Privacy Policy

1. Introduction & consent

This policy describes how GDQV handles personal information when you browse this website or submit a business inquiry.

The inquiry form requires a privacy acknowledgement before submission. Submitting an inquiry does not subscribe you to marketing emails. This acknowledgement does not establish that every processing activity or international transfer has valid legal consent.

The responsible legal entity and address, applicable laws, processing grounds and consent requirements reflect the best information available as of 2026-09-08. EU/EEA GDPR, UK GDPR, CCPA/CPRA and China’s Personal Information Protection Law require assessment of their respective scope; visitor location alone does not settle applicability.

2. What we collect

Required inquiry fields are name, email address, country/region, inquiry type and message, together with the privacy acknowledgement. Company, phone number and product interest are optional.

We also process submission identifiers, duplicate-prevention fingerprints, timestamps and email delivery status to operate the inquiry workflow. Please do not include sensitive personal information or unnecessary information about other people in your message.

The inquiry API reads the IP address supplied in request headers for in-memory rate limiting. Hosting infrastructure may also process IP addresses and request logs. The current inquiry database record does not have a dedicated IP address field.

The current application does not request precise location coordinates or implement device fingerprinting. Country/region is information you enter yourself.

3. How we use information

We use inquiry information to respond to your request, provide product quotations and carry out related sales or technical follow-up.

We process operational information to prevent spam and duplicate submissions, limit abuse and track inquiry email delivery.

The current inquiry flow does not enrol you in a newsletter, sell your inquiry information or use it for targeted advertising. Service providers receive information for the functions described below. We do not use inquiry information for automated decisions producing legal or similarly significant effects.

4. Data storage & cross-border transfer

For visitors in mainland China, all four service arrangements below involve overseas processing. Information may also be transferred outside your country or region, including outside the EU/EEA or the UK.

Vercel (United States) hosts the website and processes incoming requests, including inquiry submissions and request information such as IP addresses. Its hosting and delivery infrastructure may process information in locations beyond the United States; this policy does not assert US-only storage.

Supabase (United States provider) stores inquiry records in the configured AWS Singapore region, ap-southeast-1. Singapore is the confirmed database region; this does not establish that all provider support, backups or onward processing remain only in Singapore.

Resend (United States) processes recipient email addresses and inquiry email content to send sales notifications and customer confirmations. Google Workspace (United States, Google) processes and stores the sales notification emails received in GDQV’s sales mailbox. These are separate overseas processing steps; the providers’ US location does not establish exclusive US physical storage.

Other countries may provide different protections or permit different forms of government access. Actual processing locations, onward transfers, provider agreements, and the required transfer mechanisms, assessments, notices and any separate consent reflect the best information available as of 2026-09-08. This policy does not claim that contractual safeguards, transfer assessments or separate cross-border consent have been completed. Contact tech@gdqv.com for details.

5. Cookies & tracking

The site uses a next-intl language-preference cookie to remember your selected language. You can manage cookies in your browser; disabling this cookie may prevent your language preference from being remembered.

The inquiry form uses browser sessionStorage to preserve your selected or edited product interest within the tab. This is browser storage, not a cookie, and normally clears when the tab session ends.

Our application code does not integrate analytics, advertising, or third-party tracking cookies. Hosting request logs are distinct from cookies; the deployed platform configuration is described in our infrastructure documentation.

6. Third-party sub-processors

Vercel — United States: website hosting, request processing and operational logs.

Supabase — United States provider; AWS Singapore database region: inquiry record storage.

Resend — United States: delivery of inquiry notifications and confirmations, including recipient addresses and email content.

Google Workspace — United States (Google): receipt, storage and management of inquiry emails in the sales mailbox.

These are the service providers identified for this workflow. Their contracting entities, processor roles, agreements and onward sub-processors are documented in our supplier register.

7. Data retention

We plan to implement 24-month auto-deletion for inquiry records. This is a proposed measure, not an implemented feature. The start date for calculating retention, exceptions and deletion coverage still require approval and implementation.

At present, there is no scheduled automatic deletion of inquiry records; records remain unless manually deleted. You may request earlier deletion through tech@gdqv.com, subject to applicable legal requirements and review of the request.

Vercel log retention is according to Vercel's current plan terms. Database backups, Resend records and Google Workspace mailbox copies have separate provider settings and retention arrangements that must be confirmed. Deletion from the inquiry database does not automatically delete those copies.

8. Your rights

Subject to applicable law, you may request access to your personal information, correction of inaccurate information, deletion, and a portable copy.

Where applicable, you may also request restriction of processing, object to processing, withdraw consent for processing that relies on it, or complain to the relevant supervisory authority. The available rights and exceptions depend on applicable law.

Send requests to the contact below and describe the information or inquiry concerned. We may need proportionate information to verify your identity. Requests are handled within applicable statutory deadlines; we do not currently operate an automated rights portal.

Privacy contact: tech@gdqv.com

9. Minors, policy updates & contact

This website is intended for business inquiries and is not directed at children. Please do not submit children’s personal information. If you believe a child has provided information, contact us to request review and removal where appropriate.

Updates to this policy will be reflected in the date above. Material changes will be communicated through this website.

For privacy questions, contact tech@gdqv.com. The responsible legal entity’s full name and address remain to be confirmed for the final policy. This contact is not represented as an appointed data protection officer or EU/UK representative.

Privacy contact: tech@gdqv.com