Privacy Policy

1. Who we are

This website, sunyung.com, is run by Zhanjiang Sunyung Industrial Co., Ltd. (“Sunyung”, “we”, “us”), No. 6 Huagang Road, Zhanjiang City, Guangdong Province, China 524000.

Questions about this policy or your data: info@sunyung.com. You can contact us directly; we have not appointed a representative in the European Union or the United Kingdom.

2. What we collect and why

When	What	Why (legal basis)	How long
You create a business account or sign in	Name, email, company, phone, country, password (stored only as a secure hash), sign-in codes	To give you access to trade prices, the VIP catalogue and your quotes (contract, Art. 6(1)(b) GDPR)	While the account exists; deleted on request
You send a quote request	The products and quantities on your Quote List, your notes and files, your contact details	To prepare and send your quotation and follow up (contract and pre-contract steps)	6 years after the last contact (business records)
You place an order (ready-to-ship products)	Billing and delivery address, contact details, order contents; payment is handled by PayPal, we never see your card	To deliver your order, issue invoices and keep accounting records (contract; legal obligation, Art. 6(1)(c))	6 years, or longer where tax and accounting law requires
You use the contact form	Name, email, subject, message	To answer you (legitimate interest in replying to enquiries, Art. 6(1)(f))	2 years
You chat with us	Your messages and, if you are signed in, your name, email, company and country so our team knows who they are talking to	To answer you (legitimate interest; contract when it concerns an order or quote)	As long as needed for the conversation and follow-up
You visit any page	IP address, browser, pages requested, time (server logs); security checks against spam and attacks	To keep the site secure and working (legitimate interest)	30 days
You allow “Analytics” in the cookie banner	Pages visited, clicks and scrolling, device and approximate location (Google Analytics, Microsoft Clarity)	To understand how the site is used and improve it (consent, Art. 6(1)(a))	Google Analytics: 14 months; Microsoft Clarity: up to 13 months

We do not sell personal data, and we do not use it for automated decisions that affect you.

To decide whether to show the cookie banner, our server looks up the country of your IP address in a local database (IP geolocation by DB-IP, CC BY 4.0); the address is not sent anywhere for this.

3. Who else processes your data

We use these service providers. They process data only on our instructions:

Provider	Purpose	Location
V.PS (hosting)	Runs the website and its database	Japan (Tokyo)
Alibaba Cloud (Aliyun Enterprise Mail)	Sends our emails (sign-in codes, quotations, order emails)	China
Resend	Sends our emails when the main email service is unavailable	United States
Dropbox	Encrypted backups of the website	United States
Intercom	Live chat	United States
Google (Analytics)	Visit statistics, only with your consent	United States / worldwide
Microsoft (Clarity)	How pages are used, only with your consent	United States / worldwide
PayPal	Payments for orders	Worldwide
hCaptcha (Intuition Machines)	Spam protection on sign-up and sign-in	United States

Our sales team in China can see your quote requests, orders, messages and account details to serve you.

4. International transfers

Our company is in China and some providers are in the United States and Japan. For transfers from the EU and the UK:

• Japan has an EU adequacy decision.
• US providers are certified under the EU–US Data Privacy Framework or use the EU Standard Contractual Clauses.
• Personal data is processed by our own team in China and by our email provider there. These transfers rely on the EU Standard Contractual Clauses; we sign them with you on request.

5. Your rights

You can ask to see, correct, delete or receive a copy of your data, object to or restrict its use, and withdraw consent at any time (for analytics: “Cookie settings” at the bottom of every page). Write to info@sunyung.com; we answer within one month. You can also complain to your data protection authority.

If you are in China, you have the corresponding rights under the Personal Information Protection Law (PIPL).

6. Security

The site uses encrypted connections (HTTPS), two-step sign-in for staff, rate limits and spam protection; backups are encrypted. No system is perfectly secure, but we take reasonable measures and review them regularly.

7. Children

The site is for businesses and is not directed at children.

8. Changes

We update this policy when our use of data changes; the date at the top shows the latest version. If a translation differs from the English version, the English version prevails.