Last updated:
HTXH (Direct Fish Supply) (“HTXH”, “we”, “us”) farms, processes and exports seafood from Guangdong, China. This page explains, in plain language, what personal data this website collects, why we collect it, how long we keep it, and what you can ask us to do about it.
We have written this policy to match what this website actually does. If you find it does not, tell us and we will correct it.
1. The short version
| Question | Answer |
|---|---|
| Do you track visitors? | No. There is no analytics service, no advertising pixel, no heat-map or session-recording tool, and no social media plugin on this website. We do count how often each contact button in our footer is clicked — but only as a daily running total, with no IP address, no cookie and nothing that could identify you. See section 3.1. |
| Do you set cookies on a first visit? | No. A normal visitor receives no cookie at all. |
| Is there a contact form? | Yes — one short enquiry form at /inquiry/. It collects only what you type in yourself, sets no cookie, and you can ask us to delete your entry at any time. See section 3.4. |
| Do you sell or share personal data? | No. We do not sell, rent or trade personal data, and we do not use it for advertising. |
| Do you profile people or make automated decisions? | No. |
2. Who is responsible for your data
HTXH (Direct Fish Supply) is the data controller for the personal data described in this policy.
- Registered address: Room 719, Building A, Tizhi Creative Park, Bao’an District, Shenzhen, Guangdong, China
- Processing site: Zhelin Wharf, Raoping County, Chaozhou, Guangdong, China
- Privacy contact: Richeal, Business Director — zwq191413@gmail.com
3. What we collect
3.1 Browsing our website
When you simply read this website, we do not collect personal data from you. There is no analytics service, no advertising network, no heat-map or session-recording tool, and no third-party tracking script of any kind. We do not build visitor profiles, and we cannot see who you are.
We keep one kind of count. Our footer carries buttons for E-mail, WhatsApp, WeChat and Telephone, and we record how often each of them is clicked. That record is a running total per calendar day: it stores the name of the button and the number of clicks, and nothing else. It contains no IP address, sets no cookie, stores nothing on your device, and does not record which page you came from or where you went next. A figure such as “the WhatsApp button was clicked seven times on 10 October” cannot be traced back to any individual, so it is not personal data about you. We use it only to see which contact channels are worth keeping.
3.2 Contacting us
You can reach us with your own e-mail client, WhatsApp, WeChat or the telephone — all of which are links on our Contact page and in the footer — or through the enquiry form described in section 3.4. When you write or call us, we receive whatever you choose to send, which typically includes your name, company, country, e-mail address, telephone number and the details of your inquiry.
We use that information only to answer you, prepare a quotation and — if we go on to trade together — to perform the contract.
3.3 The sign-in area at /account/
The page at /account/ is a small password-protected area for our own staff and contributors, so that news posts can be drafted and reviewed. It is not a customer account, and visitors do not need one.
- Signing in requires a username or e-mail address and a password.
- Passwords are stored only in hashed form. We never see your password.
- When a sign-in succeeds, WordPress sets an essential session cookie (see section 4).
- To protect the site against password-guessing, we count failed sign-in attempts. Those counters are keyed on a hash of the requesting IP address rather than on the readable address, are held in temporary server-side records, and are deleted automatically within 24 hours.
3.4 The enquiry form at /inquiry/
The page at /inquiry/ carries a short form you can fill in if you would like us to get in touch. It is the only form on this website, and nothing in it is compulsory except your name, one way of reaching you, and a tick to confirm you have read this policy.
The form collects:
- your name, and your company if you give one;
- an e-mail address and/or a telephone or WhatsApp number;
- your country;
- how you heard about us — website, search engine, social media, trade show or exhibition, a referral, or other;
- whether you would like us to follow up with you;
- anything else you choose to write in the message box.
We use these details for one purpose: to answer your enquiry, tell you whether we can supply what you are looking for, and prepare a quotation. If you tell us you would rather not be contacted again, we keep your details on file but do not write to you again.
Submitting the form stores your details in our database on the server described in section 7, and sends a notification e-mail to our sales mailbox (see section 6). The form sets no cookie, and we do not use your details for advertising, profiling or automated decisions.
To keep automated junk out, we count how many times the form has been submitted from the same connection. That counter is keyed on a hash of the requesting IP address rather than on the readable address, is held in a temporary server-side record, and is deleted automatically within 24 hours. It is not linked to the details you submit, and it does not prevent you from writing to us if the form is temporarily unavailable.
An entry is kept for 24 months from the day you send it (see section 8), and you can ask us to delete it sooner at any time using the contact details in section 9.
3.5 Server access logs
Our web server records standard access logs for every request: IP address, date and time, the page requested, the referring page and the browser identification string. We use these logs solely to keep the site secure and to diagnose faults. We do not use them to analyse visitor behaviour.
4. Cookies
| Cookie | Set when | Purpose | Lifetime |
|---|---|---|---|
wordpress_logged_in_* |
Only after a successful sign-in at /account/ |
Keeps our editors signed in. Strictly necessary. | Session, or 14 days if “remember me” is ticked |
| No other cookie is set. This website sets no cookie on a normal visit, stores nothing on your device in order to count clicks, and runs no advertising, profiling or third-party analytics script. No cookie consent banner is shown or required. | |||
5. Why we are allowed to process your data
Under the EU General Data Protection Regulation (GDPR) we rely on the following legal bases:
- Steps taken at your request before a contract (Article 6(1)(b)) — handling your inquiry or your enquiry-form submission and preparing a quotation.
- Your consent (Article 6(1)(a)) — where you tick the consent box on the enquiry form, and where you ask us to stay in touch. You can withdraw that consent at any time, and we will stop contacting you.
- Performance of a contract (Article 6(1)(b)) — delivering goods and handling shipping documents once we trade together.
- Legitimate interests (Article 6(1)(f)) — keeping this website secure, preventing password-guessing and abuse, and keeping access logs for fault diagnosis.
- Legal obligation (Article 6(1)(c)) — where we are required to keep records, for example for food-safety, export or tax purposes.
The click counts described in section 3.1 do not identify anyone. They are therefore not personal data, and no legal basis under the GDPR is needed for them.
We do not send marketing e-mail to people who have merely visited this website. If we ever want to send you commercial updates, we will ask for your consent separately, and you will be able to withdraw it at any time.
6. Who else can see your data
- Tencent Cloud — hosts this website. The server is located in Frankfurt, Germany (European Union). Tencent Cloud acts as our processor and is bound by a data processing agreement.
- Tencent Maps — provides the interactive map shown on our home page and Contact page. Loading that map causes your browser to contact a Tencent Maps server, which receives your IP address and standard request data. Tencent is a Chinese company and this step involves a transfer of that technical data outside the European Economic Area. If you prefer to avoid it, do not scroll to the map area — nothing else on the website depends on it.
- Google (Gmail) — the notification e-mail we receive for each enquiry-form submission is delivered to a Gmail mailbox. Google LLC is a US company, so that message is transferred to and stored in the United States, under Google’s own terms. We use it only as a mailbox; we give Google no other data, and we do not use it for advertising.
- Meta (WhatsApp) and Tencent (WeChat) — if you click a WhatsApp or WeChat link, you leave our website and are handled under that provider’s own privacy policy. We never receive your contact list or your phone number until you choose to write to us.
We do not sell personal data, and we do not share it with advertising networks.
7. Where your data is held
This website and its database run on a server in Frankfurt, Germany, inside the European Union. Data you send us by e-mail or a messaging app is also handled by our team in China, because that is where our sales and supply-chain staff work. Where personal data is accessed from China, we handle it under this policy and apply the safeguards described in section 10.
Enquiry-form submissions are stored in that German database. The notification e-mail that tells us a new submission has arrived is delivered to a Gmail mailbox, which means a copy of that message is held by Google in the United States (see section 6).
8. How long we keep it
| What | How long |
|---|---|
| Server access logs | No longer than 30 days, then deleted automatically. |
| Sign-in abuse counters (hashed IP) | Up to 24 hours, then deleted automatically. |
| Sign-in session cookie | Until sign-out, or 14 days at most. |
| Inquiry correspondence | 24 months from the last message, so that we can pick up an enquiry you return to. Deleted earlier on request. |
| Enquiry form submissions | 24 months from the day you submit the form, then deleted automatically. Deleted earlier on request. |
| Trade records (contracts, invoices, shipping and food-safety documents) | As long as required by applicable commercial, tax and food-safety law, and no longer. |
| Anonymous click counts (button name and daily total only) | Kept for as long as this website runs. A daily total cannot be traced to any person, so there is no personal record to delete. |
9. Your rights
If you are in the European Union or the United Kingdom, you have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct data that is wrong or incomplete;
- ask us to delete data that we no longer need;
- ask us to restrict what we do with your data;
- object to processing based on our legitimate interests, including our security logging;
- receive the data you gave us in a portable, machine-readable format;
- withdraw any consent you have given, at any time and without penalty.
To exercise any of these rights, e-mail zwq191413@gmail.com. We answer within one month. We may ask you to confirm your identity so that we do not disclose data to the wrong person.
You also have the right to complain to your national data protection supervisory authority. If our reply does not satisfy you, you may complain to the authority in your country of residence, place of work, or where the issue occurred.
10. Security
The website is served over HTTPS, so traffic between your browser and our server is encrypted. Access to the website’s administration area is restricted to named staff, passwords are stored hashed, and repeated failed sign-in attempts are rate-limited. Only the people who need your data to answer your inquiry can see it.
If a data breach ever occurs that is likely to put your rights at risk, we will inform the relevant supervisory authority within 72 hours and tell you directly where the law requires it.
11. Automated decisions and AI
We do not use automated decision-making, and we do not profile visitors. This website currently contains no AI chatbot or AI assistant. If we add one, we will update this policy first and the assistant will identify itself as artificial intelligence before it starts the conversation, as required by Article 50 of the EU AI Act.
12. Children
This website is a business-to-business platform for seafood trade. It is not directed at children, and we do not knowingly collect data from anyone under 16.
13. Changes to this policy
If we change how this website handles personal data, we will update this page and change the date at the top. Material changes will also be noted in the news section of this website.
14. Contact
Questions about this policy, or about how we handle your personal data, go to:
HTXH (Direct Fish Supply)
Richeal, Business Director
E-mail: zwq191413@gmail.com
WhatsApp: +86 137 1444 1413
Post: Room 719, Building A, Tizhi Creative Park, Bao’an District, Shenzhen, Guangdong, China
