Privacy Policy
What this website collects, what happens to the drawings and photos you send us by email, and how to get your data back or removed.
Last updated: 17 September 2026
1. Scope and who is responsible
This policy covers hvbfcloth.com: the pages you read, the enquiry (RFQ) forms you submit, and the email exchange that follows. It does not cover other companies' websites that we link to.
The operator of this site is the filter cloth manufacturer you are enquiring with, and acts as the data controller for the personal data described below. The registered legal name, address and data protection contact are not published here yet (UNKNOWN — see section 14). Until they are, requests reach us through the RFQ form, as described in section 13, and are handled the same way.
2. What we collect
2.1 What you type into an enquiry
The Quick RFQ asks for: your name, your email address, your company, your country, the product or application you are asking about, and your message. The form does not take file attachments — see section 3.
The Engineering RFQ adds technical fields about the machine and the duty: equipment brand and model, filtered material, the current cloth, belt width and length, cloth material, mesh or micron rating, air permeability, temperature, pH, the problem you are seeing, and annual quantity. These are machine facts, not personal data — but they arrive attached to your name and company, so they are covered here too.
2.2 What your browser sends
Like any website, this one receives your IP address, the page you requested, your user agent and the referring page. These appear in the hosting and CDN logs described in section 6.
2.3 What we do not ask for
We do not ask for payment card details, government identity numbers, or any special category data (health, religion, political opinion, biometrics). Please do not put them in the message field or in an attachment — if you do, we will remove them.
3. Drawings and photos you send us
There is no file upload on this website. The enquiry form sends text fields only. If we need a drawing, a nameplate photo or a photo of the old cloth, you attach it to your reply to the confirmation email we send you — so those files travel as ordinary email attachments and live in the email thread, nowhere else.
Nameplate photos, old-cloth photos and drawings are the most sensitive thing you send us — for many buyers a drawing is a commercial asset. Two commitments follow from that:
- Your files are never displayed anywhere on this website — not in a gallery, not as a case study, not as a thumbnail.
- We do not pass your files to third parties beyond the email providers that carry the message, and we do not show them to other customers.
Because attachments arrive by email, they are held wherever that mailbox is held, for as long as the thread is kept (section 8). If a drawing is too sensitive for ordinary email, do not send it — give us the dimensions in the form fields instead, which is usually enough to start.
5. Why we use it, and on what basis
| Purpose | Data used | Legal basis (GDPR Art. 6) |
|---|---|---|
| Answering your enquiry, specifying cloth, quoting | RFQ fields, attachments | (b) steps taken at your request before a contract |
| Fulfilling an order and keeping the commercial record | RFQ fields, order correspondence | (b) contract; (c) legal obligation for tax and export records |
| Keeping the site up and blocking abuse | IP address, request logs | (f) our legitimate interest in a working, non-abused site |
| Understanding which pages actually help buyers | Analytics events | (a) your consent |
We do not use your enquiry data to build advertising profiles, and we do not add you to a marketing list because you asked a technical question.
6. Who else processes it
We use the following service providers. Each one is listed with what it actually receives.
| Role | Provider | What it receives | Status |
|---|---|---|---|
| Website hosting and delivery | Vercel Inc. (United States) | Page requests, IP address, user agent, referring page — in standard server logs | In use |
| DNS and content delivery | Cloudflare, Inc. (United States) | DNS lookups for this domain, and page requests and IP addresses passing through the edge network | In use |
| Sending enquiry email | Resend (United States) | Everything you type into the RFQ form — your name, email address, company, country and the technical fields — because the form is delivered to us as an email through this provider | In use |
| Web fonts | Google LLC (Google Fonts) | Your IP address and user agent, because the font files are requested from Google servers when a page loads | In use |
| Website analytics | Google LLC (Google Analytics 4) | Nothing at present — no analytics script is loaded on this site | Not in use (see section 4) |
| Session analytics | Microsoft Corporation (Microsoft Clarity) | Nothing at present — no session-recording script is loaded on this site | Not in use (see section 4) |
Your enquiry and your files are not sold, and are not passed to anyone outside this list except where we are legally required to, or where you ask us to involve a third party (for example, a freight forwarder you name).
7. International transfers
The providers in section 6 are United States companies and our own operations are outside the European Economic Area. If you write to us from the EEA or the UK, your data will be transferred outside it. Those transfers rely on the providers' standard contractual clauses and on the fact that you sent the enquiry in order to receive a quotation. If you would rather not have a particular file leave your country, do not attach it — send the dimensions in the form fields instead, which is usually enough to start.
8. How long we keep it
| What | Kept for |
|---|---|
| Enquiry emails, and any files you attach to the reply | UNKNOWN — they sit in our mailbox and no deletion period has been set yet |
| Order and quotation records | UNKNOWN — will follow the statutory accounting period once the operating entity is confirmed |
| Server and CDN logs | The provider's standard log window |
| Analytics data | UNKNOWN — retention window not yet configured |
You can ask us to delete your enquiry and its attachments at any time, and we will, unless we still need the record for an order in progress or for a legal obligation.
9. How we protect it
- The site is served over HTTPS with HSTS; the enquiry form posts over TLS.
- The enquiry reaches us as an email rather than sitting in a database on this website. There is no customer login, no stored enquiry archive on the web server, and nothing here for someone to break into and read.
- Access to enquiry records is limited to the people handling the enquiry.
We are not going to list security measures this site does not have. Ordinary email is not end-to-end encrypted: if a drawing is confidential enough that this matters to you, send dimensions instead of the file and tell us — we will agree another route.
No system is perfect. If you believe your data has been exposed through this site, tell us through the RFQ form and mark the message Security.
10. Your rights (GDPR / UK GDPR)
If the GDPR or UK GDPR applies to you, you have the right to:
- Access — get a copy of the personal data we hold about you.
- Rectification — have inaccurate data corrected.
- Erasure — have your data deleted where we no longer need it.
- Restriction — have processing paused while a dispute is resolved.
- Portability — receive the data you gave us in a machine-readable form.
- Objection — object to processing based on our legitimate interests.
- Withdraw consent — for analytics, at any time, without affecting anything else.
We answer these requests within one month. You also have the right to complain to your national data protection supervisory authority, and you do not have to go through us first.
11. California residents (CCPA/CPRA)
In the past 12 months this site has collected these categories of personal information: identifiers (name, email, IP address), commercial information (the products you enquired about), professional information (your company and role), and internet activity (pages viewed, where analytics is enabled). The sources are you and your browser; the purposes are in section 5; the recipients are in section 6.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We do not knowingly collect sensitive personal information, and we do not offer financial incentives in exchange for personal information.
You have the right to know, to delete, to correct, and to opt out of sale or sharing — the last of which does not arise here because neither happens. You will not be treated differently for exercising any of them. Use the route in section 13; an authorised agent may act for you with written proof.
12. Children
This is an industrial business-to-business site. It is not directed at children and we do not knowingly collect data from anyone under 16. If a child has sent us data, tell us and we will delete it.
13. How to reach us
A published privacy email address is UNKNOWN at the time of writing, so privacy requests come in via our RFQ form:
- Open the enquiry form.
- Put Privacy request at the start of the message field, and say which right you are exercising.
- Give us enough to find your record — the email address you used, and roughly when you wrote to us. Do not attach identity documents; we do not want them and will not keep them.
These messages are routed to the same inbox as enquiries and are handled as privacy requests, not as sales leads.
14. Changes to this policy
When this policy changes, the date at the top changes with it. The items below are known gaps rather than hidden ones, and this page will be updated as each is closed:
- The legal entity behind this site, its registered address and its data protection contact are not yet published here. They will be added to section 1 as soon as they are confirmed — we are not going to invent them in the meantime.
- Retention periods for enquiry records and quotation records are not yet fixed (marked UNKNOWN in section 8).
- The analytics data retention window in Google Analytics is not yet fixed (UNKNOWN).