PRIVACY / GDPR · ePRIVACY

Your data, your rights.

What we collect, why we collect it, and how to access, export, delete or withdraw consent.

GDPR ePrivacy Updated 29 Oct 2026

This privacy notice is provided in English for all non-Chinese language versions. For a translation, contact us.

1. Who is responsible for your data

This website is operated by Shenzhen Jinshengchang Technology Co., Ltd., Room 305, Chuangzhao Plaza, Ailian, Longgang District, Shenzhen, China. We determine the purposes and means of processing personal data and act as the data controller under the GDPR.

Privacy contact: jietainana@gmail.com. We respond to verifiable requests within 30 days.

2. What data we collect

We collect only the data you provide or that is necessary to deliver the service you request:

  • Enquiries and customization: name, company, email, phone, country/region and requirements.
  • Purchase requests: company, contact, email, phone, delivery country, optional tax ID, notes, products and quantities.
  • Newsletter: email address and subscription consent record.
  • Browser-local data: purchase list, language and privacy choice.
  • Security logs: the server and hosting provider process IP address, browser type and access time for security, rate limiting and troubleshooting.

Please do not send identity documents, health data, bank details or other special-category data in an enquiry. The site is not directed at children.

3. Purposes and legal bases

PurposeDataLegal basis
Responding to enquiries, quotes and supportContact and requirement dataSteps prior to a contract at your request / consent
Purchase requests and order communicationBuyer and delivery dataContract / pre-contract steps
Running the purchase list and language choiceLocal storageProviding the service you requested (necessary)
Keeping a consent recordTime, version, choicesGDPR accountability
Analytics / marketingOnly with consentConsent (not currently active)

We do not make decisions producing legal or similarly significant effects based solely on automated processing.

4. Cookies and local storage

We follow the ePrivacy Directive: no non-essential storage is enabled by default. Essential storage supports features you request and does not require consent; analytics and marketing are off until you opt in.

NameTypePurposeRetention
nexa_cart_v1 / nexa_cart_items_v1localStoragePurchase listUntil cleared or deleted
langCookieLanguage preference1 year
nexa_consent_v1localStoragePrivacy choice, time and versionUntil withdrawn or deleted
Analytics / marketingNot currently usedEnabled only with consentPer future configuration

You can change or withdraw consent at any time via . Withdrawal does not affect the lawfulness of processing before withdrawal.

5. Sharing, retention and transfers

We do not sell personal data. We share it only as necessary with hosting, email, CRM or logistics providers under data-processing agreements. Where data is transferred outside the EEA, we use EU Standard Contractual Clauses or equivalent safeguards.

Enquiry and purchase records are retained for no more than 24 months; consent records for 24 months after withdrawal; cart and language preferences in your browser until you delete them. Legal retention obligations may require longer periods.

6. Your rights

Subject to applicable law, you have the right to:

  • access the personal data we hold about you;
  • rectify inaccurate or incomplete data;
  • erase data (right to be forgotten);
  • restrict or object to processing;
  • data portability in a structured, commonly used format;
  • withdraw consent without affecting prior processing;
  • lodge a complaint with your local data protection authority.

We normally act free of charge and within 30 days. We may need to verify your identity; complex requests may be extended by two months with notice.

7. Export, deletion and data requests

Browser-local data (purchase list, language, consent) can be exported or deleted immediately using the panel on this page. For enquiry and purchase records held on our servers, submit a request by email.

Request a data export by email · Request erasure by email · Other data rights request

If you believe processing infringes the GDPR, you may complain to your local supervisory authority. We would appreciate the chance to resolve it with you first.

8. Changes and contact

We may update this notice and will show the date on this page. Material changes will be notified on the site or by email. Where a new purpose requires consent, we will ask again before processing.

Data controller: Shenzhen Jinshengchang Technology Co., Ltd.
Address: Room 305, Chuangzhao Plaza, Ailian, Longgang District, Shenzhen, China
Email: jietainana@gmail.com

VERSION 2026-10-29 · NEXA / SHENZHEN JINSHENGCHANG TECHNOLOGY CO., LTD.