Legal

Privacy Policy

Last updated: May 9, 2026

This Privacy Policy explains how Gansu Ingredients collects, uses, shares, stores, and protects personal information submitted through this website and related B2B communications. This website is intended for business-to-business sourcing inquiries for food and botanical ingredients.

This policy is provided for transparency and general compliance support. It is not legal advice. If your business requires market-specific compliance review, please consult qualified counsel in the relevant jurisdiction.

1. Who We Are

Gansu Ingredients operates this website as a B2B supplier and sourcing contact point for food and botanical ingredients from Northwest China. For privacy questions, requests, or complaints, contact us at sales@gansuingredients.com.

2. Information We Collect

  • Contact details you submit, including full name, business email, company name, company website, country or target market, and inquiry message.
  • Business sourcing details, including product interest, application, required specification, expected order quantity, packaging requirement, and required documents.
  • Technical and security information, including IP address, approximate request time, browser or device information, server logs, and anti-spam verification results.
  • Email communication records when you contact us or respond to our sales or sourcing team.

We do not intentionally collect sensitive personal information through the inquiry form. Please do not submit medical information, identity documents, bank card numbers, or other sensitive information unless specifically requested for a legitimate transaction and through an appropriate channel.

3. How We Use Information

  • Respond to wholesale inquiries, sample requests, specification requests, pricing requests, and export documentation questions.
  • Evaluate product availability, grade suitability, packaging options, testing requirements, and target-market compliance needs.
  • Send operational B2B communications related to sourcing, samples, quotations, order coordination, documents, logistics, and customer support.
  • Protect the website, contact form, and email systems from spam, abuse, automated submissions, fraud, and unauthorized activity.
  • Maintain business records, comply with legal obligations, resolve disputes, and enforce our terms or written agreements.

4. Legal Bases Where Applicable

Depending on your location, we may process personal information based on legitimate business interests, steps taken before entering into a business relationship or contract, performance of a contract, compliance with legal obligations, consent where required, or the establishment and defense of legal claims.

5. Cloudflare Turnstile

Our inquiry form uses Cloudflare Turnstile to help distinguish legitimate users from spam or automated abuse. Turnstile may process technical signals such as browser, device, interaction, token, and network information for security verification. This verification is performed server-side and is required before an inquiry is accepted.

Cloudflare processes this information according to its own privacy and security documentation. You can review Cloudflare's privacy policy at cloudflare.com/privacypolicy.

6. Email and SMTP Providers

Inquiry notifications are sent using Nodemailer through a configured business SMTP provider, such as Google Workspace SMTP or Microsoft 365 SMTP. We do not operate a self-hosted SMTP server for this website. Email providers may process sender, recipient, message, routing, anti-spam, and security information as part of delivering email.

7. How We Share Information

We do not sell personal information. We do not use inquiry data for consumer advertising profiles. We may share information only when reasonably necessary for B2B operations, security, compliance, or a specific sourcing request.

  • Email and hosting providers that help us receive, process, store, and send B2B communications.
  • Cloudflare, which provides Turnstile bot-detection and security services for the inquiry form.
  • Testing laboratories, processors, packing facilities, logistics providers, customs brokers, or documentation partners when needed for a specific sourcing request or order.
  • Professional advisers, insurers, banks, payment providers, government authorities, courts, or regulators where legally required or reasonably necessary.

8. International Processing

Because we serve overseas B2B buyers and use international service providers, personal information may be processed in China, the United States, the European Economic Area, the United Kingdom, or other locations where our service providers operate. Where required, appropriate safeguards should be applied according to applicable law and the relevant provider terms.

9. Retention

We keep inquiry and email records only as long as reasonably necessary for B2B sourcing, customer support, order coordination, compliance, accounting, dispute resolution, and security. As a general guideline, inquiry records may be retained for up to three years after the last business contact unless a longer period is required for legal, tax, contractual, or dispute-related reasons. Server and security logs may be retained for shorter operational periods unless needed for investigation or compliance.

10. Your Privacy Rights

Depending on your jurisdiction, you may have some or all of the following rights:

  • Request access to personal information we hold about you.
  • Ask us to correct inaccurate or incomplete information.
  • Ask us to delete information where we no longer have a valid business or legal reason to keep it.
  • Object to or restrict certain processing where applicable law gives you that right.
  • Request portability of information where applicable.
  • Withdraw consent where processing is based on consent.
  • Contact a local data protection authority if you believe your rights have not been respected.

To exercise a right, email us at sales@gansuingredients.com. We may need to verify your identity and business relationship before responding.

11. Security

We use reasonable administrative, technical, and organizational measures designed to protect inquiry data, including HTTPS through Caddy, server-side Turnstile verification, SMTP credentials stored in server runtime configuration, and access controls for operational systems. No website, email, or internet transmission can be guaranteed to be completely secure.

12. Children

This website is intended for business users and is not directed to children. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised last updated date. Continued use of the website after an update means the current version applies to your use of the website.