Privacy Policy

1. Who We Are

CHALVO-BAG (CHALVO Canvas Bag Factory), H-7 Guanling Industrial Project Cluster Area, Fuding City, Ningde, Fujian, China, is the data controller for this website. For any privacy matter contact us at sales@chalvobag.com.

2. Data We Collect

Inquiry form data you submit voluntarily: company name, contact name, country, email address, phone / WhatsApp number, estimated quantity, product interest, customization requirements, and any reference images or print artwork files you upload.

Technical data collected automatically while you browse: your IP address, browser user agent and the page you are on — used solely for rate limiting, abuse prevention and customer-service context.

Live chat data: the messages you send through the chat widget and the nickname you choose to provide.

3. How We Use Your Data

We use your data exclusively to respond to your inquiry, prepare quotations and samples, and follow up the business communication you initiated. We do not send unsolicited marketing emails, build behavioural profiles, or sell your data.

4. Legal Basis (GDPR)

Processing is based on Art. 6(1)(b) GDPR (steps prior to entering a contract at your request) and Art. 6(1)(f) GDPR (our legitimate interest in answering business inquiries).

5. Data Retention

Inquiries and uploaded files are retained for up to 24 months after last contact; live-chat history for up to 12 months, after which they are deleted or anonymised.

You may request earlier deletion of your data at any time via sales@chalvobag.com.

6. Your Rights

EU / EEA residents (GDPR): you have the right to access, rectify, erase, restrict and port your data, to object to processing, to withdraw consent, and to lodge a complaint with your national supervisory authority.

California residents (CCPA / CPRA): you have the right to know what personal information is collected and to request its deletion. CHALVO-BAG does not sell or share personal information as defined by the CCPA.

7. Sharing and Cookies

We use Google Analytics to collect anonymised usage statistics (pages viewed, visit duration, referrer) and to measure the effectiveness of our inquiry form. Google may set cookies such as _ga, which you can block or delete in your browser settings. The site also sets one strictly necessary session cookie (hcb_sid). Data is shared with courier and logistics partners only when you confirm a shipment.

8. Security

Your data is transmitted encrypted over HTTPS and stored on access-controlled systems; production secrets are managed via Google Cloud Secret Manager.

9. Changes to This Policy

We may update this policy from time to time. The current version is always published on this page together with its update date.