Privacy Policy

ZTRFM Privacy Policy

Policy Version: 2.0
Effective Date: July 23, 2026
Last Updated: July 23, 2026

Introduction

Zhongtuo Cold Bending Technology (Hebei) Co., Ltd. ("ZTRFM", "we", or "us") operates the ZTRFM platform (zt-rfm.com), a B2B sourcing platform connecting global buyers with verified Chinese roll forming and metal processing manufacturers.

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use the Platform. It also explains your rights and how to exercise them.

Please read this policy carefully. By registering or using the Platform, you consent to the practices described here. If you disagree with any part, please stop using the Platform.

1. Information We Collect

1.1 Registration Information. When you create an account, we collect your phone number, name, email address, company name, and position. This is necessary to create your account and verify your identity in a B2B context.

1.2 Verification Documents. For enterprise verification or supplier onboarding, we may collect copies of business licenses, identification documents, and bank account details. We retain these only for the minimum period required.

1.3 Transaction Information. When you place an order, we collect the recipient's name, contact phone, shipping address, and (for invoicing) company name and tax identification number. Payment is processed by licensed third-party providers — we receive only payment result notifications, not card details.

1.4 Usage Data. 

We collect browsing history, search queries, click behavior, device information (model, OS, IP address, browser type, and device identifiers such as IMEI, IMSI, Android ID, OAID, MEID), and interaction data (time spent on product pages, 3D showroom views) through cookies and similar technologies. On the Android client built with DCloud uni-app, these identifiers are collected by the runtime engine solely for device identification, crash analysis, fraud prevention, and platform security, not for cross-app tracking.

1.5 Communication Records. Messages exchanged through the Platform's inquiry and chat tools are stored to facilitate transactions and resolve disputes.

2. Lawful Basis for Processing

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process your personal data under the following lawful bases:

• Contract performance: Processing necessary to provide the Platform Services you requested (e.g., account creation, order processing);
• Legal obligation: Processing required by applicable laws (e.g., record-keeping, tax compliance);
• Legitimate interests: Processing for fraud prevention, security, service improvement, and analytics, balanced against your privacy rights;
• Consent: Processing of non-essential cookies, marketing communications, and optional data (e.g., profile photos) based on your explicit consent.

3. How We Use Your Information

• Creating and managing your account;
• Displaying products relevant to your industry and search behavior;
• Facilitating communication between buyers and suppliers;
• Processing orders, payments, and logistics;
• Conducting factory audits and delivering audit reports;
• Preventing fraud, abuse, and security threats;
• Analyzing usage patterns to improve the Platform;
• Sending service notifications, order updates, and (with consent) marketing communications.

We may anonymize and aggregate data for statistical analysis. Anonymized data does not identify individuals and is not subject to this policy.

4. Cookies and Similar Technologies

We use the following categories of cookies:

Necessary cookies: Required for login, session management, and basic Platform functionality. Cannot be disabled.

Functional cookies: Remember language preferences, region settings, and recently viewed products. Can be disabled but may affect your experience.

Analytics cookies: Help us understand how the Platform is used (page views, session duration, bounce rate). We use this data to improve performance and usability.

Marketing cookies: Used to display relevant product recommendations and advertisements. Only placed with your consent.

You can manage your cookie preferences through the cookie consent banner or your browser settings. Disabling necessary cookies will prevent the Platform from functioning properly.

5. Sharing, Transfer, and Disclosure

5.1 Sharing with Suppliers. When you post an RFQ or place an order, we share your name, company, contact information, and shipping address with the relevant Supplier and, as needed, with logistics providers and customs brokers — all within the scope necessary to complete the transaction.

5.2 Service Providers. We work with authorized partners (cloud hosting, data analytics, payment processing, email delivery) who process data on our behalf under strict confidentiality agreements.

5.3 Legal Requirements. We may disclose information when required by law, court order, or government authority, or to protect our rights, property, or safety.

5.4 Business Transfers. In the event of a merger, acquisition, or asset sale, we will require the receiving party to honor this policy. Otherwise, we will seek your consent before transferring your data.

5.5 Third-Party SDKs.​ 

6. Cross-Border Data Transfer

As a cross-border B2B platform, your personal information may be transferred to and processed in countries outside your country of residence — including China (where ZTRFM is headquartered) and the countries where Suppliers and buyers are located.

For transfers from the EEA, UK, or Switzerland, we rely on:

• Standard Contractual Clauses (SCCs): We enter into SCCs approved by the European Commission with our data importers;
• Adequacy decisions: Where the destination country has been deemed to provide adequate data protection;
• Explicit consent: In specific cases where SCCs or adequacy decisions are not available, we may transfer data based on your explicit informed consent.

For transfers of data out of China, we comply with the Personal Information Protection Law (PIPL) and the Data Security Law (DSL), including completing any required security assessments or filing requirements with Chinese authorities.

7. Data Security

We implement industry-standard security measures including encrypted transmission (TLS), access controls, firewalls, regular security audits, and employee confidentiality agreements. Despite these measures, no system is perfectly secure. Please protect your account credentials.

In the event of a data breach, we will notify affected users and relevant authorities in accordance with applicable laws, including GDPR Article 33 (notification within 72 hours of becoming aware of a breach) and PIPL requirements.

8. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy:

• Account data: Retained while your account is active. Deleted or anonymized within 30 days after account cancellation;
• Transaction records: Retained for 5 years to comply with tax and accounting regulations;
• Verification documents: Retained for the duration of the verification period, then deleted within 90 days;
• Communication logs: Retained for 2 years for dispute resolution purposes;
• Usage data: Aggregated and anonymized within 12 months; raw data deleted within 24 months.

Where mandatory retention periods apply under law, we will retain data only for the legally required period.

9. Your Rights

Regardless of your location, you have the following rights:

• Access: Request a copy of your personal data;
• Rectification: Correct inaccurate or incomplete data;
• Erasure: Request deletion of your data (subject to legal retention requirements);
• Restriction: Request that we limit processing of your data;
• Portability: Receive your data in a structured, machine-readable format and transfer it to another service;
• Objection: Object to processing based on legitimate interests or for direct marketing;
• Withdraw consent: Withdraw consent for processing based on consent at any time;
• Account cancellation: Cancel your account through Account Settings or customer service.

For EEA/UK/Swiss users: You also have the right to lodge a complaint with your local data protection authority (e.g., the Information Commissioner's Office in the UK, or the supervisory authority in your EU member state).

For Chinese users: You have rights under the PIPL, including the right to request deletion, explanation of processing, and to refuse automated decision-making.

To exercise any of these rights, contact privacy@zt-rfm.com. We will respond within 15 working days. We may need to verify your identity before processing your request.

10. Automated Decision-Making

We do not use fully automated decision-making that produces legal or similarly significant effects on you. Product recommendations and search result rankings use algorithms based on your browsing behavior and search queries, but these do not have legal consequences. You may request human review of any algorithmic outcome affecting you by contacting privacy@zt-rfm.com.

11. Children's Privacy

The Platform is designed for businesses and adults with full civil capacity. We do not knowingly collect personal information from children under 16. If you believe we have collected such data, contact us and we will delete it promptly.

12. Updates to This Policy

We may update this policy periodically. We will not reduce your rights without explicit consent. For significant changes, we will post the updated version on the Platform and notify you via email or in-platform notification. Your continued use after the effective date indicates acceptance of the revised policy.

13. Contact Us

For questions about this Privacy Policy or to exercise your data protection rights:

Company: Zhongtuo Cold Bending Technology (Hebei) Co., Ltd.
Email: privacy@zt-rfm.com (indicate "Privacy Inquiry")
Phone: +86-0317-2091158
Address: No. 6, Si Hao Road, Botou Economic Development Zone, Cangzhou City, Hebei Province, China

We will respond to your inquiry within 15 working days.

This Privacy Policy is an integral part of the ZTRFM User Agreement.

Zhongtuo Cold Bending Technology (Hebei) Co., Ltd.
ZTRFM
July 23, 2026