Privacy Policy

1. Introduction

HSCRANE ("we," "us," or "our") operates the website www.girderequipment.com (the "Site"). We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our Site, submit an inquiry form, or otherwise interact with us. It also describes your rights under applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

By using our Site, you consent to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Site.

2. Information We Collect

2.1 Information You Provide Voluntarily

When you fill out a contact form, request a quote, submit an agent application, or communicate with us via email or WhatsApp, we collect the information you voluntarily provide, which may include:

• Full name
• Email address
• Phone / WhatsApp number
• Company name
• Project details and equipment requirements
• Any other information you choose to share in your message

2.2 Information Collected Automatically

When you browse our Site, certain information is collected automatically through standard web technologies:

• Log Data: IP address, browser type and version, operating system, referring/exit pages, date and time of visit.
• Usage Data: Pages viewed, time spent on pages, click patterns, and scroll behavior.
• Device Information: Device type, screen resolution, and language preferences.

This data is collected via Google Analytics (Site Kit by Google) and standard server logs. It is anonymized and used solely for website performance analysis and security monitoring.

3. Cookies & Tracking Technologies

Our Site uses the following categories of cookies:

• Essential Cookies: Required for the Site to function properly — including session management, form submission, and language preference (TranslatePress). These cannot be disabled.
• Analytics Cookies: Google Analytics cookies (_ga, _gid, _gat) help us understand how visitors interact with the Site. All data is anonymized. You can opt out by installing the Google Analytics Opt-out Browser Add-on.
• Functional Cookies: Used by TranslatePress to remember your language preference across pages.

We do not use advertising, retargeting, or third-party marketing cookies on this Site.

You can control cookies through your browser settings. Note that disabling essential cookies may affect Site functionality.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Inquiry Response: To respond to your contact form submissions, provide equipment quotations, technical specifications, and project consultations.
• Agent Applications: To evaluate and process your application to become an HSCRANE sales agent or distributor.
• Communication: To follow up on your inquiries via email, phone, or WhatsApp.
• Site Analytics: To analyze Site traffic, improve user experience, and optimize content.
• Security & Legal Compliance: To protect the Site against fraud, abuse, and security threats; to comply with applicable legal obligations.

We do not use your personal data for automated decision-making or profiling.

5. Legal Basis for Processing (GDPR)

For visitors from the European Economic Area (EEA), our legal basis for processing your personal data is:

• Consent: When you voluntarily submit a form on our Site, you give your explicit consent to the processing of your data for the stated purpose.
• Legitimate Interest: We have a legitimate interest in analyzing anonymized Site usage data to improve our services and ensure Site security.

You may withdraw your consent at any time by contacting us (see Section 10).

6. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

We may share your data only in the following limited circumstances:

• Service Providers: We use Google Analytics (via Site Kit) for website analytics. Google processes anonymized usage data in accordance with their Privacy Policy.
• Internal Team: Your inquiry data is accessible only to our sales and engineering teams for the purpose of responding to your request.
• Legal Obligations: We may disclose information if required to do so by law, court order, or governmental regulation.
• Business Transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. You will be notified via email and/or a prominent notice on our Site.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Inquiry and form submission data: Retained for up to 3 years from your last interaction, to maintain communication history and provide ongoing service.
• Analytics data: Retained in accordance with Google Analytics' default data retention settings (currently 14 months for event-level data).
• Server logs: Rotated periodically for security purposes, typically no longer than 30 days.

You may request deletion of your data at any time (see Section 8).

8. Your Rights

8.1 GDPR Rights (EEA Visitors)

If you are located in the European Economic Area, you have the following rights under the GDPR:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to certain legal exceptions.
• Right to Restrict Processing: Request limitation of how we process your data.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8.2 CCPA Rights (California Residents)

Under the California Consumer Privacy Act, California residents have the right to:

• Know what personal information is collected, used, shared, or sold.
• Request deletion of personal information.
• Opt out of the sale of personal information (note: we do not sell personal data).
• Non-discrimination for exercising CCPA rights.

To exercise your CCPA rights, contact us at [email protected].

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• SSL/TLS encryption for all data transmitted between your browser and our servers.
• Secure server infrastructure provided by Cloudways with firewall protection.
• Access controls limiting data access to authorized personnel only.
• Regular security updates and vulnerability monitoring.

While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Third-Party Links

Our Site may contain links to external websites (including social media platforms, Google Maps, and partner sites). This Privacy Policy does not apply to third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our Site is intended for business professionals and is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately and we will promptly delete it.

12. International Data Transfers

Our Site is operated from China and hosted on servers located in the United States (Cloudways / DigitalOcean). If you are located outside these jurisdictions and choose to provide information to us, your data will be transferred to and processed in the United States. By submitting your information, you consent to this transfer.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make changes, we will revise the "Last Updated" date at the top of this page. We encourage you to review this page periodically.

Material changes will be communicated via a prominent notice on our Site or, where appropriate, via email.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a complaint regarding our data practices, please contact us:

• Email: [email protected]
• Address: Room 1301, Xinghai Center, Xinxiang City, Henan Province, China
• Website: www.girderequipment.com

If you are in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.