Политика конфиденциальности

This policy covers the Hebei Industry website (the domain you are visiting and hebeineijuan.com), its language sub-paths and the public endpoints under /api/. The site is currently free and open and charges companies nothing: no listing fees and no paid rankings.

Operator (data controller): Weima Technology (Shanghai) Co., Ltd. (纬蚂科技（上海）有限公司). We keep a single contact channel: hello@hebeineijuan.com, answered on weekdays 9:00–18:00 (Beijing time). Use it for any question about personal information.

In one line: browsing requires no account; we use no advertising or cross-site tracking cookies; we never sell, rent or trade any information.

You can browse everything without providing any personal information. We never ask for a legal name or ID number, and request no device permissions such as location, contacts or photos. Four kinds of information are collected, each tied to a specific use:

• Usage analytics (automatic): page path, interface language, referring site domain, browser time zone, and the event itself (search terms, the industry or company clicked, share channel, language switch). These records carry no identifier of any kind — we generate no session id and write no cookie or local storage, so two visits by the same person cannot be linked together in the data.
• Server-side records (automatic): a truncated IP address — the last IPv4 octet and the last two IPv6 groups are zeroed before storage (203.0.113.45 is stored as 203.0.113.0) — plus the country code determined by the CDN. Full IP addresses are not stored and no device fingerprinting is performed.
• "Ask Hebei" conversations: your question, the generated answer, the language and the response time are logged so we can evaluate and improve answer quality. Please do not type sensitive personal data such as ID or bank card numbers into the question box.
• Feedback: the text you write, plus an optional contact (email / WeChat / WhatsApp). A contact is collected only if you choose to leave one, and is used only to reply to you.
• Listing applications: company name, contact person, phone number and email address are required; city and county, industry, main products, founding year, size, description and website are optional. We send the review result and any follow-up request to the email address you give. Before submission the form is kept in your own browser storage so you can resume a half-filled form.
• Sourcing requests: the request text, your company or name (optional), email (required) and messaging handle (optional) that you enter on a company page or an answer card. They are kept server-side for relay and follow-up; the relay email does not contain your contact details in plain text — the company retrieves them on this site and decides whether to get in touch, and this site does not follow up on its behalf; they are not used for anything else and are not given to companies you did not select.
• Server and CDN logs: pages and the API are served from Alibaba Cloud servers in Beijing; scripts, styles, fonts, images and video are delivered by Cloudflare’s edge nodes. Both keep access logs including IP addresses under their own policies, used for security and rate limiting.

• To measure traffic and search behaviour, so we know which industry data to add and which dead-end searches to fix.
• To produce aggregate reports, which contain no fields that identify an individual.
• To review listing applications: we contact the applicant to confirm the company’s public information and to notify them of the result.
• To reply to feedback or enquiries you send us.
• For security, rate limiting and troubleshooting.

None of this information is used for advertising, for selling user profiles, or for automated decisions that produce legal effects on an individual.

Company pages show only publicly verifiable information: company name, public address, website, the phone number published on that website, founding year, main business and public honours — each with a source link and a verification date. We neither collect nor publish non-public contacts such as a personal WeChat ID or private mobile number.

The contact name, phone number and email address in a listing application are used only to verify it, to notify you of the outcome, and to relay sourcing requests that buyers send to your company through this site (you can ask us to stop relaying at any time). They are never published on the site, sold, passed to third parties for matchmaking or marketing, or used for bulk promotion.

If you represent a listed company and believe the information shown is wrong or should not be shown, you can request a correction or removal as described in section 8.

The site sets no advertising or cross-site tracking cookies and joins no ad network. To remember your preferences we write the following entries to your browser’s local storage:

• hb-lang-choice — the language you picked manually in the language switcher.
• hbnj-theme — the light or dark theme you picked manually in the header; the default “follow system” writes nothing, and switching back to it deletes the entry.
• hbj-join-draft — your listing form draft, kept only in your own browser.

All three are preferences or drafts created by your own actions; none is used for analytics and none is sent to us. Analytics writes nothing to your browser at all. You can clear them in your browser settings at any time; browsing still works, you only lose the saved preferences and draft.

The following third parties process data where it is necessary to provide the service:

• DeepSeek (Hangzhou, servers in mainland China): "Ask Hebei" sends your question and conversation context to its large-language-model API to generate an answer; we call its registered model as-is, without fine-tuning.
• Alibaba Cloud (mainland China): the servers and database for pages and the API sit in Alibaba Cloud’s Beijing region; applications, sourcing requests, Q&A records and analytics events are stored there.
• Cloudflare: доставляет статические ресурсы и обеспечивает входящую почту, хранение вложений и совместимость старых почтовых ссылок для hebeineijuan.com. Узлы находятся за пределами материкового Китая; IP попадает в журналы при запросе ресурсов. Отправитель, получатель, тема, текст и вложения писем на наш входящий адрес обрабатываются Cloudflare за пределами Китая, затем передаются в китайскую систему управления. Страницы, формы и интерфейс вопросов официального домена используют серверы в Китае.
• Alibaba Cloud DirectMail (Восточный Китай 1, Ханчжоу): отправляет уведомления о проверке, подтверждения заявок, закупочные запросы и ответы из системы управления. Адреса получателей, темы, тексты и необходимые заголовки передаются почтовому сервису в Китае. Отправитель — hello@hebeigongchang.cn, ответы поступают на hello@hebeineijuan.com; контакты покупателя получают через сайт. Входящая почта по-прежнему проходит через Cloudflare за пределами Китая, поэтому обработка почты не полностью внутренняя.
• Map tiles: the site uses a single base map, Tianditu (the national geographic information public service platform); your browser requests those images directly from it. When no Tianditu service key is configured, or the tiles do not load, you see a static provincial schematic served from this site and no third-party map service is contacted.
• Baidu auto-submit: Chinese pages load a script provided by Baidu that submits the current page URL for indexing; it involves no personal information about you.

Beyond these service-necessary cases we do not sell, rent or trade your information to anyone; we disclose it to authorities only where the law expressly requires it.

Analytics events and Q&A logs are kept as long as the analysis needs them and cleared afterwards; listing applications are retained after review so we can re-check and update the company entry, and are deleted on request as described in section 8.

Security measures: admin endpoints accept only a Bearer token compared in constant time, public endpoints are rate-limited per IP, and secrets are never committed to the repository. Note that no internet transmission or storage can be guaranteed error-free; be careful about submitting sensitive information on any website.

Under the Personal Information Protection Law of the People’s Republic of China and related rules, you may access, copy, correct, supplement or delete the personal information we hold about you, withdraw a consent you previously gave, or ask us to explain this policy.

How: email hello@hebeineijuan.com with your specific request and something we can verify you by (for example the company name and the last four digits of the phone number used in your listing application). We reply within 15 working days; if we cannot verify your identity we will check with you first, so that no one else’s data is removed by mistake.

Please note that analytics events contain no name, email, full IP address or session identifier of any kind and cannot be traced back to an individual, so records of that kind cannot be looked up and deleted per person.

The site is offered to overseas visitors in several languages, so the following applies under the GDPR / UK GDPR if you visit from the EEA, the UK or Switzerland.

• Analytics is not personal data here: we set no cookies and write no local storage, generate no session identifier, do no device fingerprinting, and the server keeps only a truncated IP (last segment zeroed). That is why you see no consent banner — there is no tracking to consent to.
• Information you actively submit (a listing application, feedback, a question to the agent) is processed under Art. 6(1)(b) GDPR (steps taken at your request) and Art. 6(1)(f) (our legitimate interest in running and improving the site); you may object to the legitimate-interest processing at any time.
• You have the rights of access, rectification, erasure, restriction, portability and objection — see "Your rights and how to exercise them" above for how to exercise them — and you may lodge a complaint with the supervisory authority in your country.
• International transfers: the site’s servers and database are in mainland China (Alibaba Cloud, Beijing); questions to the agent are sent to DeepSeek in mainland China; notification and relay emails go out through the mail provider this site uses (name and location in section 6). Please avoid entering anything in the question box or the forms that you do not want to leave your region.

The site is run by a small company in mainland China. It does no profiling and no targeted advertising, and has not appointed an EU representative under Art. 27 GDPR; if you have a question about that, contact us at the address given in the section above.

The site serves sourcing, industry research and export-trade needs. It is not directed at children under 14 and we do not knowingly collect their personal information. Guardians who find that a child has submitted such information should contact us for deletion.

Updates are published on this page and reflected in the "Last updated" date at the top. Material changes to what we collect or why will also be flagged on the home page or in the footer. Continuing to use the site means you accept the updated policy.