01 / CONTROLLER & CONTACT
Who handles your information
东莞市诚曦包装制品有限公司, using the public-facing brand Chengxi Packaging, operates this website and determines how enquiry information is used. The English company name supplied for this website and our product catalogue is Dongguan Chengyi Packaging Products Co., Ltd..
Registered address, as shown on the business licence:
广东省东莞市樟木头镇樟罗第三工业区街3号1栋201室
Dongguan, Guangdong, China. This registered address is not a claim about the location or size of production facilities.
Contact us about your information on WhatsApp: +86 133 4612 3362 ↗, or through our enquiry form. Mark a request “Privacy request” and include your enquiry reference if you have one. Do not send identity documents or sensitive personal information in an initial request.
No dedicated privacy email or local privacy representative is asserted here. You can use the verified business WhatsApp contact above for a privacy request.
02 / INFORMATION
Information we collect
- Information you enter: your name, an email address and/or WhatsApp number, and product interest. Your message, company, quantity, size, materials and finishing preferences, target timing and any magnetic-box insert details are optional.
- Enquiry records: a unique reference, submission time, processing acknowledgement, marketing preference and delivery status for our connected systems. A submission identifier helps avoid duplicate records when you retry.
- Optional attribution: with marketing permission, available campaign parameters, advertising click identifiers, the landing-page path and referring-page path. We do not invent missing source information.
- Connection information: the hosting service receives information needed to serve and protect the website, such as IP address and browser information. The enquiry endpoint uses a time-limited hashed connection value to limit repeated attempts.
- WhatsApp communications: any draft you choose to open and any messages you actually send to our business account.
Please provide business information relevant to the project. Do not include payment-card information, government identification, health information or confidential material you are not authorised to share.
03 / PURPOSES & LEGAL BASES
Why we use it
We use enquiry information to review specifications, respond, prepare a quotation, arrange relevant follow-up and maintain a record of the request. We also use technical information to protect the form and manage delivery to our team.
Where GDPR, UK GDPR or comparable rules apply, the basis depends on the relationship and purpose:
- Requested pre-contract steps or a contract: when necessary to respond to a request you make personally or perform an agreement with you.
- Legitimate business interests: where permitted, to communicate with business representatives, manage enquiries and prevent misuse, subject to the individual’s interests and rights.
- Consent: for optional marketing storage, Meta Pixel and eligible server-side advertising conversion sharing. This is separate from acknowledging the processing needed for an enquiry.
- Legal obligations: only where an applicable law requires particular records or disclosures.
We do not use a website Lead event as proof that a WhatsApp message was sent or that a sale took place. This site does not make solely automated decisions with legal or similarly significant effects about your enquiry.
04 / STORAGE & YOUR CHOICES
Cookies and advertising choices
You can reject optional tracking and still submit the form. The same settings button lets you withdraw permission later. Changing your choice affects future website tracking; it does not automatically erase an enquiry or information already shared.
Privacy preference
Browser local storage remembers your choice. The site checks it for up to 90 days, then asks again. Expired entries may remain in browser storage until they are replaced or you clear site data.
Your chosen language is stored in this browser separately from your marketing preference. Changing language does not grant advertising consent.
Marketing attribution
Only with permission, local storage keeps the first and latest recognised source for up to 90 days. Rejection removes the local attribution record. This 90-day limit is not an enquiry-database deletion period.
Advertising identifiers
With marketing permission, Meta may use _fbp and _fbc cookies. This site sets its click-identifier cookie for up to 90 days and attempts to remove these identifiers on withdrawal. Meta’s SDK manages its own cookie behaviour.
Submission protection
Browser session storage supports retry and event-duplication protection. It does not provide an advertising opt-in. Clearing browser data may remove these identifiers.
05 / META ADVERTISING
Meta Pixel and Conversions API
After marketing permission, the browser Pixel measures page visits, selected product views, quote interactions and successfully saved enquiries. The server-side Conversions API sends an eligible Lead only after the enquiry has been saved. Browser and server Lead events use the same enquiry event identifier to support deduplication.
The server event may include your supplied email address and/or international WhatsApp number in hashed form, event time and identifier, the website origin and page path, IP address, browser information and available Meta browser or click identifiers. This matching takes place only with marketing permission. Hashing is a matching measure and does not make the information anonymous.
Our server event does not include your free-text project description, company name or full quotation details. Meta’s browser service also receives technical and page information under its own terms. Do not place personal information in campaign links or URLs. See Meta’s Privacy Policy ↗.
For a new marketing choice that expressly covers enquiry-quality measurement, we may send a separate QualifiedLead event when a team member first verifies a genuine, relevant enquiry. It uses the actual assessment time, a separate event identifier and your voluntarily supplied email and/or international telephone number in hashed form. It does not send your project description, follow-up notes or reasons for rejection, and does not treat a qualification as a purchase. Earlier choices are not automatically upgraded to this additional purpose.
For these newly permitted enquiries, a random, secure HttpOnly browser cookie links a later tracking rejection on this browser to your saved enquiries. Only a hash of that random handle is stored, for up to 90 days of browser recognition. Rejection stops pending quality sharing for the associated records; it cannot retract an event already received by Meta. If you use another browser, clear the cookie or need broader withdrawal, contact us with your enquiry reference. Network failures may delay a browser withdrawal, so contact us if you need confirmation.
06 / PROVIDERS & TRANSFERS
Where information goes
- Cloudflare: hosts and delivers the site, processes the form and stores the enquiry in D1.
- Feishu: receives enquiry details in the configured customer table and business-group notification so the team can follow up. Not every attribution field stored in D1 appears in the group notification.
- Meta: receives eligible advertising events when marketing tracking is permitted.
- WhatsApp: handles a draft or conversation when you choose that channel, as described below.
- Authorised business team members: access the enquiry and relevant communications to handle your request. We may disclose information where required by applicable law.
These services and our team may process information outside your country, including in China and other locations where the providers operate. Provider-specific hosting locations, applicable transfer safeguards and any required local representative arrangements need further confirmation for each target market. We do not assert that a particular transfer agreement or certification is in place without verification.
07 / WHATSAPP
A draft you control
After a successful save, the form tries to open WhatsApp with a short draft containing your name, product interest and supplied contact details, plus your company and message if entered. Optional specifications, advertising identifiers and the internal enquiry reference are not added to this draft. If the browser blocks this, a clearly labelled button lets you continue. The website does not send the WhatsApp message: review it and press Send yourself.
Opening the draft passes its text to WhatsApp through the destination link. That link contains the contact and project fields included in the draft and may be handled or recorded by your browser and WhatsApp. The website does not place that draft in its own address, campaign parameters or advertising events. A direct contact link, without a form submission, opens the business account without creating an enquiry record.
The saved enquiry remains available to our team even if you do not open WhatsApp or do not send the message. WhatsApp processes its service and account information under its Privacy Policy ↗.
08 / RETENTION & DELETION
How long information remains
The website does not currently run automatic deletion of enquiry records. A fixed business retention schedule remains to be confirmed. D1 records, Feishu table entries and group notifications can remain until an authorised team member removes them or a provider applies its own retention rules. Do not interpret a 90-day browser-attribution period as deletion of your enquiry.
You can ask us to review retention or request deletion through the contact channel above. Requests require manual handling and verification. The review must consider whether the enquiry is still active, necessary business or legal records, disputes and applicable retention duties. We will explain any reason that prevents the requested deletion.
A request should cover relevant copies in D1, the Feishu table and group communications. Deleting one record does not automatically remove all copies. Provider backups, Meta records and messages held by you or other recipients may have separate rules; we cannot promise immediate deletion from systems outside our control. This site has no self-service deletion button.
09 / SECURITY
Protecting your enquiry
The public site uses HTTPS. The form validates input, saves a unique reference and uses retry and duplicate-delivery controls. Service credentials are held on the server and are not included in WhatsApp drafts. Notifications are sent to the configured team systems.
No website, device or messaging service is completely secure. Please limit submitted information to what is needed for the business enquiry. Team account access, provider settings and retention procedures also require ongoing operational management.
10 / YOUR REQUESTS
Access, correct or remove information
Depending on applicable law, you may have rights to access a copy of your information, correct it, request deletion or restriction, object to certain uses, obtain portable information or withdraw consent. Some rights depend on the purpose and legal basis, and exceptions may apply.
Send a “Privacy request” through WhatsApp +86 133 4612 3362 ↗ or the enquiry form. Give your enquiry reference and a brief description of the request. We may need proportionate information to verify that the record is yours. Requests are reviewed manually; we do not promise an automatic result or a universal response period. Applicable statutory deadlines still apply.
You may also contact the data-protection authority competent for your location where that right applies. Rejecting optional marketing tracking or raising a privacy request does not prevent you from asking us about a project.
11 / UPDATES & SCOPE
Keeping this policy accurate
This policy describes the current website and enquiry workflow as of the date above. We will update the date when the text or relevant processing changes. New optional advertising uses should be explained before permission is requested.
Further legal review: the fixed enquiry-retention schedule, target-market legal requirements and international-transfer arrangements remain to be confirmed. This policy is not a statement of compliance with every country’s laws.