Privacy Policy

1. Who we are

Shenzhen Proud Tek Co., Ltd ("RFIDAK", "we", "us") is an RFID products supply company (trading company managing production on contracted partner lines) founded in 2008 and headquartered at A2109, Zhantao Science & Tech Park, Minzhi Avenue, Shenzhen 518131, Guangdong, China. We operate the website www.rfidak.com and the related inquiry, sample, and B2B services described on it.

For all privacy questions, contact privacy@rfidak.com or our general inquiry email info@rfidak.com.

2. What information we collect

We collect personal data only when you choose to share it with us. Specifically:

• Inquiry forms — name, email, phone (optional), company, country, message content, product / chip / industry preferences, intended order volume.
• WhatsApp / email correspondence — messages, photos, attachments you send us.
• Newsletter signup — email address (if you subscribe).
• Browsing analytics — cookieless traffic measurement via Vercel Analytics. If you allow analytics, Google Analytics also measures page visits and selected inquiry actions using cookies. Our configured events do not include your name, email or inquiry text. Advertising signals and advertising personalization are disabled.
• Server logs — standard web server access logs (IP, user agent, request URL, timestamp) retained for ≤ 30 days for security and abuse detection.

With analytics consent, the product catalog also measures product clicks, filter categories, comparison counts, quote and sample links, and selected document links. Free-text catalog searches stay in your browser and are not sent to analytics. Session storage keeps your filters and shortlist when you return to the catalog.

We do not use advertising trackers, retargeting pixels, or third-party social-media tracking SDKs.

3. How we use your information

• Respond to your inquiry, quote, sample request, or technical question.
• Provide ongoing customer service for an active project or repeat order relationship.
• Send transactional emails (order confirmation, shipping update, sample tracking).
• Send marketing emails only if you have explicitly opted in via newsletter signup; you can unsubscribe at any time via the link in every email.
• Improve the website (page performance, broken links, search relevance) using anonymized analytics.
• Comply with legal, tax, and export-control obligations under PRC and destination-country law.

4. Legal basis (GDPR & PIPL)

If you are in the EU / UK, we process your personal data under one or more of these GDPR Article 6 lawful bases:

• Consent — for newsletter signup and any optional marketing communications.
• Contract — to respond to a quote, fulfil a sample shipment, or deliver a B2B order.
• Legitimate interests — for website security logs, fraud prevention, and B2B follow-up after an inquiry.
• Legal obligation — for tax, export, and customs records.

If you are in mainland China, we process your personal information under the Personal Information Protection Law (PIPL) on the corresponding legal grounds — primarily contract performance and your consent.

5. Who we share with

We share personal data only with the following processors, each under contractual data-protection obligations:

• Vercel Inc. — hosting, edge delivery, anonymous web analytics. Vercel privacy policy.
• Google — optional Google Analytics visit and inquiry-action measurement after consent. Google privacy policy.
• Resend — transactional email delivery for inquiry forwarding to our sales team. Resend privacy policy.
• Logistics partners — DHL, FedEx, UPS, freight forwarders, and customs brokers receive shipping address and contact information necessary to deliver samples and orders.
• Banks & payment processors — receive limited information required to process B2B invoices, T/T transfers, or letters of credit.
• Government authorities — only where required by law (export licensing, customs, tax audits, court orders).

We do not sell, rent, or monetise personal data, and we do not share personal data with advertisers, data brokers, or social-media platforms.

6. International data transfer

RFIDAK is headquartered in China and our website is hosted on Vercel's global edge network. Personal data you submit may therefore be processed in mainland China, the United States (Vercel), the European Union (Vercel edge nodes in Frankfurt / Dublin), and any country involved in shipping your order.

For EU / UK personal data exported to China, we rely on EU Commission Standard Contractual Clauses (2021/914) and provide additional safeguards on request. To request a copy of the SCCs governing your data, email privacy@rfidak.com.

7. Your rights

You have the following rights, regardless of your country of residence:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete information.
• Erasure ("right to be forgotten") — ask us to delete your personal data, subject to legal retention requirements.
• Restriction — ask us to suspend processing while a dispute is resolved.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests, including B2B follow-up.
• Withdraw consent — for newsletter or any marketing channel, at any time.
• Lodge a complaint — with your local data protection authority (e.g. ICO in the UK, CNIL in France, the Cyberspace Administration in China).

To exercise any of these rights, email privacy@rfidak.com. We respond within 30 days and may verify your identity before disclosing data.

8. Data retention

• Inquiry submissions — 24 months from last contact, then archived or deleted.
• Active customer records — for the duration of the commercial relationship plus 7 years for tax / accounting compliance under PRC law.
• Newsletter subscribers — until you unsubscribe.
• Server access logs — 30 days.
• Anonymous analytics — 25 months (Vercel default).

9. Cookies & tracking

Vercel Analytics does not set tracking cookies. Optional Google Analytics starts after your consent and uses cookies with a configured lifetime of up to 180 days. Analytics preferences in the footer lets you change your choice. Local storage remembers this choice and dismissed prompts; session storage retains attribution for inquiries you choose to submit. See the Cookies page for details.

For full details and opt-out instructions, see our Cookies Policy.

10. Security

We protect personal data through HTTPS (TLS 1.3) for all traffic, HSTS preload, strict Content Security Policy, encryption-at-rest for backend storage, and access controls limiting employee data access to a need-to-know basis. Inquiry data is forwarded to internal sales staff over encrypted email channels only.

If we learn of a personal-data breach affecting EU / UK data subjects, we notify the relevant supervisory authority within 72 hours where required, and notify affected individuals without undue delay where the breach is likely to result in a high risk to rights and freedoms.

11. Children

RFIDAK is a B2B website and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has submitted personal data through our site, contact privacy@rfidak.com and we will delete it promptly.

12. Changes to this policy

We may update this Privacy Policy to reflect changes in our services, technology, or legal obligations. The "Last updated" date at the top of this page indicates the most recent revision. Material changes will be flagged on the homepage for at least 14 days before taking effect.

13. Contact us

For privacy questions, data subject requests, or general feedback on this policy: