Privacy
Privacy Policy
Last updated · April 2026
This page explains how we — CALMURA Coatings(“CALMURA”, “we”, “us”) — collect and use the information you provide on this website. We try to keep this short, plain and honest: we are a sourcing & project services team, and the only personal data we touch is what you send us when you ask for a quote or sample.
1. Who we are
CALMURA Coatings is a project services team based in Foshan, Guangdong, China. Sales contact: sales@calmuracoatings.com / WhatsApp · WeChat +86 188 2086 5154. For privacy questions please write to the same email with the subject line “Privacy request”.
International orders are invoiced and shipped through bonded export agent partners. The legal entity issuing your commercial invoice is disclosed under NDA on serious enquiry — see the Contact page for the “Who you’re talking to” transparency block.
2. What we collect
When you submit the contact form on this site, we collect:
- Your name
- Company name
- Work email
- Country (optional)
- Project topic and free-form message
- Partnership tier, if you arrived via a Partners-page link
We do notuse cookies for advertising. We use minimal first-party analytics (Vercel Analytics & Speed Insights) to count page views and measure performance — these run without third-party cookies and without persistent visitor tracking.
3. Lawful basis (GDPR Art. 6)
We process your enquiry data on the basis of your request to take steps prior to entering into a contract (Art. 6(1)(b) GDPR). If you later become a customer, we process invoicing and shipping data on the basis of contract performance and our legitimate business interest (Art. 6(1)(b) and (f)).
4. How we use it
We use the data you submit only to:
- Reply to your enquiry and prepare a quotation
- Coordinate samples, lab evaluations and shipping
- Maintain the commercial record of our communication
We do not sell, rent or trade your contact data. We do not add you to a marketing list without an explicit opt-in.
5. Who sees it
Enquiries land in the inbox of our project services team. We share minimum necessary detail with:
- Our production partners — only to confirm a quotation
- Our bonded export agent partners — only when a contract is signed
- Freight forwarders & carriers — only to ship your goods
Email is delivered via Resend. Site hosting and minimal analytics run on Vercel. Both are GDPR-compliant processors with public DPAs.
6. International transfer
Our project services hub is in mainland China. If you are an EU, UK or Swiss resident, your enquiry data is transferred outside of the EEA when you submit the form. We rely on the European Commission’s Standard Contractual Clauses (2021/914) with our infrastructure providers and apply additional safeguards including transport-layer encryption and access controls limited to the project services team.
7. Retention
Enquiry messages are kept for up to 24 months after our last communication, then deleted from active storage. Commercial records (invoices, contracts, shipping documents) are retained for the period required by export, customs and tax law in the jurisdictions involved — typically 5 to 10 years.
8. Your rights
You have the right, subject to applicable law, to request access, rectification, deletion, restriction and portability of your personal data, and to object to specific processing. To exercise any of these rights, email sales@calmuracoatings.com with the subject line “Privacy request”. We aim to respond within 30 days.
If you are an EU/UK resident and we have not addressed your concern, you have the right to lodge a complaint with your local data protection authority.
9. Cookies
We use no advertising or third-party tracking cookies. The only first-party storage on this site is what your browser uses for basic functioning and what Vercel Analytics anonymously aggregates for traffic counts. There is nothing to opt out of — we don’t set persistent identifiers in your browser.
10. Changes
We’ll update this page if we change how we handle your data, and update the “Last updated” date at the top. Material changes will be flagged on the Contact page for 30 days.
This policy is provided in good faith and intended to be aligned with GDPR (EU 2016/679), UK GDPR and PIPL principles. It is not legal advice. If you need a Data Processing Agreement (DPA) for your own compliance file, email us — we will send the relevant processor DPAs and our internal data-handling commitment letter.