Privacy Policy
What personal data we collect through this site, why we collect it, how long we keep it, and how to exercise your rights under the GDPR.
Last updated: 6 September 2026
Who is responsible for your data
Nanjing Bolante International Trade Co., Ltd. decides why and how the personal data collected through this site is processed. In the language of the GDPR, we are the controller.
We are established in China, not in the EU. Because we offer goods to people in the European Union, the GDPR applies to that processing all the same.
- Registered name
- Nanjing Bolante International Trade Co., Ltd.
- Registered address
- Room 3209, Unit 2, Building 11, Pukou AvenueNanjing Area, China (Jiangsu) Pilot Free Trade ZoneNanjing, Jiangsu Province, China
- ssw@bolantetrade.com
What we collect, and why
We collect what we need to answer you, and to run an account if you ask for one. There is no profiling, no advertising, and nothing is sold or passed to anyone for their own purposes.
Quote requests
When you send an enquiry we receive what you type into the form. We use it to answer you and to prepare a quotation. The legal basis is your consent, given by ticking the box on the form, together with the steps taken at your request before entering into a contract.
Collected: Company name, contact name, country, email address, phone or WhatsApp, models of interest, estimated quantity, target delivery date, and your message.
Accounts
If you create an account we store your email address, a cryptographic hash of your password — never the password itself — and any company details you choose to save. They are used to sign you in, show your enquiry history and pre-fill the quote form. The legal basis is performing the service you asked us for.
Technical logs
Our hosting provider records ordinary server information such as IP address, browser type and the page requested. These logs keep the site running and help detect abuse. The legal basis is our legitimate interest in a secure, working website.
Audience statistics
Any analytics we run is a cookieless tool producing aggregate counts only — no cross-site tracking, no advertising identifiers, no profile of you. It loads only if you accept, and you can withdraw at any time.
Who else processes your data
We use a small number of service providers who process data on our instructions and for no purpose of their own. Each is bound by a data processing agreement.
Transfers outside the EU
Our team is in China. When you send an enquiry, the people who answer it read it from China. That is a transfer of personal data to a country the European Commission has not found to offer an adequate level of protection.
The data itself is stored in the European Union, and access from China is limited to the people handling your enquiry. For that transfer we rely on your explicit consent under Article 49(1)(a) of the GDPR, given when you tick the consent box on the form.
How long we keep it
We do not keep personal data for longer than we need it.
| What | How long |
|---|---|
| Quote requests and any quotation file attached to them | 24 months after our last contact about it, unless it led to a contract whose records we must keep |
| Your account and saved company details | Until you ask us to delete the account |
| Server logs | Up to 30 days |
| Audience statistics | Aggregate counts only; nothing identifying you is retained |
Ask us to delete something sooner and we will, unless the law requires us to keep it.
Your rights
Under the GDPR you have the following rights over your personal data. Exercising them is free, and we will not ask you to justify yourself.
- Access — a copy of the personal data we hold about you.
- Rectification — correction of anything inaccurate or incomplete.
- Erasure — deletion of your data where we no longer have grounds to keep it.
- Restriction — a pause on processing while a dispute is resolved.
- Portability — your data in a structured, machine-readable file, or sent to another provider.
- Objection — you may object to processing based on our legitimate interests.
- Withdrawal of consent — at any time, without affecting what was lawful before you withdrew.
- Complaint — you may complain to the data protection authority where you live, work, or where you think the problem occurred.
How to exercise your rights
Write to the address below and we will answer within one month. We may ask for something that confirms you are the person the data is about, but only where we genuinely cannot tell.
Changes to this policy
If we change how we handle personal data we will update this page and the date at the top. Where a change materially affects someone who has already sent us an enquiry, we will say so by email.
