Privacy Policy

1. Data Controller

Shenzhen Sdison Technology Co., Ltd. ("Sdison," "we," "us") is the data controller responsible for your personal data.

Registered office: Shenzhen, Guangdong, China

Contact: info@sdisontech.com

2. Data We Collect

When you interact with our website or submit an inquiry, we may collect:

• Corporate Contact Information: Name, company name, job title, business email address, and telephone number provided through our inquiry forms.
• Device & Usage Data: IP address, browser type, operating system, referring URLs, and pages visited — collected via our analytics system.
• Communication Records: Contents of messages sent through our contact forms or email correspondence.

We do not collect sensitive personal data (e.g., health information, biometric data, or payment card details) through this website.

3. How We Use Your Data

Your data is processed for the following purposes:

• Lead Generation & Business Development: Responding to product inquiries, providing technical specifications, and issuing commercial quotations.
• B2B Order Fulfillment: Processing purchase orders, coordinating logistics, and managing ongoing commercial relationships.
• Legal Compliance: Meeting regulatory obligations including tax records, export control, and contractual documentation.

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

4. Analytics

We utilize a self-hosted instance of Umami, a privacy-focused, open-source analytics tool. Umami operates entirely in a cookie-less configuration — it does not store cookies on your device, does not use local storage for tracking purposes, and does not collect or store any personally identifiable information (PII). All visitor IP addresses are anonymized via one-way cryptographic hashing before processing. Umami does not perform cross-site tracking, does not build user profiles, and does not share data with any third party. The collected telemetry is limited to aggregated page-view metrics used solely for website performance optimization.

5. Third-Party Services

We engage the following service providers who may process limited data on our behalf:

• Hosting Provider: Our website infrastructure is hosted on private servers managed by Sdison Technology. Server access logs (including IP addresses) are retained for security monitoring and rotated according to operational requirements.
• Email Delivery: Contact form submissions are transmitted via SMTP relay to our internal business email system. Email contents are stored on our corporate mail server and are not shared with external email marketing platforms.
• Font Delivery: This website loads typefaces from Google Fonts (fonts.googleapis.com). Google may log your IP address when serving these font files. We recommend reviewing Google's privacy policy for details on their data handling practices.

6. Data Retention

Inquiry form data and associated correspondence are retained for the duration of the business relationship plus a period of 24 months following the last commercial interaction, after which they are securely deleted. Server access logs are retained for a maximum of 90 days. Aggregated, anonymized analytics data may be retained indefinitely as it cannot be linked to any individual.

7. Your Rights (GDPR — EU & UK)

If you are located in the European Union or the United Kingdom, you have the following rights under the General Data Protection Regulation:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data where there is no compelling reason for continued processing.
• Right to Restrict Processing: Request suspension of processing under certain circumstances.
• Right to Data Portability: Request transfer of your data to another organization in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.

To exercise any of these rights, contact us at info@sdisontech.com. We will respond within 30 calendar days. You also have the right to lodge a complaint with your local data protection supervisory authority.

8. Your Rights (CCPA/CPRA — California, USA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and sell (we do not sell personal information).
• Request deletion of personal information we have collected.
• Opt out of the sale or sharing of personal information (not applicable — we do not sell or share personal information).
• Non-discrimination for exercising your CCPA rights.

To submit a CCPA request, contact us at info@sdisontech.com.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include TLS encryption for data in transit, access controls, and regular security reviews of our infrastructure.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via a notice on our website. Continued use of the site after changes constitutes acceptance of the revised policy.

11. Contact

For questions about this Privacy Policy or to exercise your data rights, contact:

Shenzhen Sdison Technology Co., Ltd.
Shenzhen, Guangdong, China
Email: info@sdisontech.com