices, site functions, or applicable law materially change, and will show the updated date at the top.