Privacy & Data Protection Policy

01. Introduction and Data Controller

QDZRT Graphite (“we”, “us”, or “our”) is committed to protecting the privacy, confidentiality, and security of personal data and technical documents entrusted to us by our clients, partners, and website visitors. This Privacy Policy explains how we collect, process, store, and safeguard your information when you visit our website (www.qdzrt.com), request quotations, submit technical inquiries, or engage in commercial cooperation with us.

For the purposes of applicable data protection laws, including the European Union General Data Protection Regulation (GDPR), the data controller is QDZRT Graphite.

02. Information We Collect

As an industrial B2B manufacturer and material supplier, we collect information necessary to carry out technical evaluations, product quotations, commercial contracts, and customer support. This includes:

• Contact & Business Identification: Full name, professional title, corporate email address, business telephone/WhatsApp number, company name, corporate address, and country/region of operation.
• Commercial & Procurement Information: Graphite materials requested or inquired about, product grades, dimensions, estimated order quantities, delivery terms (Incoterms), and application requirements.
• Technical Drawings & Specifications: After an inquiry is initiated, 2D/3D CAD drawings (such as STEP, DWG, DXF, or PDF files), component tolerances, technical data sheets, and custom machining specifications may be provided by email or another agreed secure channel for technical feasibility review. The public website inquiry form does not upload attachments.
• Technical & Browsing Data: Request metadata such as IP address, browser/user-agent information, and referrer may be processed for security, troubleshooting, and form handling. The public website does not currently load Google Analytics 4, Google Ads tracking, Matomo, or another non-essential analytics/advertising tracker.

03. Legal Bases for Processing

We process your personal data under the following lawful bases:

• Contractual Necessity: Processing required to prepare formal quotations, evaluate CAD drawings, execute purchase orders, arrange production scheduling, and deliver products.
• Legitimate Interests: Processing necessary for our legitimate commercial interests, including improving product documentation, preventing fraud, maintaining website security, and conducting technical B2B follow-ups.
• Legal & Regulatory Compliance: Processing required to comply with mandatory international trade regulations, customs clearance declarations, dual-use export control checks, and tax obligations.
• Consent: Where you have voluntarily opted in to receive technical updates or specific communications, which you may withdraw at any time.

04. Engineering Drawings & Confidentiality Commitment (NDA)

Access to technical files is limited according to operational need and applicable permissions. When an approved manufacturer, logistics provider, IT/service provider or other recipient must receive information to perform the agreed work or meet a legal obligation, disclosure should be limited to what is necessary and handled under the applicable confidentiality, contractual and data-protection requirements. We do not sell customer technical designs as a separate commercial product.

05. How We Use Your Information

We use collected data solely for legitimate industrial business purposes, including:

• Reviewing technical feasibility and providing rapid RFQ (Request for Quotation) responses;
• Coordinating precision CNC machining, material purification, packaging, and export logistics;
• Answering technical inquiries regarding graphite material properties, standards, and certificates of analysis (COA);
• Fulfilling statutory obligations regarding export licensing, customs documentation, and product traceability;
• Enhancing website performance, system diagnostics, and customer service responsiveness.

06. Data Retention and Security

We retain commercial records and inquiry correspondence for as long as necessary to fulfill the business relationship, support warranty commitments, or comply with statutory accounting and export control record-keeping requirements.

The website is served over HTTPS/TLS for browser-to-site transport. We apply technical and organizational measures appropriate to the systems and information involved, including limiting administrative access and reducing unnecessary exposure of customer data. Security controls can change as systems change, and no internet or storage method can be guaranteed to be completely secure.

07. International Data Transfers

Because we serve customers in multiple regions, personal data may be processed or accessed across jurisdictions when necessary for the requested business activity, service provision, legal compliance or technical support. Where applicable law requires specific safeguards for a transfer, the safeguards should be selected according to the actual recipient, destination and processing arrangement rather than assumed generically for every transfer.

08. Your Data Protection Rights

Depending on your jurisdiction (including the EU/EEA under GDPR), you possess the following statutory rights regarding your personal data:

• Right of Access: Request confirmation of whether we hold your personal data and receive a copy of that data.
• Right to Rectification: Request correction of inaccurate or incomplete commercial contact information.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where retention is no longer legally required.
• Right to Restrict or Object to Processing: Object to specific processing activities based on legitimate interests.
• Right to Data Portability: Obtain your data in a structured, machine-readable format.

To exercise any of these rights, please contact us using the details below. We verify identity and respond to all legitimate requests within 30 days without undue delay.