Privacy Policy

1. About us

This Privacy Policy describes how Himing New Material (Zhongshan CSII) Co., LTD. ("Himing CSII", "we" or "us") processes personal data collected through himingcsii.com (the "Site").

Privacy questions: privacy@himingcsii.com.

2. Data we collect

Information you actively provide: when you submit an inquiry, request samples or download technical documents, we collect your name, business email, company name, country or region, product category of interest, target benchmark grade and any message you choose to send.

Information collected automatically: with your consent (see Cookie Policy), we collect basic visit statistics — page views, device type, approximate geolocation and referring URL. We do not perform cross-site tracking.

We do not collect sensitive personal information (health, biometric, religious, political beliefs) and do not knowingly collect personal information from individuals under 16.

3. Purposes and legal bases

To respond to your inquiry, send quotes, samples and follow-up communications — Basis: pre-contract steps taken at your request (GDPR Art. 6(1)(b); PIPL Art. 13(2)).

To send occasional product updates, certificate changes or new grade notifications — Basis: legitimate interest in maintaining B2B supply relationships (GDPR Art. 6(1)(f)); you may unsubscribe at any time.

To operate, protect and improve the Site — Basis: legitimate interest (GDPR Art. 6(1)(f)).

To comply with legal, accounting and tax obligations — Basis: legal obligation (GDPR Art. 6(1)(c); PRC Accounting Law).

4. Recipients of data

Processors acting on our written instructions: Supabase Inc. (database hosting, US/EU), Vercel Inc. (web hosting and analytics, US), Resend Inc. (transactional email, US), Cloudflare Inc. (CDN and image hosting, global), Anthropic PBC (AI chat assistant, US). Each processor is bound by a data processing agreement.

We do not sell or rent personal data and do not share data with advertising networks.

We may disclose data when required by law, court order or to protect our legal rights.

5. Cross-border transfers

Your data is processed in mainland China (Himing CSII headquarters), the US and the EU (service-provider locations). Cross-border transfers rely on Standard Contractual Clauses (SCC) or equivalent safeguards — copies available on request.

6. Retention

Inquiry and quote records: kept for up to 36 months after the last interaction, then deleted or anonymized.

Customer / order records: retained as required by PRC tax and accounting law (typically 10 years).

Analytics data: aggregated, kept for up to 24 months.

You may request early deletion — see section 8.

7. Security

All form submissions use TLS in transit; Supabase storage is encrypted at rest; keys are assigned on a least-privilege basis; administrative actions are audit-logged. We do not process payment information on the Site — all transactions are completed via bank transfer with your bank.

8. Your rights

Under PRC PIPL, GDPR, CCPA and similar regulations, you have the right to access, rectify, delete, restrict processing of or port your personal data, and to object to processing based on legitimate interest. You also have the right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, email privacy@himingcsii.com from the address you originally submitted. We will verify and respond within 30 days.

9. Cookies and tracking

Only strictly necessary cookies are loaded by default. Analytics cookies (Vercel Analytics) and AI chat cookies are loaded only after you opt in via the first-visit banner. See the Cookie Policy for details.

10. Changes to this policy

Material changes will be posted on this page and the "Last updated" date refreshed. Continued use after changes take effect constitutes acceptance.