FURUI PACK

Privacy Notice

Last updated: 11 October 2026 (revision 2)

Who we are and how to contact us

Guangzhou Furui Paper and Plastic Products Co., Ltd. (FuRui Pack), No. 10 Lixin 6th Road, Shajiao Village, Xiancun Town, Guangzhou, Guangdong, China, is responsible for the personal information we collect through this business website. Michael Yuan handles privacy enquiries at michaelyuan@furuipack.com. Please use “Privacy request” as your email subject.

Information we collect

Our enquiry form asks for your name, work email, country or region, product, estimated quantity and project details. Company name, dimensions or capacity, and delivery city or postcode are optional. We also record a submission reference, submission time, your confirmation that you have read this notice, the privacy notice version you acknowledged, the email notification status and the reference our mail server returns for that notification. Please provide only information needed for your packaging enquiry, and do not submit payment details, identity documents, sensitive personal information or confidential artwork.

To deliver pages and limit repeated submissions, our server processes technical information such as your IP address. When you submit the form, we limit submissions to five per IP address and three per email address in each 10-minute period. For this we store only keyed hashes of the IP address and email address (with the 10-minute period and a counter), not the raw values. Our enquiry database does not store your IP address. Website access logs are described below; the server’s system and error logs may briefly contain limited technical information for troubleshooting.

Server access logs

When you visit a page, our web server records an access log entry: the date and time, the page or file requested, the response status and size, your browser and device type (user agent), the referring page, your browser’s language preference and a shortened IP address. The last part of the IP address is removed before the entry is written (IPv4 addresses are cut to the first three blocks, IPv6 addresses to the first 48 bits), so the full address is not stored. The logs do not contain enquiry form contents or cookies.

We use access logs to keep the website secure, investigate errors and misuse, and produce an aggregated daily traffic summary for our sales team: numbers of visitors and page views, the most visited pages, traffic sources, browser languages and approximate countries. Countries are estimated on our own server from the shortened IP address using an offline database; no log data is sent to a third party for this. The summary contains totals only. Where EU or UK law applies, our basis is our legitimate interest in operating a secure website and understanding its use. Access logs are stored on our Hong Kong server and deleted automatically after 30 days.

Cloudflare Web Analytics

We use Cloudflare Web Analytics, provided by Cloudflare, Inc. (United States), to measure how our pages are used and how quickly they load. It is cookieless: it does not set cookies, does not use your browser’s local storage and does not build a profile of you across websites. When a page loads, a small script from Cloudflare sends the page address, the referring page, browser and device type and page-load performance timings to Cloudflare. To deliver the script and receive this data, Cloudflare necessarily processes your IP address; we receive only aggregated statistics, never your IP address.

Cloudflare processes this information in the United States and other countries where it operates, under its own privacy terms and data protection safeguards. Where EU or UK law applies, our basis is our legitimate interest in understanding and improving our website. You can block the script with a content blocker without affecting the rest of the website.

Why we use this information

We use your details to assess your requirements, prepare or discuss a quotation, respond to you, manage the resulting business relationship and protect the website against misuse. We do not use enquiry submissions to subscribe you to newsletters or unrelated marketing.

Where EU or UK data protection law applies, our basis for ordinary business-contact enquiries and website security is our legitimate interest in responding to requested business discussions and preventing abuse. Where you personally request steps towards a contract, we may process the information needed for those steps. We retain records required by applicable law on that basis. If a particular use requires consent, we will request it separately; you may withdraw that consent without affecting earlier lawful processing.

Providing information is voluntary. Without the required contact and enquiry details, we may be unable to respond or prepare a useful quotation. The form acknowledgement is not permission for advertising. You can also contact us directly by email.

How the form and email work

When online submission is available, your enquiry is saved in our website database and an email notification containing your enquiry details is sent to our sales mailbox. The notification uses your email address as the reply address so our sales team can answer you directly. The form also contains a hidden field that people do not see; submissions that fill it in are rejected as automated. When the page offers to prepare an email instead, it creates a draft on your device; you must open and send that draft in your email application. Preparing a draft alone does not submit your enquiry to us.

Where your information is processed and who can access it

Our website and enquiry database are hosted on a server we rent from Alibaba Cloud in Hong Kong SAR. Enquiry notifications are sent by email through Alibaba Mail (Alibaba Cloud enterprise email), which also hosts our sales mailbox; our replies and follow-up correspondence are handled in that mailbox. Alibaba Cloud provides the server and email infrastructure for us; we do not use a separate email-sending service or a third-party form service.

Our sales team handles enquiries in mainland China, and Alibaba Mail may store and process email in mainland China. These places may have data protection laws that differ from those where you live. Authorised staff, and the providers running these services to the extent needed for their work, may access the information. We may also disclose information when required by law or to establish or defend legal claims. Contact us for information about the providers and safeguards relevant to your enquiry. Where applicable law requires additional transfer information or consent, that must be provided before the relevant transfer.

How long we keep information

We keep unsuccessful enquiries for 12 months from submission. Website form records are due for deletion after 12 months: records past that date are deleted automatically when new enquiries are processed, and routine cleanup is reviewed monthly by Michael Yuan. Records needed for an agreed order are handled separately and retained for the applicable contract, accounting or other legal period. A documented legal obligation or dispute may require specific records to be kept longer; we do not retain all enquiries indefinitely for that reason.

Rate-limit records expire after 10 minutes and are cleared during routine processing. Notification emails and later correspondence in our mailbox follow the same 12-month rule for unsuccessful enquiries. Deleting a live website record does not immediately remove every mailbox copy, server backup or provider log. We include those systems when handling a deletion request and explain any necessary retention or outstanding provider action.

Your choices and rights

You may contact Michael Yuan to request access, correction or deletion of information, to ask us to stop an enquiry follow-up, or to ask about storage and international processing. Depending on applicable law, you may also have rights to restrict or object to processing, receive portable data, withdraw consent, or appeal a decision on your request. Include your enquiry reference if available. We may ask for proportionate information to verify the request, and will respond within the period required by applicable law.

You may complain to the data protection authority competent for your location, including your EU supervisory authority, the UK Information Commissioner, Japan’s Personal Information Protection Commission or Korea’s Personal Information Protection Commission, where applicable. We do not sell personal information or share it for cross-context behavioural advertising, and we do not penalise you for exercising applicable privacy rights.

Cookies, external services and automated checks

This website does not set cookies and does not use advertising or cross-site tracking tools. Apart from the cookieless Cloudflare Web Analytics described above, we do not use analytics services. Fonts, images and video are served from our own server; only the analytics script is loaded from Cloudflare. The only automated checks are the hidden-field and rate-limit checks described above; if a check prevents you from using the form, email us directly. We do not make automated purchasing or credit decisions through this website.

Email links open your own email application, and WhatsApp links open WhatsApp, a service operated by a third party. Those services have their own privacy terms, and information you send through them is handled under those terms as well as this notice. This website is intended for business packaging enquiries and is not directed at children.

Changes to this notice

We update this notice when our handling of information changes and show the revision date above. A materially different use requiring additional notice or consent will be addressed before that use begins.