Privacy Policy

Last updated: 19 July 2026

This Privacy Policy explains how Shenzhen Richon Industry Co., Ltd. (trading as "Richon Auto"; referred to as "we," "us," or "our"), a manufacturer and global exporter of automotive and engine machining equipment, collects, uses, discloses, and protects the personal information of visitors, customers, and business partners who access our website at https://richonauto.com/ (the "Site") or otherwise interact with us.

We are committed to protecting your privacy and handling your personal data in a lawful, fair, and transparent manner, in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the UK GDPR, the California Consumer Privacy Act as amended by the CPRA ("CCPA/CPRA"), and other applicable data protection laws.

1. Who We Are

The data controller responsible for your personal information is:

  • Company: Shenzhen Richon Industry Co., Ltd. (trading as Richon Auto)
  • Business: Manufacturer and exporter of automotive & engine machining equipment
  • Registered Location: Shenzhen, Guangdong, China
  • Contact Email: info@richonauto.com
  • Data Protection Contact: info@richonauto.com

2. Scope of This Policy

This Policy applies to:

  • Visitors who browse the Site;
  • Individuals and representatives of businesses who submit inquiries, requests for quotations, or product catalog requests;
  • Customers and prospective customers who purchase or negotiate the purchase of our equipment;
  • Registered account holders and newsletter subscribers;
  • Suppliers, distributors, and business partners;
  • Users who interact with our social media, advertising, or marketing communications;
  • Any other individual whose personal data we process in connection with our business.

This Policy does not apply to the practices of third parties that we do not own or control, including linked websites and embedded third-party content. Those parties' own privacy policies govern their processing.

3. Information We Collect

We collect the following categories of personal information:

3.1 Information You Provide Directly

  • Identity and contact data: name, job title, company name, business email address, phone number, country, and postal address.
  • Inquiry and order data: the products or services you are interested in, quantities, specifications, delivery destination, and any message content you submit through forms or chat.
  • Account data: login credentials, profile information, and preferences if you create an account.
  • Transactional data: billing and shipping details, purchase history, and payment-related information (we do not store full payment card numbers on our servers).
  • Communication data: records of correspondence, support tickets, live-chat transcripts, and feedback.
  • Marketing preferences: your choices regarding subscriptions and communications.

3.2 Information Collected Automatically

  • Device and usage data: IP address, browser type and version, operating system, device type, screen resolution, language, referring URLs, pages visited, time spent on pages, scroll depth, click events, and interaction events.
  • Location data: approximate geolocation derived from your IP address.
  • Cookies and similar technologies: see Sections 9 and 10 for details.

3.3 Information From Third Parties

  • Business contact information from trade shows, industry directories, or publicly available sources;
  • Advertising and analytics providers (e.g., Google, Meta/Facebook, LinkedIn) reporting campaign interactions;
  • Shipping and logistics partners providing delivery status;
  • Anti-fraud, credit, and verification service providers;
  • Social platforms when you interact with our pages or use social login features.

4. How We Collect Information

We obtain personal information through:

  • Online inquiry, quotation request, and contact forms on the Site;
  • Newsletter and marketing subscription forms;
  • Account registration and order checkout (including WooCommerce, where enabled);
  • Live chat, chatbot, and support widgets;
  • Direct email, phone, messaging apps (e.g., WhatsApp, WeChat), or social media communication;
  • Cookies, pixels, tags, and analytics technologies when you browse the Site or interact with our ads;
  • Trade exhibitions, conferences, and business development activities;
  • Orders, contracts, and after-sales support interactions;
  • Third-party advertising, analytics, and social platforms as described below.

5. How We Use Your Information

We use your personal information for the following purposes:

  • To respond to your inquiries and provide quotations;
  • To process, fulfill, and deliver orders, including customs documentation;
  • To provide installation guidance, training, and technical support;
  • To manage warranties and after-sales service;
  • To operate and secure the Site, including spam and fraud prevention;
  • To communicate about products, promotions, events, and industry insights where permitted;
  • To measure and improve the effectiveness of our website, content, and advertising;
  • To personalize content and advertising based on your interests (with consent);
  • To improve our Site, products, and services through analytics and testing;
  • To comply with legal, tax, customs, and regulatory obligations (including CE, ISO 9001, and French EPR packaging requirements);
  • To prevent fraud, enforce our terms, and protect our rights and property;
  • To conduct analytics, aggregate statistics, and business reporting.

6. Legal Basis for Processing (GDPR)

Where the GDPR applies, we rely on the following legal bases:

  • Performance of a contract (Art. 6(1)(b)): to process inquiries, orders, and deliver products and services you request.
  • Legitimate interests (Art. 6(1)(f)): to improve our offerings, conduct business development, secure the Site, prevent fraud, and maintain our business operations.
  • Consent (Art. 6(1)(a)): for non-essential cookies, analytics, advertising, and marketing communications, which you may withdraw at any time.
  • Legal obligation (Art. 6(1)(c)): to comply with tax, customs, accounting, and product-compliance laws.

7. Third-Party Services, Plugins, and Technologies

Our Site is built on WordPress and integrates a variety of third-party services, plugins, and technologies to operate, analyze, secure, and promote our business. These third parties may collect and process personal data as independent controllers or processors. Below is a non-exhaustive list of the categories and providers we use:

7.1 Analytics and Measurement

  • Google Analytics 4 (GA4): collects usage statistics, demographics, and device data to help us understand Site traffic. Google may process data in the United States. Learn more or opt out at Google Privacy Policy and the Google Analytics Opt-out Browser Add-on.
  • Google Search Console: monitors Site search performance and indexing.
  • Microsoft Clarity: collects session replays, heatmaps, and interaction data to improve usability. See Microsoft Privacy.
  • Hotjar (where enabled): provides heatmaps and feedback widgets.

7.2 Advertising and Retargeting

  • Google Ads & Google Marketing Platform: uses cookies and the Google Ads pixel for conversion tracking and remarketing. See Google Advertising Technologies.
  • Meta (Facebook) Pixel & Meta Ads: the Facebook/Meta pixel tracks page views, events, and conversions to measure and optimize our advertising on Facebook and Instagram. Meta may process data in the United States. See Meta Privacy Policy and manage settings via Facebook Ad Preferences.
  • LinkedIn Insight Tag: measures campaign performance and enables audience targeting on LinkedIn. See LinkedIn Privacy Policy.
  • YouTube/Google embedded players: may set cookies when you view embedded videos. See Google Privacy Policy.
  • X (Twitter), Pinterest, TikTok (where enabled): advertising and sharing pixels.

7.3 Social Media Features

  • Social sharing buttons and embedded feeds from Facebook, Instagram, LinkedIn, YouTube, and X may transmit your IP address and page-view data to those platforms when loaded.
  • If you use social login (e.g., Facebook, Google, LinkedIn), the platform may share certain profile data with us subject to your platform privacy settings.
  • Interacting with our official pages on social platforms is governed by those platforms' policies.

7.4 WordPress Plugins and Site Functionality

  • Contact Form 7 / WPForms / Gravity Forms: process form submissions and may route them via email and anti-spam services.
  • WooCommerce (where enabled): manages accounts, carts, and orders.
  • Yoast SEO / Rank Math: SEO tooling that may set cookies for dismissing notices.
  • Wordfence / security plugins: monitor traffic, block malicious requests, and may log IP addresses and request data for security.
  • reCAPTCHA (Google): distinguishes humans from bots on forms; transmits interaction data to Google. See Google Privacy Policy.
  • Caching & performance plugins (e.g., WP Rocket, W3 Total Cache, LiteSpeed): may store temporary copies of pages to speed up delivery.
  • Cookie consent plugins (e.g., CookieYes, Complianz): record your consent choices.
  • Translation plugins (e.g., WPML, TranslatePress): remember your language preference.
  • Akismet / anti-spam: filters spam in comments and forms by analyzing submitted content.
  • Page builders (e.g., Elementor): render page content and may set functional cookies.

7.5 Content Delivery, Hosting, and Email

  • Cloudflare (CDN & security): routes traffic, provides DDoS protection, and may cache content and log IP data. See Cloudflare Privacy Policy.
  • Web hosting provider: stores the Site and its databases.
  • SMTP / email delivery services (e.g., SendGrid, Brevo, WP Mail SMTP): transmit and log outbound emails.
  • Email marketing platforms (e.g., Mailchimp, Brevo, MailPoet): manage subscriptions, send campaigns, and track opens/clicks. See Mailchimp Privacy or the applicable provider policy.

7.6 Live Chat and Customer Support

  • Live chat / chatbot widgets (e.g., Tawk.to, LiveChat, Zendesk, Crisp, Intercom): collect the messages you send, your email (if provided), and device/session data to provide support. See the applicable provider's privacy policy.
  • Helpdesk / ticketing systems: store support correspondence.

7.7 Payments

  • Where online payment is enabled, payment processing is handled by PCI-DSS-compliant providers (e.g., PayPal, Stripe, or bank transfer); we do not store full card details. See the applicable provider's privacy policy.

We strive to keep the list above current, but the set of plugins and integrations may change. Each third party's own privacy policy governs its processing.

8. How We Share Your Information

We do not sell your personal information. We may share it with:

  • Service providers: IT hosting, email, CRM, analytics, advertising, payment processing, and customer-support platforms acting on our behalf under contractual safeguards.
  • Advertising and social partners: Google, Meta/Facebook, LinkedIn, and others as described in Section 7, for measurement and campaign delivery.
  • Logistics and freight forwarders: to arrange shipping, customs clearance, and delivery to your location.
  • Distributors and agents: local partners who assist with sales, installation, or support in your region.
  • Professional advisers: lawyers, accountants, and auditors where necessary.
  • Authorities: government bodies, customs, or regulators where required by law or to protect our legal rights.
  • Corporate transactions: in connection with a merger, acquisition, or asset sale, subject to this Policy.

9. International Data Transfers

As a global exporter based in China, your personal information may be transferred to and processed in countries outside your home jurisdiction, including the People's Republic of China and other locations such as the United States and the European Union where our service providers (Google, Meta/Facebook, LinkedIn, Cloudflare, Mailchimp, etc.) operate.

Where we transfer personal data from the European Economic Area (EEA) or the United Kingdom to a country that has not been deemed to provide adequate protection, we implement appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Agreement (IDTA), or equivalent mechanisms approved by relevant authorities. You may request a copy of the relevant safeguards by contacting us.

10. Cookies and Similar Technologies

We and our third-party partners use cookies, pixels, tags, local storage, and similar technologies. These may be first-party (set by us) or third-party (set by partners such as Google, Meta, LinkedIn, Cloudflare).

10.1 Types of Cookies

  • Strictly necessary cookies: required for core functionality, security, load balancing, and consent recording. These cannot be disabled.
  • Functional cookies: remember preferences such as language, region, and logged-in state.
  • Analytics cookies: help us understand how visitors use the Site (Google Analytics, Microsoft Clarity, etc.).
  • Advertising cookies: used to deliver and measure relevant ads and build audiences (Google Ads, Meta Pixel, LinkedIn Insight Tag, etc.).
  • Social cookies: enable sharing and embedded social features.

10.2 Managing Cookies

You can manage or disable non-essential cookies through our cookie banner/consent tool, your browser settings, or third-party opt-out tools (e.g., YourAdChoices, Your Online Choices, and the Google/Facebook/Meta preference centers linked in Section 7). Disabling certain cookies may affect Site functionality.

10.3 Do Not Track

Some browsers transmit a "Do Not Track" (DNT) signal. Because there is no consistent industry standard, we honor DNT by disabling non-essential third-party trackers when we detect the signal where technically feasible.

11. Email, SMS, and Push Marketing

Where you have subscribed or where permitted by law, we may send you marketing communications about products, promotions, and industry insights via email, and where applicable SMS or push notifications. Every marketing message includes an unsubscribe link, and you may withdraw consent at any time without affecting the lawfulness of prior processing. We do not sell or rent your contact details to third parties for their own marketing.

12. Automated Decision-Making and Profiling

We do not engage in solely automated decision-making that produces legal or similarly significant effects about you. We may use automated profiling (e.g., interest-based advertising audiences, spam filtering, fraud scoring) that does not produce such effects. You may object to profiling for marketing at any time.

13. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, including to satisfy legal, accounting, customs, tax, and reporting requirements, and to resolve disputes. Typical retention periods:

  • Inquiry and quotation records: up to 24 months if no order results;
  • Customer and transaction records: duration of the relationship plus the applicable statutory period (commonly 5–10 years for tax and warranty purposes);
  • Marketing subscriptions: until you unsubscribe;
  • Analytics and advertising data: per provider retention (often 14–26 months, configurable);
  • Log, security, and cookie-consent records: up to 12–24 months;
  • Live-chat and support transcripts: up to 24 months.

14. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, alteration, or disclosure. These include HTTPS encryption in transit, a Web Application Firewall and DDoS protection (Cloudflare/Wordfence), access controls, least-privilege permissions, staff confidentiality obligations, regular updates and patching, and periodic security reviews. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

15. Data Breach Notification

In the event of a personal data breach that risks your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where required, affected individuals, in accordance with applicable law (e.g., within 72 hours under the GDPR where applicable). We will also cooperate with our processors' incident-response procedures.

16. Your Rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you;
  • Rectify inaccurate or incomplete data;
  • Erase your data ("right to be forgotten") in certain circumstances;
  • Restrict or object to processing, including objecting to direct marketing and profiling;
  • Data portability — receive your data in a structured, machine-readable format;
  • Withdraw consent at any time, where processing is based on consent;
  • Opt out of "sale"/"sharing" and limit use of sensitive personal information (CCPA/CPRA residents);
  • Lodge a complaint with a supervisory authority in your jurisdiction (e.g., your EU member state DPA or the UK ICO).

To exercise these rights, contact us at info@richonauto.com. We may need to verify your identity and will respond within the timeframe required by law (generally within one month under the GDPR; within 45 days under the CCPA/CPRA).

17. Children's Privacy

Our Site and services are intended for businesses and professional users and are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

18. Third-Party Links and Embedded Content

The Site may contain links to and embed third-party websites, videos, maps, and social feeds (including social media, logistics partners, certification bodies, and YouTube). Embedded content behaves as if you visited the third-party site. We are not responsible for the privacy practices of those sites and encourage you to review their policies.

19. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Material changes will be posted on this page with an updated "Last updated" date, and where required we will provide more prominent notice. We encourage you to review this Policy periodically.

20. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will address your inquiry promptly and in accordance with applicable law.