Legal
Privacy Policy
1. Who is responsible for your data
ALCellu Chemical Co., Ltd., Shijiazhuang, Hebei, China is the data controller for this website (alcellu.com) for the purposes of the EU General Data Protection Regulation (GDPR) and comparable laws.
Privacy questions and requests go to info@alcellu.com. We acknowledge every request within 12 working hours.
2. What we collect
2.1 Information you give us
- Enquiry and quote form — name, email address, company, country, phone (optional), application, estimated monthly volume and your message.
- Sample request form — the fields above plus a delivery address and the grades you would like to test.
- Document request (TDS, MSDS, sample COA) — email address, company, country and the document you asked for. The file is sent to that address; nothing is served from an open directory.
Fields marked optional can be left empty; the request still reaches us.
2.2 Information collected automatically
Our hosting provider records the usual request data for every request: the page you came from (the referer), your browser user agent and your IP address. When you submit a form, the referer and the user agent are written into our enquiry database along with what you typed. They tell us which page produced an enquiry, and they are the first thing we look at when a submission looks automated.
Your IP address is used for one purpose only — rate limiting the form endpoint so it cannot be used to send bulk mail. It is held in memory for a few minutes and is not written into enquiry records: the enquiries table has no IP column, and a check in our build keeps it that way.
2.3 What a stored enquiry record contains
Every form on this site writes the same kind of record. Exactly these fields are stored:
- your name, email address, company, country and phone number;
- company type, estimated monthly volume, application and the message you wrote;
- the delivery address and the grades you selected (sample request);
- the documents you asked for (document request);
- the address of the page you submitted from, and the page you came from (referer);
- your browser user agent;
- the submission time, and whether the notification email to our sales inbox went out.
The record is written before the notification email is sent, on purpose: if email delivery fails, your enquiry is still in the database and we answer it from there.
3. Why we use it
- To reply to your enquiry and recommend a grade that fits your application.
- To prepare a quotation, including price, trade terms and lead time.
- To send samples and arrange their delivery.
- To issue technical and safety documents for the grades you buy.
- To keep the records that tax and customs law requires us to keep.
Our legal bases are the steps needed before entering a contract and the performance of that contract; our legitimate interest in answering technical questions and in preventing abuse of the forms; and your consent where the law requires it.
We do not run a mailing list. A website enquiry is not a marketing subscription. If we ever send a newsletter or a product announcement, we will ask for your consent separately, and every message will carry an unsubscribe link.
4. Who processes it
Two service providers process personal data on our behalf, under data processing terms:
- Cloudflare, Inc. — hosting, content delivery, the form endpoint that receives your enquiry, and the enquiry database (Cloudflare D1) that stores it.
- Resend, Inc. — delivery of the notification email that carries your enquiry to our sales inbox.
We do not sell personal data, and we do not share it with advertising networks or data brokers. We disclose data to authorities only where we are legally required to.
5. How long we keep it
Enquiry and sample records are kept for as long as is needed to handle your request and to maintain the commercial relationship, and for the period that the tax, accounting and export-control law which applies to us requires. When neither applies, the record is deleted from the enquiry database.
Records that tax, customs or product-safety law requires us to keep are retained for the statutory period, and only for that purpose. Deleting your record from the enquiry database does not remove them.
You can ask us to delete your record earlier — see section 6.
6. Your rights
Subject to the law that applies to you, you may ask us to:
- confirm what personal data we hold about you, and give you a copy;
- correct data that is wrong or incomplete;
- delete data we no longer need;
- restrict or object to how we use it;
- receive your data in a portable format;
- withdraw a consent you gave earlier, without affecting what we did before.
Send any of these to info@alcellu.com with the subject line "Data request". We acknowledge the request within 12 working hours, delete the record from the enquiry database within the period that the law applying to your request requires, and confirm by email once it is done. If you are not satisfied with our answer, you may complain to the data protection authority in your country.
7. International transfers
Our providers operate infrastructure in the European Union and the United States, and parts of our team work from China. Where personal data leaves the European Economic Area, the transfer relies on an adequacy decision or on the European Commission's Standard Contractual Clauses, together with the technical measures described in section 9.
ALCellu Chemical Co., Ltd. is established in China and does not maintain an establishment in the European Union. If you are in the EU and want to exercise a data-protection right, write to info@alcellu.com and we handle the request directly.
8. Cookies and analytics
This site sets no cookies of its own and stores nothing in your browser. There is no analytics script, no advertising pixel and no social embed at the time of writing, so there is nothing to consent to.
Our CDN provider Cloudflare may set a short-lived bot-management cookie
(__cf_bm) to tell human visitors from automated traffic. It is
classified as strictly necessary and carries no advertising identifier.
If we add website analytics — for example Google Analytics 4 — we will publish a consent banner first and update this policy before the first script is loaded. Analytics is never switched on silently.
9. How we protect it
The site is served over HTTPS only. Form submissions are rate limited and validated on the server before they are forwarded. Access to the sales inbox and to the enquiry database is limited to the people who answer enquiries, and document links are sent per request rather than published as an open directory.
10. Changes to this policy
When the way we handle data changes, this page changes with it. The date at the foot of the page is the date of the last substantive edit, not the date the site was last deployed.