One-sentence Description:This website is a professional manufacturer website for industrial instruments and automation equipment, providing product selection, quotation, and technical information for enterprises. The information we collect is limited toThe scope necessary to reply to your inquiryWe will not sell your personal information and will not load third-party tracking scripts without your consent.
Table of Contents
- 1. Who We Are
- 2. Scope of Application and Legal Jurisdiction
- 3. What Information We Collect
- 4. Cookies and Browser Local Storage
- 5. Cookie Consent Mechanism and Consent Record
- 6. How We Process Information (Legal Basis)
- 7. Duration of Information Storage
- 8. Sharing, Transfer and Public Disclosure of Information
- 9. Cross-border Transmission of Information
- 10. How We Protect Information
- 11. Your Rights
- 12. Protection of Minors
- 13. Description of Third-party Services
- 14. Policy Updates
- 15. How to Contact Us
1. Who We Are
Qigang (Shanghai) Automation Equipment Co., Ltd. (hereinafter referred to as "we" or "the company") is the operator of this website https://www.qishan-sh.com/ and the website record number is沪ICP备12046123号-1. The company is registered inShanghai Fengxian DistrictMainly engaged in the research, development, production and sales of industrial automation instruments, industrial safety and signal conditioning modules, process measurement instruments and other products, the business mainly faces the Chinese mainland market, and at the same time provides product selection and technical support for overseas customers.
This policy explains how we collect, use, store and protect your personal information when you visit and use this website, as well as the ways in which you can exercise your rights over your personal information. This policy also applies to users in mainland China and overseas: we take Chinese law as the basic criterion and supplement the arrangements for notification, consent and exercise of rights in accordance with the General Data Protection Regulation (GDPR) and other internationally recognized rules.
2. Scope of Application and Legal Jurisdiction
2.1 Applicable Territory
This policy applies to all individuals who visit this website, regardless of whether they are located within China or overseas. When you are in the European Union, European Economic Area, Switzerland, the United Kingdom, or the State of California in the United States, the terms of this policy regarding GDPR, ePrivacy Directive, UK PECR, and CCPA/CPRA also apply.
2.2 Applicable Law
| Jurisdiction of Application | Primary Applicable Law | As reflected in this policy |
|---|---|---|
| Mainland China | The Personal Information Protection Law of the People's Republic of China The Cybersecurity Law of the People's Republic of China The Data Security Law of the People's Republic of China The E-commerce Law of the People's Republic of China | Notification-Consent, Minimum Necessity, Domestic Storage, Separate Consent, Right to Access, Copy and Delete, Right to Refuse Non-Necessary Processing |
| European Union / European Economic Area / Switzerland | GDPR (Regulation (EU) 2016/679) ePrivacy Directive 2002/58/EC | Legal Basis, Withdrawal of Consent, Data Subject Rights, Cross-border Transfer Mechanism |
| United Kingdom | UK GDPR PECR 2003 (Cookies and Similar Technologies) | Consistent with EU terms, applicable separately under UK law |
| United States (California and others) | CCPA/CPRA (California Consumer Privacy Act) | Right to know, right to delete, right to correct, right to opt-out of 'sale or sharing', restriction on sensitive information use, non-discrimination |
| Other regions | Local personal information protection regulations (such as Brazil LGPD, Japan APPI, Canada PIPEDA, etc.) | In the absence of separate agreements, the stricter of the two shall apply as specified in this policy |
Conflict Resolution:If there are differences in the requirements of the same matter across different legal jurisdictions, we will followthe standard that provides higher protection to you.
3. What Information We Collect
3.1 Information Provided by You Voluntarily
When you contact us through forms on this website, we will collect the following information:
| Information Item | Collection Scenario | Application | Mandatory or Not |
|---|---|---|---|
| Name | Enquiry message, technical support, feedback, after-sales service message | Respond to your inquiries, prepare quotation sheets and technical documents, arrange engineer coordination, and handle your feedback | Required |
| Company Name | As above | As above | Optional |
| Contact Phone Number | As above | As above | Required |
| Email Address | As above | As above | Complete FormRequired Compact FormOptional |
| Model Number of Required Product and Description of Requirements | As above | As above | Required |
When you submit the form, the system will also automatically record:Submission Time、Source Page AddressandNetwork IP Address at the time of submission. This information is used to verify the source of inquiries, handle duplicate submissions, and prevent malicious刷单, and is necessary auxiliary information for fulfilling the aforementioned reply obligations.
3.2 Information Automatically Generated When You Browse the Website
When you visit this website, the server will automatically record: request time, requested page, source page, browser type and version, operating system and device information, as well as the aforementioned IP address. This information is used to ensure website security, troubleshoot, generate access statistics, and after you agree to the "Statistical Analysis" category, it is used to analyze page usage.
3.3 Information We Will Not Collect
- Not collectedSensitive personal information unrelated to product consultation (such as religious beliefs, specific identity, medical health, financial accounts, and travel tracks, etc.);
- Not collectedPersonal information of minors under the age of 14;
- Not collectedState secrets and information involving national security;
- Not usedAutomated decision-making on your information that has a significant impact on you (such as differential pricing, account blocking);
- Not collectedThird-party tracking identifiers used for ad remarketing, unless you explicitly agree in the "Marketing Ads" category.
4. Cookies and Browser Local Storage
This website uses cookies and browser local storage (localStorage / sessionStorage). They are divided into five categories, which you can adjust and select at any time in the"Cookie Settings"at the footer of the page:
| Category | Specific content | Application | Default status |
|---|---|---|---|
| Strictly Necessary | wordpress_test_cookiewordpress_logged_in_*wp-settings*PHPSESSID | Support the basic operation of the website: login status, form protection (CSRF), language and preference loading. These cookies are essential for the core functions of the website to work. They cannot be disabled. | Always Enablecannot be turned off |
| Function Preferences | astroColorSwitcherStateInterface state storage | Remember your interface preferences (such as color schemes, sidebar collapse status) to avoid having to reset them each time you visit. | Consent required |
| Statistical Analysis | Aggregated statistical identifiers such as visit volume, page dwell time, and source channels | Understand which products and content attract more attention, so as to optimise selection paths and the structure of technical documentation. Data is used only in aggregate form. | Consent required |
| Marketing advertisements | Advertising and remarketing identifiers | Promote our industrial instrumentation products.Disabling does not affect any website functionality, and we will not show you targeted advertising. | Consent required |
| Unclassified | Identifiers detected but not yet categorised | For compliance prudence, blocked by default until you categorise them. Categorisation rules can be adjusted in the backend. | Blocked by default |
Current actual status of this website:Following a site-wide technical scan, this website currentlyloads no third-party analytics or advertising scripts, and uses no third-party tracking cookies. You will still see a consent prompt because: (a) strictly necessary cookies are always present, as the baseline for the website to function normally; (b) before you consent, weactively blockall non-essential scripts and cookies — this means that when you later integrate analytics tools, customer service tools or advertising platforms, compliance is automatically maintained without code changes; (c) both the GDPR and the Personal Information Protection Law require adequate notice before information is collected.
4.1 Cookie lifespan
- Session cookies: expire when you close your browser;
- Persistent cookies: automatically deleted upon expiry, for a maximum of 24 months;
- the consent status itself: stored preferentially in browser localStorage (no Cookie generated), falling back to a first-party Cookie where unavailable,valid for 180 days, after which we will seek your consent again.
5. Cookie Consent Mechanism and Consent Record
5.1 Obtaining consent
On your first visit to this website, you will see a Cookie consent prompt offering three options:"Accept all"、"Necessary only"、"Custom settings"(with per-category toggles). Selecting "Necessary only" and "Accept all" both constitute valid consent; when "Custom settings" is selected, only the categories you explicitly enable are deemed consented to.
Your consent isvoluntary, specific, informed and withdrawable, and does not prevent you from continuing to use the website's basic browsing and search functions. For the strictly necessary category, as the website cannot function properly if consent is withdrawn, we do not include it within the scope of consent.
5.2 Technical measures prior to consent
To ensure that "consent is obtained in advance", we have implemented three layers of technical measures:
- Server-side blocking— at the page output stage, non-essential scripts are marked as non-executable, so the browser will not run them and no Cookies will be written as a result;
- Runtime guard— prior to your consent, attempts by scripts to write Cookies, write to local storage or inject dynamic scripts are intercepted and logged for our troubleshooting;
- Activated after consent— Blocked scripts are only resumed after you give consent.
5.3 Consent records
We record each instance of your consent, refusal or change of choice in a database, including the time, the categories selected, a visitor identifier (irreversible hash) and the policy version in force at the time. This recorddoes not contain your raw IP address, nor any Cookie content, and is retained for 365 daysbefore being automatically deleted. The purpose of this record is to demonstrate that we have fulfilled our obligations to inform you and obtain consent for the relevant processing activities, and to enable us to quickly identify the basis for processing at the time should you raise any questions.
6. How We Process Information (Legal Basis)
We process your personal information on the following bases:
| Processing activity | Legal basis (GDPR) | Legal basis (PRC law) |
|---|---|---|
| Processing enquiry information you voluntarily submit | Article 6(1)(b): pre-contractual steps at your request for an enquiry/technical service contract | Article 13(2) of the PIPL: necessary for entering into or performing a contract |
| Sending enquiry notification emails to our business mailbox | Article 6(1)(f): legitimate interests — responding to business enquiries | Article 13(2) of the PIPL |
| Website operation logs and security protection | Article 6(1)(f): legitimate interests — ensuring system security | Article 13(4) of the PIPL: necessary to ensure website security |
| Cookie consent records | Article 6(1)(c): legal obligation — demonstrating that consent was obtained | Article 13(1) of the PIPL: performance of legal obligations |
| Statistical analysis (with your consent) | Article 6(1)(a): consent | Article 13(1) of the PIPL: consent |
| Marketing and remarketing (with your consent) | Article 6(1)(a): consent | Article 13(1) of the PIPL: consent |
If you are located in the EU/UK, seeChapter 11for how to withdraw consent and exercise your other rights; if you are located in mainland China, seeChapter 11。
7. Duration of Information Storage
| Information category | Retention period | Disposal on expiry |
|---|---|---|
| Enquiry and technical support records | From the last communication 3 years | Deletion or anonymisation |
| Cookie consent records | 365 days | Automatic deletion |
| Website access logs | 12 months | Automatic deletion |
| Functionality preference storage | Maximum 24 months | Automatically deleted by the browser on expiry |
| Analytics identifiers | Maximum 24 months | Automatically deleted by the browser on expiry |
Unless otherwise mandatorily required by laws or regulations or necessary for the performance of a contract, we will delete or anonymise your personal information after the expiry of the above periods. Where laws or regulations require a longer retention period, we will retain only the minimum information relevant to that statutory requirement during such period and delete it promptly after the period ends.
8. Sharing, Transfer and Public Disclosure of Information
8.1 Sharing
Wedo notsell, rent or otherwise provide your personal information to third parties, unless we have obtained your separate consent or it is explicitly required by laws or regulations. To respond to your enquiry, we may share necessary information only with the following categories of service providers:
| Service category | Typical provider | Shared content | Purpose |
|---|---|---|---|
| Email delivery | Corporate email service provider (SMTP) | Recipient address, email content | Sending enquiry notifications and your email correspondence |
| Website hosting | Server hosting service provider | Access logs (including IP) | Website operation and security protection |
| Statistical analysis (with consent) | 见Chapter 13 | Access behaviour data | Improving website experience |
8.2 Transfer
In the event of a merger, acquisition or asset transfer, where personal information is transferred, we willrequire the recipient to remain bound by this Policy, and where your personal rights and interests are concerned,notify you separately. We will not transfer personal information to overseas organisations without your separate consent.
8.3 Public disclosure
We will not publicly disclose your personal information, except where otherwise provided by laws and regulations, required by a court or administrative authority in accordance with the law, or necessary to protect legitimate rights and interests.
9. Cross-border Transmission of Information
The servers and databases of this websiteare all deployed within China, and your information is collected, processed and stored domestically,there is currently no transfer of personal information overseas。
If cross-border transfer arises in the future due to the integration of overseas services (such as overseas analytics tools, overseas CDNs or overseas customer service systems), we will, in accordance with Article 38 of the Personal Information Protection Law and Chapter V of the GDPR, complete the following measures before implementation and notify you separately:
- carry out in accordance with the lawpersonal information protection certificationor concludestandard contractual clauses；
- conductpersonal information protection impact assessmentand retain records for three years;
- if the data protection level of the country or region where the overseas recipient is located is insufficient, compliance arrangements will be completed through other lawful channels (such as security assessment) in accordance with the regulations of the national cyberspace administration;
- inform you of the recipient's name or identifier, contact details, purpose and method of processing, categories, and the methods and procedures for exercising rights.
A note for overseas customers:If you are located in the EU or the UK, the acceleration and mirroring services used by this website will route some static resource requests to service nodes located in mainland China or Hong Kong. This constitutes technical processing necessary to ensure access speed, and we will not additionally collect information that identifies you personally as a result. For further explanation on this matter, please contact us viaChapter 15contact details.
10. How We Protect Information
10.1 Technical measures
- Site-wide HTTPS encrypted transmission is enabled, with forced HTTP-to-HTTPS redirection;
- server and database access permissions are allocated on a least-privilege basis, and the admin backend uses separate accounts with strong passwords;
- before you consent,non-essential scripts and cookies are blocked at the server side, reducing the surface for data leakage at source;
- Consent logs usesalted hashingto process visitor identifiers, without retaining reversible raw IP addresses;
- conduct regular security checks and plugin updates, and assess and retire third-party components that are no longer required.
10.2 Organisational and Management Measures
- Only authorised personnel may access enquiry information within the scope necessary for business purposes, and such access is logged;
- confidentiality and data processing terms are concluded with relevant service providers;
- regular personal information protection training and compliance self-assessments are carried out;
- a personal information protection officer (or designated contact) mechanism has been established, responsible for external communication and responding to requests.
10.3 Security Incident Response
In the event of an actual or potential personal information breach, we will immediately take remedial measures to contain the risk and mitigate the impact, and will fulfil our notification and reporting obligations to you and the supervisory authorities in accordance with Article 57 of the Personal Information Protection Law and Article 33 of the GDPR.
11. Your Rights
11.1 Rights under the Personal Information Protection Law of Mainland China
| Right | Content | How to Exercise |
|---|---|---|
| Right to be informed | To understand how we process your personal information | Send an email to web@qishan-sh.com, or withdraw Cookie consent via "Cookie Settings" in the website footer. Withdrawal of consent is a right exercisable at any time. |
| Right to decide | Restrict or object to processing | As above |
| Right of access and copy | Obtain a copy of your personal information | As above |
| Right to rectification and completion | Correct inaccurate information | As above |
| Right to erasure | Request erasure under statutory circumstances | As above |
| Right to explanation | Request that we explain our personal information processing rules | As above |
11.2 Rights under the EU / UK GDPR
Where the GDPR applies, you have the following rights:
- Withdrawal of consent (Article 7(3))— withdrawal of consent does not affect the validity of processing carried out previously on the basis of consent;
- Right of access (Article 15)、Right to rectification (Article 16)、Right to erasure (Article 17)、Right to restriction of processing (Article 18)；
- Right to data portability (Article 20)— obtain your data in a structured, commonly used, machine-readable format;
- Right to object (Article 21)— where processing is based on legitimate interests, you may object at any time;
- Right not to be subject to automated decision-making (Article 22)— you have the right to request that decisions based solely on automated decision-making not be applied to you;
- Right to lodge a complaint (Article 77)— you may lodge a complaint with the data protection supervisory authority of the Member State of your habitual residence or place of the alleged infringement (within the EU, see the EDPB member authority directory）。
11.3 Rights under the California CCPA / CPRA
If you are located in California, USA, you have the right to:
- Know— know what personal information we collect, its sources and purposes;
- Delete— request deletion of the personal information we hold about you;
- Correct— request correction of inaccurate information;
- Limit use of sensitive information— limit the ways in which we use your sensitive personal information;
- Non-discrimination— we will not discriminate against you in the provision of services because you exercise your rights;
- Opt out of "sale" or "sharing"— The processing activities described in this policy do not constitute a "sale" or "sharing" as defined by the CCPA, and we do not sell your personal information; if you wish to opt out of targeted advertising, you may do so viaChapter 4by turning off the "marketing advertising" category.
11.4 Response Time
We will, within 15 business daysof receiving your request, verify and respond to it; where the matter is complex, we may extend this period in accordance with the law and will explain the reasons to you. Identity verification is necessary to respond to the request, and we will process only the information necessary for verification purposes.
One-click withdrawal:You may withdraw your consent to non-essential Cookies without contacting us — click the"Cookie Settings"in the footer, set the toggle to "essential only" and save. After withdrawal, the relevant scripts will be removed, and Cookies already written will expire when the browser session ends.
12. Protection of Minors
This website is intended for business customers and professional technical procurement personnel in the industrial sector,not for minors, and we do not proactively provide services to minors. If we discover that we have collected the personal information of children under 14 years of age, we will delete it immediately.
Guardians involved in the processing of children's personal information who wish to exercise their rights should contact us viaChapter 15contact details.
13. Description of Third-party Services
13.1 Current Status
Following a full-site scan, this website currentlyloads no third-party analytics, advertising or social tracking scripts. The third-party resources referenced by the website are limited to the following categories, none of which read your personal information:
| Type | Description | Whether personal information is collected |
|---|---|---|
| Domestic acceleration and mirror services | Used to accelerate access to overseas static resources (fonts, icons, etc.) | No, only standard network request information is received |
| Corporate email service | Used to send enquiry notification emails | Receives the email address you voluntarily provide |
| WeChat Official Account / WeCom | Channels through which we proactively publish technical content, independent of website data | No, each platform is governed by its own privacy policy |
| On-site live chat | The floating "Live Chat" entry at the bottom left of the website; messages go directly into our enquiry system | Yes — the same processing rules as form enquiries apply, see Chapter 3 of this policy |
13.2 Handling of changes
If third-party analytics or advertising services are integrated in the future, we will:
- Update this policy before integration, andList the provider names in the preference panel of "Cookie Settings"；
- Before you consent to the relevant category,do not loadany scripts from that provider,not written intoits cookies;
- explain to you the service provider's data processing purposes, methods, information categories and privacy policy link;
- when used within China, ensure that no cross-border transfer of personal information outside China occurs, or complete the corresponding compliance arrangements in accordance with the law.
14. Policy Updates
This policy is version V1.0 and takes effect from 30 October 2026. When the processing purposes, information categories, third-party list or legal requirements change, we will update this policy and give prominent notice on the website. The updated policy applies from its effective date; for material changes (such as adding new third-party categories or expanding the scope of information use), we willseek your consent again。
We store in the consent record thepolicy version numberapplicable when you gave your consent, so that the terms in force at that time can be accurately reconstructed. To enquire about historical versions, please contactChapter 15by email.
15. How to Contact Us
If you have any questions about this policy, or need to exercise the personal information rights described in Chapter IV of this policy, please send an email to web@qishan-sh.com，please include "Privacy Policy Enquiry" or "Personal Information Rights Request" in the email subject, and state:
- the specific rights you wish to exercise;
- the email address or phone number you used when submitting your previous enquiry (for identity verification);
- any other relevant information you would like us to respond to.
If you are located in the EU/UK and wish to lodge a complaint with a supervisory authority, or believe our processing does not comply with applicable law, you may also contact us first so that we can rectify the matter promptly, while reserving your right to complain to a supervisory authority.
