Skip to content
BOLANTE International Trade
Legal

Privacy Policy

What personal data we collect through this site, why we collect it, how long we keep it, and how to exercise your rights under the GDPR.

Last updated: 6 September 2026

Who is responsible for your data

Nanjing Bolante International Trade Co., Ltd. decides why and how the personal data collected through this site is processed. In the language of the GDPR, we are the controller.

We are established in China, not in the EU. Because we offer goods to people in the European Union, the GDPR applies to that processing all the same.

Registered name
Nanjing Bolante International Trade Co., Ltd.
Registered address
Room 3209, Unit 2, Building 11, Pukou AvenueNanjing Area, China (Jiangsu) Pilot Free Trade ZoneNanjing, Jiangsu Province, China

What we collect, and why

We collect what we need to answer you, and to run an account if you ask for one. There is no profiling, no advertising, and nothing is sold or passed to anyone for their own purposes.

Quote requests

When you send an enquiry we receive what you type into the form. We use it to answer you and to prepare a quotation. The legal basis is your consent, given by ticking the box on the form, together with the steps taken at your request before entering into a contract.

Collected: Company name, contact name, country, email address, phone or WhatsApp, models of interest, estimated quantity, target delivery date, and your message.

Accounts

If you create an account we store your email address, a cryptographic hash of your password — never the password itself — and any company details you choose to save. They are used to sign you in, show your enquiry history and pre-fill the quote form. The legal basis is performing the service you asked us for.

Technical logs

Our hosting provider records ordinary server information such as IP address, browser type and the page requested. These logs keep the site running and help detect abuse. The legal basis is our legitimate interest in a secure, working website.

Audience statistics

Any analytics we run is a cookieless tool producing aggregate counts only — no cross-site tracking, no advertising identifiers, no profile of you. It loads only if you accept, and you can withdraw at any time.

Cookies and local storage

Strictly necessary

If you sign in, we set a session cookie so you stay signed in between pages. Without it the account area cannot work. No consent is required for this and it carries no advertising value.

Your consent choice

Your answer to the analytics question is kept in your browser's local storage rather than in a cookie. It never leaves your device.

Analytics

Any analytics we run is cookieless and stores nothing on your device. It is loaded only after you accept.

Who else processes your data

We use a small number of service providers who process data on our instructions and for no purpose of their own. Each is bound by a data processing agreement.

ProviderWhat they doWherePolicy
SupabaseDatabase, sign-in and file storageEuropean UnionView
ResendSending the notification email when an enquiry is submittedEuropean Union and United StatesView
VercelWebsite hosting and deliveryGlobal edge networkView

Transfers outside the EU

Our team is in China. When you send an enquiry, the people who answer it read it from China. That is a transfer of personal data to a country the European Commission has not found to offer an adequate level of protection.

The data itself is stored in the European Union, and access from China is limited to the people handling your enquiry. For that transfer we rely on your explicit consent under Article 49(1)(a) of the GDPR, given when you tick the consent box on the form.

How long we keep it

We do not keep personal data for longer than we need it.

WhatHow long
Quote requests and any quotation file attached to them24 months after our last contact about it, unless it led to a contract whose records we must keep
Your account and saved company detailsUntil you ask us to delete the account
Server logsUp to 30 days
Audience statisticsAggregate counts only; nothing identifying you is retained

Ask us to delete something sooner and we will, unless the law requires us to keep it.

Your rights

Under the GDPR you have the following rights over your personal data. Exercising them is free, and we will not ask you to justify yourself.

  • Access — a copy of the personal data we hold about you.
  • Rectification — correction of anything inaccurate or incomplete.
  • Erasure — deletion of your data where we no longer have grounds to keep it.
  • Restriction — a pause on processing while a dispute is resolved.
  • Portability — your data in a structured, machine-readable file, or sent to another provider.
  • Objection — you may object to processing based on our legitimate interests.
  • Withdrawal of consent — at any time, without affecting what was lawful before you withdrew.
  • Complaint — you may complain to the data protection authority where you live, work, or where you think the problem occurred.

How to exercise your rights

Write to the address below and we will answer within one month. We may ask for something that confirms you are the person the data is about, but only where we genuinely cannot tell.

ssw@bolantetrade.com

Changes to this policy

If we change how we handle personal data we will update this page and the date at the top. Where a change materially affects someone who has already sent us an enquiry, we will say so by email.