Privacy Policy

Scope of this policy

This policy applies to personal data collected through this website (www.permanentsteelstructure.com), including its English-language pages, our inquiry and dealer application forms, email correspondence, and WhatsApp business communications. Personal data means information that identifies you as an individual, such as your name, email address, phone number, or company role.

We process data from customers, potential customers, and business partners in more than 30 countries. This policy is aligned with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), and we apply its core protections to all visitors regardless of where they are located.

1. Information we collect

We collect only the minimum data needed to respond to business requests:

• Contact details — name, job title, business email address, and phone or WhatsApp number, provided when you submit an inquiry, request a quotation, or apply for a dealer partnership.
• Company information — company name, country, industry, and (for dealer applications) years in business, annual purchase volume, and company profile.
• Project requirement details — the technical information you choose to share about a structure: dimensions, spans, loads, site location, drawings, and specifications.
• Technical usage data — basic server logs (IP address, browser type, pages visited, referring site) used to maintain site security and diagnose errors. We do not use this data to build profiles of individual visitors.

2. How we use your information

Your data is used exclusively for the purposes you would reasonably expect:

• Preparing quotations, structural assessments, and technical proposals you request.
• Communicating about your project — technical coordination, production updates, shipment notifications, and installation support.
• Evaluating dealer partnership applications and managing the relationship with approved distributors.
• Responding to your privacy-related requests, as described in Section 6 below.

We do not use your data for marketing you have not requested, and we do not sell, rent, or trade personal data to any third party.

3. Legal basis for processing

Under GDPR Article 6, we process personal data on the following grounds:

• Consent (Art. 6(1)(a)) — where you submit a form, we process the data you provide because you have freely and clearly consented by submitting it. You may withdraw consent at any time by contacting us.
• Contract performance (Art. 6(1)(b)) — where processing is necessary to prepare or perform a contract with you, such as a quotation, purchase order, or distribution agreement.
• Legitimate interests (Art. 6(1)(f)) — for maintaining website security, preventing fraud, and keeping records required by Chinese trade and tax law.

4. Data retention

We keep personal data only as long as the underlying purpose requires:

• Project data (drawings, specifications, correspondence, shipment records) is retained for 7 years after project completion, to support warranty obligations, customs audits, and legal compliance.
• Inquiry data (contact and request information that does not lead to a contract) is retained for 3 years from the last meaningful contact, then securely deleted or anonymized.
• Dealer partnership records are retained for the term of the agreement plus 3 years.

5. Data sharing

We never sell personal data. We share only the minimum necessary information with service providers who help us deliver your project:

• Logistics and freight forwarders — shipping addresses and consignee contact details required to arrange delivery.
• Customs brokers and authorities — exporter, importer, and consignee details required by the customs regulations of the countries involved.
• Financial institutions — banking details necessary to process payments under your contract.

Each provider receives only the data required for their specific task and is bound by contract to use it solely for that purpose. We do not transfer personal data to any organization for its own independent use.

6. Your rights

Depending on your jurisdiction, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure ("right to be forgotten") — request deletion of your data where retention is no longer justified.
• Restriction — limit how we process your data in certain circumstances.
• Data portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — at any time, without affecting the lawfulness of processing before withdrawal.

California residents have the additional right to know the categories and specific pieces of personal information we collect, and to request that we delete it (CCPA). We do not sell personal information, so no "do not sell" opt-out is required. To exercise any of these rights, email market@permanentsteelstructure.com with the subject "Privacy Request"; we respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

7. Cookies

This website uses only functional cookies — for example, to keep the navigation menu state consistent during your visit. We do not use tracking, advertising, or analytics cookies that follow you across other websites. No third-party cookies are set by this site.

8. Security measures

We protect personal data with a defense-in-depth approach:

• Encryption — the site is served over HTTPS (TLS), encrypting all data in transit; data at rest is stored on access-controlled systems with encryption where available.
• Access control — personal data is accessible only to named staff with a legitimate business need (export, engineering, finance, or legal roles).
• Regular audits — access logs and processing activities are reviewed periodically, and staff receive data-handling training.

No method of transmission or storage is 100% secure. In the event of a breach affecting your personal data, we will notify you and the relevant supervisory authority as required by applicable law.

9. Contact for privacy matters

Questions, requests, or complaints about this policy should be directed to our data handling team:

• Email: market@permanentsteelstructure.com
• Phone: +86 516-83269982
• Postal address: Jiangsu Permanent Steel Structure Co., Ltd., No. 99 Yangshan Road, Xuzhou, Jiangsu Province, China

10. Changes to this policy

We may update this policy as our services, technology, or legal obligations change. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be announced on this page, and where required, we will seek fresh consent for new processing activities.