Privacy Policy

This Policy applies to personal data we process about:

• Visitors to our website
• People who contact us by email, web form, social media, or at industry events
• Professional contacts we engage with in the course of B2B business development

This Policy does not apply to third-party websites linked from ours. Please review the privacy notices of those sites separately.

3.1 Information you provide

When you complete our contact form or write to us, we collect:

• Name
• Email address
• Subject of your inquiry
• Message content
• Any files you upload, such as engineering drawings or specifications in formats including PDF, DWG, STEP, IGES, or ZIP, up to 10 MB

When you correspond with us further, we collect what you share, such as job title, employer, business phone, and the content of our communications.

3.2 Information collected automatically

When you visit our website, we and our service providers collect:

• IP address and approximate location at country or city level
• Browser, operating system, and device type
• Pages visited, referral source, and time on page
• Date and time of access

3.3 Information from third parties

In the course of B2B business development, we may obtain professional contact information from publicly available sources, business directories, and commercial business intelligence platforms. This is limited to professional context, including name, job title, employer, business email, business phone, and professional profile.

3.4 Sensitive data

We do not seek special category data under GDPR Article 9 or sensitive personal information under PIPL Article 28, and ask that you do not submit it through our website.

We process personal data for the purposes and on the legal bases set out below.

We do not make decisions with legal or similarly significant effects about you based solely on automated processing.

Our website uses cookies and similar technologies. When you first visit, you will see a cookie banner where you can accept, reject, or customize non-essential cookies. You can change your choices at any time using the preferences link in our website footer.

Categories we use

• Strictly necessary cookies — required for site functionality, including remembering your cookie preferences. No consent required.
• Analytics cookies — set by Google Analytics 4 to understand how visitors use our website. Set only with your consent.

Categories we do not currently use

We do not currently use advertising cookies, retargeting pixels, social media tracking, or behavioral profiling tools.

You can also manage cookies through your browser settings, and opt out of Google Analytics specifically using the Google Analytics Opt-out Browser Add-on.

We use several services provided by Google LLC and its affiliates. We list them here in the interest of transparency.

• Google Analytics 4 — measures website traffic and usage. Data is processed by Google in the United States and other locations. We have enabled IP anonymization and have not enabled advertising features. Consent is required and obtained via our cookie banner.
• Google Workspace (Gmail) — provides our business email infrastructure. When you email us, your messages are stored on Google’s servers, which may be located in the United States or other Google data center regions.
• Google Fonts — the typefaces used on this website are self-hosted. Font files are downloaded at build time and served from our own domain, so your browser does not request them from Google and no IP address is transmitted to Google for font delivery.

Google’s processing of your data is governed by its own Privacy Policy and, where applicable, the EU-US Data Privacy Framework.

We do not sell your personal data. We share it only with the categories of recipients listed below, under data processing agreements where required.

We may also share personal data with our professional advisors, including legal, accounting, and insurance advisors, where necessary; with competent authorities in response to lawful requests; and with a successor entity in the event of a merger, acquisition, or sale of assets.

We are a Chinese company serving customers internationally. Personal data we receive is processed across multiple jurisdictions:

• Our website is hosted by Vercel Inc. and served from its global edge network.
• Inquiries submitted through our website are delivered to our business email through Resend, whose infrastructure is located in the United States.
• Inquiries are received and handled by our headquarters in China, where authorized colleagues may access the information necessary to respond to your inquiry and manage any resulting business relationship.

Legal bases for transfers from the EEA, UK, and other restricted jurisdictions

• Transfers necessary to respond to your inquiry rely on the pre-contractual measures derogation under GDPR Article 49(1)(b).
• Transfers to our hosting and email service providers in the United States are made under data processing agreements incorporating the European Commission’s Standard Contractual Clauses, or under an equivalent transfer mechanism where the provider is certified under the EU-US Data Privacy Framework.
• Transfers based on consent, such as marketing or non-essential cookies, rely on GDPR Article 49(1)(a).

China is not the subject of an EU or UK adequacy decision. Access from China is limited to authorized personnel processing your data for the purposes described in this Policy, subject to the security measures in Section 10.

We retain personal data only for as long as necessary for the purposes for which it was collected.

We may retain data longer where required by tax, accounting, or other applicable laws.

We apply technical and organizational measures appropriate to the risk, including encrypted connections through HTTPS/TLS, access controls, two-factor authentication on administrative accounts, role-based permissions, and regular software updates.

No system is perfectly secure. In the event of a personal data breach affecting you, we will notify you and the relevant authority where required by law.

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data in certain circumstances
• Restriction — limit how we process your data in certain circumstances
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests, including B2B outreach
• Withdraw consent — for any processing based on your consent
• Lodge a complaint — with a supervisory authority, as described in Section 14

We send commercial communications only where we have your consent or where you are a professional contact in our target industries and we have a legitimate interest in B2B engagement.

You can opt out at any time by:

• Clicking the unsubscribe link in any marketing email we send you
• Replying to ask us to stop
• Emailing contact@tsingbay-tech.com

Opting out of marketing does not affect communications necessary to respond to your inquiries or fulfill an existing business relationship.

Our website and services are directed to business professionals. We do not knowingly collect personal data from anyone under 16. If you believe we have, please contact us and we will delete it.

Where you reside in one of the jurisdictions below, the following supplements this Policy.

14.1 China (PIPL)

In addition to the rights in Section 11, you have the right to an explanation of our processing rules, the right to port your personal information to another handler that meets the requirements set by the Cyberspace Administration of China, and the right to decide how your personal information is handled within the limits of applicable law. Where we transfer personal information out of mainland China, we will comply with the cross-border transfer requirements under PIPL.

14.2 European Union and European Economic Area

You have the right to lodge a complaint with your national data protection supervisory authority. A list is available at edpb.europa.eu.

14.3 United Kingdom

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

14.4 United States — California

If you are a California resident, you have the right to know what personal information we collect, to delete personal information, to correct inaccurate information, and to opt out of the sale or sharing of personal information.

We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act. To exercise these rights, contact us at legal@tsingbay-tech.com.

We may update this Policy from time to time. When we make material changes, we will update the “Last Updated” date above and, where appropriate, notify you on our website.

For any questions, requests, or complaints regarding this Policy:

This Privacy Policy was last reviewed on 28 August 2026.