Privacy Policy

1. Controller and contact

The data controller is Qingdao Dehuiyuan Hair Products Co., Ltd., Qingdao, China. For privacy requests or questions, contact Cindy@derianhair.com.

2. Data we collect

When you submit an inquiry, we may collect your name, business email, telephone or WhatsApp number, company name, country or region, product requirements and message. The inquiry can also include the referring website's domain, campaign link labels (UTM parameters), the landing page, the website page/title where you clicked an inquiry or contact link, that button's label and section, the form page/section and the contact method you chose. These help us understand where your inquiry originated. We record only the latest relevant inquiry-link click, not your full browsing or click history. We do not include the referring page's full URL, unrelated URL parameters, or advertising click identifiers in the inquiry.

We may also process limited technical information necessary to operate and secure the website.

3. Why we use your data

We use inquiry data to respond to your request, prepare a quote or product proposal, understand which websites or campaigns brought us business inquiries, communicate about the requested business relationship, maintain appropriate business records and protect the website from abuse. We do not use inquiry data for unrelated purposes.

4. Legal bases

Where applicable, we process inquiry data because you asked us to respond or take steps toward a business relationship, or because we have a legitimate interest in operating a secure B2B website and managing relevant business inquiries. Optional analytics is based on your consent, which you can withdraw through Privacy settings without affecting browsing or inquiries.

5. Recipients and international transfers

Access is limited to DR personnel who need the data to respond to your inquiry. If email delivery is enabled, we use an email delivery service provider to send the inquiry to our sales team. If you consent to optional analytics, Google receives analytics data as the service provider. As DR is based in China and Google operates internationally, data may be processed outside the EEA/UK. Where required, we will use appropriate safeguards for such transfers.

6. Retention

We keep inquiry and related business-contact information only for as long as necessary to respond, manage the potential or active business relationship, meet legal record-keeping requirements or resolve disputes. We periodically review whether retained inquiry data is still needed.

7. Your rights

Depending on applicable law, you may request access to, correction of, deletion of, restriction of or objection to processing of your personal data, and data portability. You may also complain to your local data protection authority. To make a request, email Cindy@derianhair.com.

8. Cookies and third-party content

Inquiry source and click-entry information is held in temporary page memory during normal navigation in the current tab. This inquiry-attribution feature does not set tracking cookies, use local or session storage, or send analytics requests. Reloading the site or opening another tab may lose the original source and click entry. Source and click details are included in the message when you choose an email or WhatsApp contact option; external contact services receive them when you use those services.

Optional Google Analytics

Separately, we load Google Analytics only after you choose Accept analytics. It measures page visits, broad traffic-source categories and contact actions, using first-party analytics cookies, pseudonymous browser identifiers, technical/device information and approximate geographic information. We do not send the inquiry form's name, email, phone number, company, country or message to Analytics. We do not send WhatsApp message URLs, full referring URLs, arbitrary URL query parameters or raw campaign labels. Advertising personalization, Google signals and user-provided-data collection are not enabled.

WhatsApp and email-link clicks indicate contact intent, not a completed inquiry. A successful email-form event means the delivery service accepted the submission; it does not confirm an email was read or that the visitor is a qualified customer. Visitors without consent, blocked analytics or unavailable source information are not fully represented in reports.

We store only your analytics choice and its date in browser local storage, and ask you to choose again after 180 days. Your browser may retain that preference record until you clear it or make a new choice. This preference is separate from analytics cookies, which are configured to expire within 180 days. Analytics user/event-level data retention is set to two months; this does not set the retention of aggregated reports. Rejecting analytics prevents loading it on a new page. Withdrawing consent stops further collection on the current page and removes this integration's accessible analytics cookies; it does not automatically delete previously collected data. You can change your choice using Privacy settings.

Learn more about how Google uses information from sites using its services.

The Contact page embeds OpenStreetMap to display our office area; when you load that map, OpenStreetMap may process information under its own policies. External links, including WhatsApp and OpenStreetMap, are governed by the privacy notices of those services.

9. Security and updates

We use reasonable technical and organisational measures appropriate to the nature of the information we process. No internet transmission is completely secure. We may update this policy as our website or processing changes; the effective date above indicates the latest revision.