Privacy Notice

Information we collect

• Account: your email address, the name and phone number you add, and an optional password, which we store only as a salted hash.
• Company: the legal name, trade name, country and registration or tax ID you give when you buy for a company.
• Delivery addresses: recipient name, email, phone number and address.
• Quotes and orders: the products and hose assembly specifications you choose, your Quote List and saved configurations, RFQs, Proforma Invoices, orders, shipments, cancellations, returns and refunds.
• Proforma Invoice acceptance: the name and business title you type, the time, your IP address and your browser's user agent, kept as evidence of the acceptance.
• Messages and files: what you send us through the website or by replying to our email, including attached photos and documents.
• Refund details: the bank account or PayPal account you give us for a refund. We store these encrypted.
• Payments: you pay by bank transfer or PayPal outside this website. We record the amount, channel and payment reference we receive. We never collect card numbers.
• Sign-in: the IP address you registered from, and the time, method and IP address of your most recent sign-in, each with the approximate country, region and city that Cloudflare associates with the IP address. We use this to protect your account and to investigate misuse.
• Rate limiting: when you request a sign-in code or enter a password, we keep a keyed one-way digest of your IP address to stop repeated attempts. It cannot be turned back into the address.

How we use it

• To create your account, sign you in and keep the account secure.
• To review your RFQs, prepare quotes and Proforma Invoices, build and ship your orders, and handle cancellations, returns and refunds.
• To email you about your account, quotes and orders.
• To keep the business, tax and accounting records we are required to keep, and to resolve disputes.
• We do not use your information for advertising and we do not send marketing email.

Who we share it with

• Cloudflare, which hosts this website, its database and file storage, and receives email replies for us.
• Resend, which sends our email.
• Carriers, freight forwarders and customs brokers, who receive delivery and shipment details so that your order can be delivered and cleared through customs.
• Banks and PayPal, when we send you a refund.
• Public authorities, when the law requires it.
• We do not sell your personal information or share it for cross-context behavioral advertising.

Where it is stored

• Our database and files are hosted by Cloudflare in western North America.
• Our team works in China and accesses this information from there to handle your quotes and orders. Service providers may also process it in other countries.

How long we keep it

• Account, company, address and sign-in information: for as long as your account exists.
• RFQs, Proforma Invoices and their acceptance evidence, orders, payments, refunds and related messages: as business records for tax, accounting and dispute purposes, also after an account is closed.
• Request logs that include IP addresses: up to 7 days.

Cookies

• hs_customer_session: Keeps you signed in. Expires after 30 days.
• hs_quote_session: Keeps your Quote List before you sign in. Expires after 30 days.
• hs_password_authorization: Lets you set a new password after confirming an email code. Expires after 10 minutes.
• Cloudflare may set cookies it needs for security, for example when it shows a verification challenge.
• We use no analytics or advertising cookies.

Your choices and rights

• You can see and update your contact details, company information and addresses in My Account.
• Email privacy@customhoseco.com from your account email address to ask for a copy of your personal information, a correction, or deletion of your account. We delete or de-identify what we are not required to keep, and we aim to reply within 30 days.
• Depending on where you live, for example in California or Canada, you may have additional rights, including complaining to a privacy regulator. Using these rights does not change how we treat you.

Security

• Passwords are stored only as salted hashes, sign-in sessions only as digests, and refund account details encrypted. Staff access to customer information is limited by individual account permissions.
• No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Children

• This website sells hydraulic parts to businesses and adults. It is not intended for children, and we do not knowingly collect information from anyone under 16.

Changes

• When this notice changes, we update it on this page and change the date at the top.

Contact

Hangzhou Rongyao Trading Co., Ltd., Hangzhou, Zhejiang, China. privacy@customhoseco.com