1. General Provisions
This Privacy and Data Security Policy (hereinafter referred to as the "Policy") defines the procedure for processing and protecting personal data of users of the website trdout.com (hereinafter referred to as the "Website"), owned by ZHEJIANG TRD SCIENCE AND TECHNOLOGY CO (hereinafter referred to as the "Company", "we", "us").
We process personal data in accordance with applicable laws, including the General Data Protection Regulation (GDPR), the Personal Information Protection Law of the People's Republic of China (PIPL), Federal Law No. 152-FZ (Russia), and the California Consumer Privacy Act (CCPA).
Operator Details:
- Name: ZHEJIANG TRD SCIENCE AND TECHNOLOGY CO
- Website: https://trdout.com
- Claims and inquiries email: info@trdout.com
2. Data We Collect
We may collect the following categories of data:
- Identification data: first name, last name, company name, job title.
- Contact data: email, phone number, postal address, shipping address, billing address.
- Payment data: bank card/account details (processed exclusively by certified payment providers; we do not store full card data on our servers).
- Device and session data: IP address, browser type, operating system, language settings, cookie data, visit time, browsing history.
- Transaction data: order history, invoice numbers, payment amounts, delivery statuses.
- Communication data: correspondence via feedback forms, online chat, email, phone calls.
- Marketing data: newsletter preferences, email campaign interaction history, promotional participation.
3. Purposes of Processing
We process data for the following purposes:
- Contract performance: order placement, processing, and delivery; invoicing; account management.
- Communication: responding to inquiries, technical support, order status notifications.
- Marketing and advertising: sending product information, promotions, personalized offers (with consent).
- Analytics and service improvement: analyzing website traffic, behavioral factors, functionality testing.
- Security: fraud prevention, protection against unauthorized access, compliance with legal requirements.
- Legal obligations: compliance with tax, customs, and other applicable laws.
4. Legal Basis for Processing
- Contract performance: when processing is necessary for entering into or performing a sales contract.
- Consent: for marketing communications, certain cookies, and transferring data to third parties for advertising purposes.
- Legitimate interest: for security, analytics, and quality improvement.
- Legal obligation: when required by law.
5. Disclosure to Third Parties
We may transfer data to the following categories of recipients:
- Logistics and courier services: for product delivery.
- Payment gateways and banks: for transaction processing.
- Analytics providers: Google Analytics, Yandex.Metrica, etc. (in anonymized form).
- Advertising platforms: Google Ads, Meta (Facebook/Instagram), etc. (with consent).
- CRM systems and email services: for customer base management and communications.
- Hosting providers and cloud services: for data storage and website operation.
- Government authorities: upon lawful request.
All third parties are contractually bound to confidentiality and adequate security measures.
6. Cookies and Similar Technologies
The Website uses cookies and similar technologies for:
- ensuring website functionality (essential cookies);
- analyzing traffic and user behavior (analytical cookies);
- displaying personalized advertising (marketing cookies).
Upon first visit, users are shown a banner requesting consent for non-essential cookies. Users may change their preferences at any time.
7. International Data Transfers
The Company is registered in China (Zhejiang); servers and processors may be located in different jurisdictions (including China, EU, Russia, USA). For cross-border transfers, we ensure data protection through:
- EU Standard Contractual Clauses (SCC);
- mechanisms provided by PIPL and Federal Law No. 152-FZ;
- certifications and audits of cloud providers.
8. Data Security
We apply a comprehensive set of organizational and technical measures:
- encryption of data in transit (TLS/SSL) and at rest;
- regular backups;
- access control and authentication;
- regular security audits and software updates;
- staff training;
- physical security of server facilities.
9. Data Subject Rights
Depending on applicable law, you have the right to:
- access your data;
- request rectification of inaccuracies;
- request erasure ("right to be forgotten");
- restrict or object to processing;
- receive data in a structured format (portability);
- withdraw consent for marketing;
- lodge a complaint with a supervisory authority.
To exercise your rights, please contact us at info@trdout.com. We will respond within 30 days.
10. Retention Periods
Data is retained for as long as necessary to fulfill the purposes of processing, unless a longer period is required by law. Typically:
- account data — until account deletion;
- order data — for the statute of limitations and tax record periods (usually 5–10 years);
- cookies — according to browser settings and file lifespans.
11. Children's Data
The Website is intended for a B2B audience. We do not knowingly collect data from individuals under 18. If such data is discovered, it will be promptly deleted.
12. Changes to This Policy
We may update this Policy. The current version is always available at: https://trdout.com/privacy. Material changes will be notified via email.
13. Contact Us
For all questions regarding personal data processing:
Email: info@trdout.com
Website: https://trdout.com