1. Who we are
Xin Ming Da Hardware (Shenzhen) Co., Ltd. (鑫铭达五金（深圳）有限公司), trading as XMDhardware, is the data controller for the information you submit through our website inquiry form.
Room 510, Building A3, Zone B, Songbai Industrial Park, Gongming Subdistrict, Guangming District, Shenzhen, Guangdong, China
Privacy contact (also the channel for data-subject requests): xmdhardware@gmail.com
2. Information collected through the inquiry form
- Name and email address (required to process your inquiry).
- Phone number and company name (optional).
- The product category you select and the message you write.
- Only if you tick the optional analytics box: a session identifier and the URL source parameters (UTM) / referring page you arrived with. If you do not tick it, we do not collect or keep these fields. Declining optional analytics does not prevent you from submitting the form.
3. Why we process it
We use the information you submit to answer your inquiry: preparing product quotations, contacting you as a customer, and following up on orders. We do not use your details for other purposes without separate confirmation of a lawful basis and an update to this notice.
4. How you consent
The form shows two separate boxes, both unchecked by default:
- Required inquiry-processing acknowledgement – confirming you have read this notice and agree to the processing described in sections 2–3. Without it we cannot lawfully process your inquiry, so the form will not submit.
- Optional analytics consent – a separate, independent choice about the optional tracking fields described above. You may decline it and still submit the form.
5. How long we keep it
- Raw inbox: submitted inquiry records are first stored in a secure temporary inbox (Netlify Blobs) for at most 180 days, after which they are deleted.
- Unconverted lead records in our CRM: kept for 24 months from the last meaningful business communication, then deleted or anonymised. “Last meaningful business communication” means a real incoming customer message, a manual WhatsApp reply, a manually logged phone call, an email exchange, or a formal quotation record. Automated notifications, delivery/read/failure status receipts, and system messages without substantive business content do not restart the clock.
- Converted customers, contract/financial records, dispute handling and material that must be kept by law are outside this 24-month rule and are retained separately as required.
- Backups, logs and provider-side copies may remain for the periods set by the applicable service configurations; we are confirming the exact periods and will update this notice.
6. Service providers, storage location and cross-border transfers
- Netlify – hosts this website and runs the inquiry intake (Netlify Functions). The raw inbox is stored in Netlify Blobs in the Frankfurt, Germany (eu-central-1) region. This means inquiry data you submit is transferred from mainland China to Germany for processing.
- GitHub – source-code hosting only; no visitor personal data is stored there.
- Cloudflare – DNS management for xmdhardware.com; no personal data is stored in our DNS records.
- Our own CRM system operated by XMDhardware, to which processed inquiries are synced for order follow-up.
- Contractual vendor roles, support-access and any further cross-border details are being verified against the current service agreements; we will complete this section once confirmed.
7. Your rights
You may ask us to access, correct or delete your personal information, or to withdraw your consent to optional analytics. Send the request to xmdhardware@gmail.com. We will verify your identity before processing the request and will handle it in accordance with applicable requirements. Our internal request-handling process is still being finalised, so we do not currently commit to a specific response deadline; this notice will be updated when it is.
8. Changes to this notice
This notice is version-controlled. Material changes are published as a new version with a new version identifier; the form on this website only submits data against the version that is in force here.
Version XMD-PRIVACY-2026-11-06-v1 · In force 2026-11-06 · Contact xmdhardware@gmail.com
隐私告知（中文）
版本 XMD-PRIVACY-2026-11-06-v1 · 生效日期 2026-11-06 · 联系邮箱 xmdhardware@gmail.com
1. 数据控制者
鑫铭达五金（深圳）有限公司（Xin Ming Da Hardware (Shenzhen) Co., Ltd.，品牌名 XMDhardware）是本网站询盘表单所收集信息的数据控制者。地址：中国广东省深圳市光明区公明街道松白工业园B区A3栋510。隐私联系与个人信息权利请求邮箱：xmdhardware@gmail.com。
2. 收集的个人信息
- 姓名、电子邮箱（提交询盘所必需）；电话、公司名称（选填）；所选产品类别与留言内容。
- 仅当您勾选可选分析同意项时：会话标识与来源参数（UTM）/引荐页面。未勾选则不收集、不保留这些字段；拒绝可选分析不影响您提交询盘。
3. 处理目的
用于响应您的询盘：产品报价、客户联系与订单跟进。未经另行确认法律基础并更新本告知，不用于其他目的。
4. 同意方式
表单提供两个默认未勾选的独立选项：① 必要的询盘处理确认（须勾选，否则无法提交）；② 可选的分析追踪同意（独立、可拒绝，拒绝后仅保留必要询盘字段）。
5. 保存期限
- 原始收件箱（Netlify Blobs）暂存最长 180 天，期满删除。
- 未成交 CRM 线索主记录自最后一次有实质意义的业务沟通起保留 24 个月，期满删除或匿名化。口径：真实客户入站消息、人工 WhatsApp 回复、人工登记电话、邮件往来、正式报价记录计入；自动通知、送达/已读/失败回执及无实质业务内容的系统触达不计入。
- 已成交客户、合同/财务、争议处理及依法必须保存的记录不适用该 24 个月规则，按适用要求另行保存。
- 备份、日志及服务商侧副本按适用服务配置保留；具体期限核实后更新本告知。
6. 服务商、存储地点与跨境传输
- Netlify：网站托管与询盘接收（Functions）；原始收件箱存储于德国法兰克福（eu-central-1）——您的询盘数据将从中国境内传输至德国处理。
- GitHub：仅源代码托管，不存储访客个人信息；Cloudflare：DNS 托管，DNS 记录中不存储个人信息。
- 本公司自有 CRM 系统：询盘处理后同步用于订单跟进。
- 服务商合同角色、支持访问及进一步跨境细节正在按现行服务协议核实，确认后更新本节。
7. 您的权利
您可请求查阅、更正、删除您的个人信息或撤回可选分析同意，发送至 xmdhardware@gmail.com。我们将核验身份后依适用要求处理；内部受理流程正在建立，暂不承诺具体响应时限，流程就绪后更新本告知。
8. 告知变更
本告知采用版本管理：实质变更以新版本发布，询盘表单仅对本网站当前生效版本提交数据。