Chính sách quyền riêng tư

This policy covers hebeineijuan.com (Hebei Industry), its language sub-paths and the public endpoints under /api/. The site is a free, non-commercial industry map for Hebei: no listing fees and no paid rankings.

Operator: the Hebei Industry site operator. We keep a single contact channel: hello@hebeineijuan.com, answered on weekdays 9:00–18:00 (Beijing time). Use it for any question about personal information.

In one line: browsing requires no account; we use no advertising or cross-site tracking cookies; we never sell, rent or trade any information.

You can browse everything without providing any personal information. We never ask for a legal name or ID number, and request no device permissions such as location, contacts or photos. Four kinds of information are collected, each tied to a specific use:

• Usage analytics (automatic): page path, interface language, referring site domain, browser time zone, and the event itself (search terms, the industry or company clicked, share channel, language switch). These records carry no identifier of any kind — we generate no session id and write no cookie or local storage, so two visits by the same person cannot be linked together in the data.
• Server-side records (automatic): a truncated IP address — the last IPv4 octet and the last two IPv6 groups are zeroed before storage (203.0.113.45 is stored as 203.0.113.0) — plus the country code determined by the CDN. Full IP addresses are not stored and no device fingerprinting is performed.
• "Ask Hebei" conversations: your question, the generated answer, the language and the response time are logged so we can evaluate and improve answer quality. Please do not type sensitive personal data such as ID or bank card numbers into the question box.
• Feedback: the text you write, plus an optional contact (email / WeChat / WhatsApp). A contact is collected only if you choose to leave one, and is used only to reply to you.
• Listing applications: company name, contact person, phone number and email address are required; city and county, industry, main products, founding year, size, description and website are optional. We send the review result and any follow-up request to the email address you give. Before submission the form is kept in your own browser storage so you can resume a half-filled form.
• Sourcing requests: the request text, your company or name (optional), email (required) and messaging handle (optional) that you enter on a company page or an answer card. They are emailed, together with the request, to the companies you selected (the company replies to your address) and kept server-side for follow-up; they are not used for anything else and are not given to companies you did not select.
• Hosting and CDN logs: Cloudflare, our hosting and CDN provider, generates access logs including IP addresses under its own policy, used for security and rate limiting.

• To measure traffic and search behaviour, so we know which industry data to add and which dead-end searches to fix.
• To produce aggregate reports, which contain no fields that identify an individual.
• To review listing applications: we contact the applicant to confirm the company’s public information and to notify them of the result.
• To reply to feedback or enquiries you send us.
• For security, rate limiting and troubleshooting.

None of this information is used for advertising, for selling user profiles, or for automated decisions that produce legal effects on an individual.

Company pages show only publicly verifiable information: company name, public address, website, the phone number published on that website, founding year, main business and public honours — each with a source link and a verification date. We neither collect nor publish non-public contacts such as a personal WeChat ID or private mobile number.

The contact name, phone number and email address in a listing application are used only to verify it, to notify you of the outcome, and to relay sourcing requests that buyers send to your company through this site (you can ask us to stop relaying at any time). They are never published on the site, sold, passed to third parties for matchmaking or marketing, or used for bulk promotion.

If you represent a listed company and believe the information shown is wrong or should not be shown, you can request a correction or removal as described in section 8.

The site sets no advertising or cross-site tracking cookies and joins no ad network. To remember your preferences we write the following entries to your browser’s local storage:

• hb-lang-choice — the language you picked manually in the language switcher.
• hbnj-theme — your dark / light theme preference.
• hbj-join-draft — your listing form draft, kept only in your own browser.

All three are preferences or drafts created by your own actions; none is used for analytics and none is sent to us. Analytics writes nothing to your browser at all. You can clear them in your browser settings at any time; browsing still works, you only lose the saved preferences and draft.

The following third parties process data where it is necessary to provide the service:

• DeepSeek (Hangzhou, servers in mainland China): "Ask Hebei" sends your question and conversation context to its large-language-model API to generate an answer.
• Cloudflare: static hosting, CDN, the D1 database and security. Its nodes and databases may sit outside mainland China, so the records described above may be stored across borders.
• Map tiles: visitors in mainland China load tiles from Tianditu (the national geographic information public service platform), others load CARTO / OpenStreetMap; your browser requests those images directly from the provider. When no Tianditu service key is configured, visitors in mainland China see a static provincial schematic served from this site, and no third-party map service is contacted.
• Google Fonts: web fonts, with an automatic fallback to system fonts if they fail to load.
• Baidu auto-submit: Chinese pages load a script provided by Baidu that submits the current page URL for indexing; it involves no personal information about you.

Beyond these service-necessary cases we do not sell, rent or trade your information to anyone; we disclose it to authorities only where the law expressly requires it.

Analytics events and Q&A logs are kept as long as the analysis needs them and cleared afterwards; listing applications are retained after review so we can re-check and update the company entry, and are deleted on request as described in section 8.

Security measures: admin endpoints accept only a Bearer token compared in constant time, public endpoints are rate-limited per IP, and secrets are never committed to the repository. Note that no internet transmission or storage can be guaranteed error-free; be careful about submitting sensitive information on any website.

Under the Personal Information Protection Law of the People’s Republic of China and related rules, you may access, copy, correct, supplement or delete the personal information we hold about you, withdraw a consent you previously gave, or ask us to explain this policy.

How: email hello@hebeineijuan.com with your specific request and something we can verify you by (for example the company name and the last four digits of the phone number used in your listing application). We reply within 15 working days; if we cannot verify your identity we will check with you first, so that no one else’s data is removed by mistake.

Please note that analytics events contain no name, email, full IP address or session identifier of any kind and cannot be traced back to an individual, so records of that kind cannot be looked up and deleted per person.

The site is offered to overseas visitors in several languages, so the following applies under the GDPR / UK GDPR if you visit from the EEA, the UK or Switzerland.

• Analytics is not personal data here: we set no cookies and write no local storage, generate no session identifier, do no device fingerprinting, and the server keeps only a truncated IP (last segment zeroed). That is why you see no consent banner — there is no tracking to consent to.
• Information you actively submit (a listing application, feedback, a question to the agent) is processed under Art. 6(1)(b) GDPR (steps taken at your request) and Art. 6(1)(f) (our legitimate interest in running and improving the site); you may object to the legitimate-interest processing at any time.
• You have the rights of access, rectification, erasure, restriction, portability and objection — see "Your rights and how to exercise them" above for how to exercise them — and you may lodge a complaint with the supervisory authority in your country.
• International transfers: the site runs on Cloudflare and its database nodes may sit outside the EEA; questions to the agent are sent to DeepSeek in mainland China. Please avoid entering anything in the question box or the forms that you do not want to leave your region.

The site is run by an individual in mainland China. It is small, does no profiling and no targeted advertising, and has not appointed an EU representative under Art. 27 GDPR; if you have a question about that, contact us at the address given in the section above.

The site serves sourcing, industry research and export-trade needs. It is not directed at children under 14 and we do not knowingly collect their personal information. Guardians who find that a child has submitted such information should contact us for deletion.

Updates are published on this page and reflected in the "Last updated" date at the top. Material changes to what we collect or why will also be flagged on the home page or in the footer. Continuing to use the site means you accept the updated policy.