Privacy Policy
Last updated: October 28, 2025We are Shenzhen Sola-E Technology Co., Ltd. (“we”, “us”, “our”). This Policy describes what personal data we collect when you interact with our B2B website (primarily for receiving inquiries), how we use it, who we share it with, your rights under applicable laws (such as the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA)), and how to contact us.
Contents
1. Who we are & contact
2. What personal data we collect
3. How we use your data & legal bases
4. Sharing & third parties
5. Cookies & tracking
6. International transfers
7. Data retention
8. Security
9. Your rights (EU & US)
10. Minors
11. Changes to this Policy
12. How to contact us & DSAR
1. Who we are & contact
Controller: Shenzhen Sola-E Technology Co., Ltd. Shenzhen, China EU Representative: We currently do not have an EU representative. If you believe we should appoint one due to the way we offer services to the EU, please contact us at the email below. Contact: Email: sam.zou@sola-e.us2. What personal data we collect
When you contact us through our website inquiry form we collect the information you provide, e.g.:- Full name
- Company name
- Business email address
- Inquiry content (message)
Automatically collected data
- IP address (note: analytics IP handling described below)
- Browser and device information (user-agent, screen size, OS)
- Referring pages, pages visited and timestamps, features used
- Server logs collected by Hostinger (access logs, errors)
3. How we use your data & legal bases
We use personal data for the following primary purposes:- To respond to your inquiry — process and reply to business requests. (Legal basis: performance of a contract / legitimate interest.)
- To operate and secure the website — e.g., Wordfence provides firewall and login protection. (Legal basis: legitimate interest.)
- Analytics and improvement — understanding site usage to improve content and performance (we use Google Analytics 4 via Rank Math). (Legal basis: legitimate interest; in certain cases, consent.)
- Spam and abuse prevention — we use Google reCAPTCHA v3 to detect and block spam. (Legal basis: legitimate interest or consent where required.)
- Legal compliance — to comply with laws or defend legal claims. (Legal basis: legal obligation.)
4. Sharing & third parties
We only share personal data in the following kinds of situations:- Service providers: we share data with trusted providers who process data on our behalf under contracts requiring GDPR-level protections where applicable. These include:
- Hosting: Hostinger (server logs and hosted site files).
- Form handling & backups: WPForms (forms processing; optional remote backup via Lite Connect may store copies on WPForms servers).
- Security: Wordfence (firewall, login protection).
- Analytics: Google Analytics 4 (data processed by Google).
- Caching & performance: LiteSpeed Cache / QUIC.cloud (image optimization, caching — if you enable QUIC.cloud image optimization images may be sent to QUIC.cloud servers for processing).
- Site builder & fonts: Elementor, Astra theme (we load Google Fonts locally to avoid contacting Google’s font servers; verify Astra’s “load fonts locally” setting is enabled).
- Legal reasons: where required by law (e.g., court order), or to defend our legal rights.
5. Cookies & tracking
We use cookies and similar technologies. Cookies are grouped by purpose:- Strictly necessary / functional cookies — required for core site functions (WordPress core, WPForms, Elementor, session features).
- Performance / analytics cookies — used by Google Analytics 4 (GA4) to measure site traffic and usage. GA4 is configured to anonymize IP addresses by default.
- Security cookies — set by Wordfence or reCAPTCHA to protect the site.
6. International transfers
Our servers and many of our service providers operate in multiple countries. When personal data is transferred outside the EEA or the UK (for example to our servers or third-party providers in non-EEA countries), we rely on appropriate safeguards such as:- European Commission Standard Contractual Clauses (SCCs) (where applicable), and
- other lawful transfer mechanisms recognized by EU data protection authorities.
7. Data retention
- Inquiry data (name, email, company, message): retained for up to 2 years after our last meaningful contact, unless a longer retention is required or permitted by law or you request deletion.
- Server logs (Hostinger): retained for security and troubleshooting as required by our host; typically logs are kept for up to 90 days unless needed longer for security incidents.
- Analytics data (GA4): aggregated analytics are retained as configured in GA4 (we typically use retention up to 14 months for user-level data in GA4; aggregated metrics may be kept longer).
8. Security
We implement reasonable organizational and technical measures designed to protect personal data, including:- Encryption in transit (TLS/HTTPS) for data sent to/from the website;
- Access control and role-based access to systems holding inquiry data;
- Website firewall and login security (Wordfence) and reCAPTCHA v3 to reduce automated abuse;
- Regular updates and security monitoring.
9. Your rights (EU & US)
European (GDPR) rights
If you are an EU data subject, you have rights including:- Right of access;
- Right to rectification;
- Right to erasure (“right to be forgotten”) subject to exceptions;
- Right to restriction of processing;
- Right to data portability;
- Right to object to processing (including profiling where applicable);
- Right to withdraw consent where processing relies on consent.
California (CCPA/CPRA) rights
If you are a California resident, you have rights under the CCPA including:- Right to know categories of personal information collected and disclosed;
- Right to request access to specific pieces of personal information;
- Right to request deletion of personal information (with exceptions);
- Right to opt out of sale of personal information — we do not sell your personal information as of the date of this Policy.