Privacy policy
What this website collects, why it collects it, how long it is kept, and how to have it removed.
Last updated: 21 October 2026
This policy covers www.pdreltest.com and enquiries sent to sales@pdreltest.com. It describes the practice as it applies to visitors of this site.
1. Who is responsible
The data controller is Guangzhou Panda Industrial Technology Co., Ltd. (广州畔达工业科技有限公司), No. 76 Zhucun Avenue West, Zengcheng District, Guangzhou, Guangdong, China. We trade as PDRELTEST.
Contact for any privacy matter: sales@pdreltest.com, +86 152 0201 7803.
2. What we collect
(a) What you send us. Through the quote form: name, company, country, email, phone or WhatsApp (optional), project details, and current supplier or model (optional). If you email us instead, we receive whatever you choose to include.
(b) What is recorded automatically. Page path and language, the referring URL, campaign parameters (utm_*) present in the address you arrived on, which page a form was submitted from, and a hashed form of your IP address and browser user-agent string. The IP address itself is never stored in readable form.
(c) Staff session cookie. The cookie pd_sid is issued only after a successful login at /admin. It is HttpOnly, Secure and expires after 8 hours. Visitors who never log in receive no cookie at all.
3. Cookies and trackers
This site sets no advertising, analytics or profiling cookies. There is no Google Analytics, no advertising pixel, no session-recording or heat-mapping script, and no third-party embed on any public page. The only cookie is the staff session cookie described above. Because no non-essential cookies are used, no consent banner is shown. If that ever changes, the banner will be added before the change goes live, not after.
4. Why we use it, on what legal basis
- Answering your enquiry and preparing a quotation — necessary to take steps at your request before entering into a contract (GDPR Art. 6(1)(b)).
- Keeping the site available and blocking spam — legitimate interest (Art. 6(1)(f)). The hidden honeypot field and the hashed IP exist for this purpose.
- Understanding which pages are actually read — legitimate interest, using hashed identifiers only, with no cross-site tracking and no individual profile.
There is no automated decision-making, no profiling, and no use of your data for advertising.
5. Who else sees it
- Alibaba Mail (Alibaba Cloud) — carries the notification email, so the message content and our sales inbox pass through mail servers located in mainland China.
- Tencent Cloud — hosts this website. The server instance is located in Seoul, South Korea.
No one else. We do not sell, rent or trade personal data, and we do not pass enquiries to marketing lists, resellers or partners.
6. Transfers outside your country
If you are in the EEA, the UK or Switzerland, note that your enquiry is stored on a server in South Korea and the notification email is processed in China. We keep the transferred data to the minimum an enquiry needs — a technical question cannot be answered without the question itself. If you need the specific safeguard applied to a particular transfer, ask in writing and we will answer in writing.
7. How long it is kept
| Record | Retention |
|---|---|
| Enquiry / quotation request | 24 months from last contact, then deleted |
| Contract and invoice records | As long as the applicable law requires |
| Visit statistics | 12 months |
| Daily database backups | 30 rolling snapshots, so a deletion clears from backups within 30 days |
| Staff session cookie | 8 hours |
8. Your rights
You may ask for a copy of your data, correction of anything wrong, deletion, restriction of processing, or object to processing based on legitimate interest, and you may ask for your data in a portable format. Where processing rests on consent, you may withdraw it at any time.
Write to sales@pdreltest.com with the subject line “Data request”. We answer within 30 days. You also have the right to complain to the data protection authority in your country.
9. Security
HTTPS with HSTS across every page. Administrator passwords are stored as scrypt hashes, never in plaintext. The login locks after five failed attempts. IP addresses are hashed before they reach the database. The database file is readable only by the service account, and a daily snapshot is taken at 03:00 server time.
10. Children
This site addresses industrial buyers and engineers. It is not intended for anyone under 16, and we do not knowingly collect data from children.
11. Changes
The date at the top of this page is the date of the last change. If a change affects how existing enquiries are handled, we will say so here rather than silently rewrite the page.
Related: Terms of use · Contact