Privacy Policy

1. Who we are

The website grechofacer.com is operated by:

GUANGXI GRECHO INDUSTRY CO., LTD. is the controller responsible for deciding why and how personal data submitted through this website is processed. References to “GRECHO”, “we”, “us” or “our” mean GUANGXI GRECHO INDUSTRY CO., LTD.

2. Scope of this policy

This Privacy Policy applies to personal data processed through:

• grechofacer.com;
• the GRECHO contact and technical-data request form;
• requests for samples, quotations and technical documents;
• communications relating to an inquiry submitted through the website;
• optional email-marketing preferences collected through the website; and
• technical and security information generated when the website is accessed.

This policy does not apply to third-party websites linked from our website. Those websites are responsible for their own privacy practices.

3. Personal data we collect

3.1 Information you provide

Depending on how you use the website, we may collect:

• contact person name;
• business email address;
• company name;
• country or region;
• telephone or WhatsApp number;
• company website;
• company type;
• product or material direction;
• current review or purchasing stage;
• requested document types;
• project, application or technical requirements;
• sample, quotation or document-request details;
• communications and follow-up correspondence; and
• optional marketing preferences.

3.2 Website and technical information

When you access the website, our hosting, security and server systems may automatically process limited technical information, including:

• IP address;
• browser type and version;
• device and operating-system information;
• requested page or URL;
• referring page;
• date and time of access;
• server, security and error logs; and
• information required to diagnose faults, prevent abuse and maintain security.

GRECHO does not intentionally add a full IP address to website forms, custom form fields, dataLayer event parameters or analytics custom dimensions. A full IP address may nevertheless be temporarily processed by hosting, network or security systems for security, fraud prevention, troubleshooting and service operation.

3.3 Source and campaign information

The website may record non-sensitive information connected with an inquiry, including:

• source page and referring URL;
• UTM source, medium, campaign, term or content;
• requested product route;
• solution area;
• product direction; and
• requested document category.

We use this information to understand how an inquiry reached us and route it to the appropriate internal team.

4. How we use personal data

We may process personal data to:

• respond to inquiries;
• understand a customer’s board type, application and technical requirements;
• assess possible material or product directions;
• coordinate sample review;
• prepare or discuss quotations;
• provide Product Briefs or approved marketing documents;
• review requests for TDS, SDS, test reports or controlled documents;
• manage project and business communications;
• maintain records of customer requests and follow-up;
• improve website navigation and inquiry handling;
• diagnose technical problems;
• prevent misuse, spam, fraud and security threats;
• comply with applicable legal and regulatory obligations;
• establish, exercise or defend legal claims; and
• send optional marketing communications where permitted.

5. Legal bases for processing

5.1 Steps requested before entering into a contract

We may process information where necessary to respond to a quotation, sample, product, technical-document or commercial request made by you.

5.2 Legitimate interests

We may process information where necessary for our legitimate business interests, including:

• handling genuine B2B inquiries;
• communicating with customer and supplier representatives;
• assessing applications and material requirements;
• maintaining business records;
• improving website and inquiry processes;
• protecting our website, systems and communications; and
• preventing misuse or fraud.

Where we rely on legitimate interests, we consider whether the processing is necessary and whether your interests, rights or freedoms override those interests.

5.3 Consent

We may rely on consent for:

• optional email marketing;
• non-essential analytics cookies;
• advertising cookies;
• advertising measurement; and
• other processing for which applicable law requires consent.

You may withdraw consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.

5.4 Legal obligations

We may process or retain data where necessary to comply with applicable laws, regulatory requirements, court orders, tax obligations or lawful requests from competent authorities.

6. Who may access or receive personal data

Access inside GRECHO is limited to authorised personnel who need the information for their work, including authorised website-operations personnel, authorised sales personnel and authorised company-management personnel.

We also use service providers to support website and business operations.

We may also disclose information where reasonably necessary to:

• professional service providers, technical providers, auditors or advisers;
• courts, regulators or public authorities;
• investigate fraud, misuse or security incidents;
• comply with a legal obligation; or
• protect the rights, property and safety of GRECHO or others.

We do not sell personal data to advertisers or unrelated third parties.

7. International data transfers

GRECHO is established in the People’s Republic of China. Information submitted by visitors outside China may therefore be transferred to and processed in China by GRECHO, authorised personnel, the enterprise-email provider and the internal-collaboration provider.

The website’s primary hosting environment is located in the United Kingdom. Related account, support, security or infrastructure processing may occur in other jurisdictions used by the hosting provider.

The data-protection laws of China, the United Kingdom and other applicable jurisdictions may differ from those of the country in which you are located.

We apply organisational and technical measures intended to restrict access and protect information. Where applicable law requires a specific transfer mechanism or additional safeguard, GRECHO will assess and implement the required measures for the relevant processing activity.

8. Data retention

We generally retain website inquiry and form-submission information for up to 12 months after the most recent substantive interaction.

Where an inquiry becomes an active sample, quotation, supply, technical-review or commercial project, information may be retained for the duration of that project and for up to 12 months after the most recent substantive interaction.

Information may be retained for longer where reasonably necessary to:

• comply with legal obligations;
• manage an active contractual relationship;
• resolve a dispute;
• prevent fraud or misuse;
• establish, exercise or defend legal claims; or
• maintain a minimal marketing-suppression record.

Technical, access, error, security and email logs are retained according to relevant system settings, service-provider defaults and mandatory legal requirements. Where GRECHO directly controls a technical log, our operational target is normally to retain it for no longer than 90 days unless a security incident, dispute or legal obligation justifies a longer period.

When information is no longer required, we take reasonable steps to delete, anonymise or securely restrict it.

9. Cookies, analytics and advertising technologies

GRECHO uses CookieYes as its consent-management platform. The website uses cookies and similar technologies that are necessary for website security, operation, preference management and technical functionality.

Visitors can select Accept All, Reject All or Customise in the consent banner. Non-essential technologies remain subject to the visitor's applicable choice and are not intended to operate before the required consent is provided.

Google Analytics 4 and Google Ads are not currently deployed. If analytics or advertising services are introduced, this Privacy Policy and the Cookie Policy will be updated to explain the relevant provider, category, purpose, storage duration, consent requirement and how preferences can be changed or withdrawn.

You can reopen the consent controls at any time to change or withdraw your choice.

10. Email marketing

Responding to an inquiry, sending a requested document, coordinating a sample, discussing a quotation or managing a related project is not treated as optional marketing.

Optional product, technical or company-update emails are handled separately.

Where marketing sign-up is offered and applicable law requires consent, we will only add a contact to an email-marketing list after the contact has actively selected a separate marketing option. Marketing consent will not be required in order to submit an ordinary inquiry.

Marketing emails should:

• identify GRECHO as the sender;
• explain the nature of the communication;
• provide a functional unsubscribe method; and
• respect withdrawals, objections and suppression records.

If you withdraw consent or object to direct marketing, we may retain a minimal suppression record so that we do not contact you again for marketing purposes.

11. Data security

We use reasonable technical and organisational measures intended to protect personal data against unauthorised access, alteration, loss, misuse or disclosure.

These measures may include:

• role-based and restricted internal access;
• password and account controls;
• HTTPS transmission;
• server and application security controls;
• backups;
• system updates;
• security logging; and
• internal data-handling procedures.

No internet transmission, email system or storage platform can be guaranteed to be completely secure. You should avoid submitting information that is not necessary for the business request.

12. Your data-protection rights

Depending on the laws applicable to you, you may have the right to:

• request confirmation that we process your personal data;
• request access to your personal data;
• request correction of inaccurate or incomplete information;
• request deletion of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• object at any time to direct marketing;
• withdraw consent;
• request data portability where applicable; and
• lodge a complaint with an applicable supervisory authority.

These rights may be subject to legal conditions, limitations and exceptions.

To exercise a right, email info@grechofiberglass.com. Please include enough information for us to identify the relevant inquiry or communication. We may request reasonable information to verify the identity of the person making the request.

13. Complaints

Please contact us first at info@grechofiberglass.com so that we can review and respond to your concern.

Where applicable, you may also have the right to complain to the data-protection supervisory authority in the country where you live, work or believe an infringement occurred.

14. Children’s privacy

This website is intended for professional and business users and is not directed at children. Children should not submit personal data through the website.

If we learn that personal data relating to a child was submitted without an appropriate legal basis, we will take reasonable steps to delete it.

15. Automated decision-making

GRECHO does not use website inquiry data to make solely automated decisions that produce legal effects or similarly significant effects on an individual.

Website source, route, product and request information may be used to direct an inquiry to the appropriate internal team, but final customer, product, technical-document and commercial decisions involve human review.

16. Third-party links

The website may contain links to third-party websites, platforms or documents. GRECHO is not responsible for the privacy, content or security practices of third-party websites. You should review the privacy information provided by those third parties.

17. Changes to this Privacy Policy

We may update this Privacy Policy when:

• our website or forms change;
• we introduce analytics, advertising or consent-management technologies;
• service providers change;
• our business processes change; or
• legal or regulatory requirements change.

The current version will be published on this page with an updated date. Material changes may be highlighted through an appropriate website notice.