Privacy Policy

Last updated: 20 May 2026

1. Introduction

This Privacy Policy explains how LuminaCast Hardware ("we", "us", "our") collects, uses, stores, and protects personal data when you visit luminacasthardware.com or submit an inquiry through this website. We are committed to handling personal data in compliance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) where it applies to our visitors and customers.

2. Data Controller

Brand: LuminaCast Hardware
Legal entity: Huizhou Daxin Hardware Products Co., Ltd. (惠州市达新五金制品有限公司)
Unified Social Credit Code (USCC): 91441303666518471B
Date of incorporation: 24 September 2007
Legal representative: Wang Zhengjun
Registered capital: RMB 1,000,000
Registered address: Building 2, No.13 Taoli Xincun, Chayuan Village, Qiuchang Subdistrict, Huiyang District, Huizhou City, Guangdong Province 516221, China
Email: [email protected]
WhatsApp / International phone: +852 4748 9708
Office landline (China): +86-752-3818578

3. What Personal Data We Collect

• Inquiry form data: name, email address, WhatsApp/phone number, product type of interest, subject and message content you choose to share.
• Technical data (automatic): IP address, browser type, device type, operating system, pages visited, referrer URL, timestamp.
• Cookies and similar technologies: Cloudflare CDN cookies used for security, performance and DDoS protection, plus Google Ads conversion tracking cookies or similar identifiers used to measure advertising leads.

We do not knowingly collect data from anyone under 16 years of age. This website is intended for business buyers, manufacturers and trade professionals.

4. How We Use Your Data

• To respond to your inquiry, prepare quotations and provide product samples.
• To send order-related communications (sample status, shipping updates, payment confirmations).
• To improve our website, content and customer service.
• To protect against fraud, abuse, and security threats.
• To comply with applicable legal obligations (tax, customs, export documentation).

We do not sell or rent your personal data to third parties. We do not use your data for behavioural advertising.

5. Legal Basis for Processing (GDPR)

• Consent — you submit your details voluntarily via the contact form.
• Contract performance — processing necessary to prepare and fulfil orders you request.
• Legitimate interests — site security, fraud prevention, basic analytics to maintain the website.
• Legal obligation — tax records, export documents.

6. Data Sharing

We share limited personal data only with the following categories of recipients, and only as necessary:

• Hosting and CDN: Tencent Cloud (server hosting in Hong Kong) and Cloudflare, Inc. (CDN, security, DDoS protection).
• Internal notifications: Inquiry summaries are forwarded to our sales team via WeCom (Tencent's enterprise messaging platform) so we can respond quickly.
• Email infrastructure: Outbound notifications may pass through standard email transit servers.
• Logistics and customs partners: shipping name, address and order details shared with freight forwarders and customs brokers as needed to fulfil orders.

We do not transfer your data to other third parties for their own marketing purposes.

7. International Data Transfers

Our servers are located in Hong Kong. If you are accessing this website from the European Economic Area (EEA), the United Kingdom, or the Middle East, your data will be transferred to and processed in jurisdictions outside your home country. We rely on appropriate safeguards (including Standard Contractual Clauses where applicable) and ensure that any data is handled in accordance with this Policy.

8. Data Retention

• Inquiry messages: retained for up to 36 months from last contact, then deleted, unless an active business relationship requires longer retention.
• Order and customs records: retained for up to 10 years as required by Chinese accounting and customs law.
• Server access logs: retained for up to 90 days.
• Cookies: as defined by each cookie's expiry; Cloudflare security cookies typically expire within 30 days.

9. Your Rights

Subject to applicable law (including GDPR if you are in the EEA / UK), you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Request erasure of your personal data.
• Restrict or object to the processing of your data.
• Receive a copy of your data in a portable format.
• Withdraw consent at any time (this does not affect lawfulness of processing before withdrawal).
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email [email protected]. We will respond within 30 days.

10. Security

We use TLS (HTTPS) encryption across the entire website, Cloudflare DDoS and bot protection, server-side rate limiting on the inquiry form, and access controls on internal systems. While no method of transmission over the internet is 100% secure, we strive to use commercially acceptable means to protect your personal data.

11. Cookies

This site uses essential cookies set by Cloudflare for security, abuse prevention and CDN performance (for example: __cf_bm, cf_clearance). We also use Google Ads conversion tracking through the Google tag to understand whether advertising visitors submit an inquiry or reach a conversion page. Google may set or read cookies and similar identifiers for ad measurement. We do not use Google Analytics or Facebook Pixel at this time. Where required, visitors should manage consent before non-essential tracking is used.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when changes were last made. Material changes will be highlighted on this page.

13. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

LuminaCast Hardware
Email: [email protected]
WhatsApp: +852 4748 9708