Effective date: 27 October 2026
1. Who handles your information
ExactMec is operated by 台州巽风贸易有限公司, a company registered in mainland China. In this policy, “we” and “us” mean that company as the operator responsible for the inquiry information described here.
Contact address: No. 46 Jinqing Avenue, Luqiao, Taizhou, Zhejiang, China (中国浙江台州路桥金清大道46号) Privacy contact: sales@exactmec.com Business contact: sales@exactmec.com Website: https://exactmec.com
This website collects mold inquiries and provides a link to WhatsApp for further discussion. It does not accept online orders or payments. Our restricted dashboard is used to review submitted inquiries and keep relevant follow-up notes. Any later project agreement is arranged separately.
Submitting an inquiry does not require registration or sign in. Customer email-code sign in is not enabled for this release. If the optional My Inquiries service becomes available, you may verify the same email address to view your submitted inquiries, add project notes and request withdrawal of an inquiry. Its availability will be shown before you use it.
2. Information we receive
When you submit a mold inquiry, we receive your name, company or professional identity, email, contact number, country and city, together with the component name, project description, mold quantity and whether you have drawings or a physical sample.
You may also provide a company website, application, material requirements, planned purchasing time, and an approximate per-mold budget and currency. These additional items are optional. A company name, location or stated budget is not treated as proof of identity or purchasing capacity.
We record an inquiry reference, submission time, follow-up status, your contact choices and their versions, and relevant review notes. With a submitted inquiry, we also save the first available and submission page, a referring website origin, and available campaign labels (UTM parameters). Page query strings, referral paths and advertising click identifiers are excluded; unknown sources remain blank. The source snapshot is held in page memory before submission, without a visitor identifier or persistent browser history. We use it to understand where this particular inquiry came from. Our website and infrastructure may also process technical information needed for delivery, security and error handling, as described below.
The inquiry form lets you upload product drawings or reference photos with your project request. You may also submit an early project description without files, or tell us you have a physical sample. Files are held in private Cloudflare R2 storage and linked to your inquiry. Authorized staff can download them to assess and respond; a physical sample is arranged separately. We do not place project files in public pages, analytics, WhatsApp links or inquiry reminder emails. If we later receive further drawings, sample information or messages through an agreed communication channel, we use them for the project discussion and assessment. Please do not include identification documents, payment credentials or unrelated sensitive information in an inquiry.
If optional customer sign in is enabled, it processes the email address you enter, a short-lived email verification challenge and a limited session record. The website database stores verification hashes rather than the email code or a password. Project notes and withdrawal requests you add through My Inquiries are attached to the relevant inquiry. Verifying an email address does not verify a company or purchasing capacity.
3. Why we use it
We use relevant information to assess whether a project matches our custom die casting mold services, identify missing quotation information, respond to your request, coordinate necessary technical assessment, and follow up about that inquiry. We also use limited operational information to protect the service, avoid duplicate submissions and manage access.
Customer verification and the necessary sign-in cookie are used to restrict My Inquiries to records associated with the verified email address. Customers cannot view our internal review notes or other customers' records. Choosing not to use this service does not prevent you from submitting an inquiry or contacting us.
We may review relevant public business information to check consistency with a project. We do not treat automated format checks or a complete form as verification of a company, and we do not make a final purchasing qualification solely from a budget, city or email domain.
Inquiry handling is separate from unrelated marketing. Submitting the form does not sign you up for a newsletter or authorize a general promotional campaign.
4. Your choices and the basis for processing
For the inquiry processing described on the form, we request the purpose-limited permission stated there. You can withdraw that permission by contacting us. We explain the effect on a pending inquiry and stop processing that depends on the withdrawn permission, subject to any applicable requirement or other independently applicable basis to retain limited records.
The necessary fields are identified on the form. Optional project information can be left blank. The form's limited-purpose permission does not authorize unrelated marketing, calls or optional tracking. If a later activity requires a separate notice, choice or other legal basis, we address it before that activity. An inquiry choice is not a substitute for a separately required permission.
5. How we contact you
After a successful submission, we can follow up by email about your inquiry even if you do not continue to WhatsApp. If you choose the optional WhatsApp message permission, we may also message that number about this inquiry and its progress. You can submit without choosing WhatsApp and ask us to stop using a channel at any time.
Permission for project messages is not permission for unrelated marketing or WhatsApp calls. If you start a conversation yourself, we may respond to that request. Clicking a WhatsApp button alone does not tell us that you have sent a message.
WhatsApp is a separate service with its own privacy policy. Information you send in a conversation is handled through that service and by the people authorized to handle your project.
6. Who receives information and where it is processed
Access is limited to people authorized to handle inquiries and relevant service providers. We share only information needed for the applicable purpose, rather than automatically sending a full contact record to every manufacturing partner.
| Service or recipient | Purpose and information involved |
|---|---|
| Cloudflare website hosting and security | Serves the website and protects requests. Network information such as IP addresses and request metadata may be processed to deliver and secure the service. |
| Cloudflare D1 inquiry database | Stores submitted inquiry information, contact choices, file names and sizes, review records and operational status for authorized business handling. |
| Cloudflare R2 private project storage | Stores product drawings and reference photos attached to a submitted inquiry. Files are available only through authorized staff access and are deleted when the related inquiry is deleted. |
| Cloudflare Access for restricted administration | Authenticates authorized staff before access to inquiry management and content tools. Staff sign-in identity, authentication/session and request information is processed for access control. This staff sign in is separate from a visitor's mold inquiry. |
| Cloudflare Email Service and our hosted mailbox | Delivers minimal internal inquiry reminders and handles messages you send to sales@exactmec.com. The mailbox uses Cloudflare storage for messages and attachments. A reminder contains an inquiry reference and restricted dashboard link, not the customer's full form. |
| Customer verification email, when enabled | Sends a one-time sign-in code to the email address associated with submitted inquiries. This is a requested account-access message, not a marketing subscription. The customer sign-in transport is configured separately from internal reminders. |
| An external contact link opens WhatsApp only when you choose it. This website does not embed a WhatsApp chat SDK or read your WhatsApp conversations. | |
| Manufacturing partners | Receive only project information needed for a particular assessment or agreed project. We arrange file sharing after contact; a form submission does not automatically distribute the full lead to a supplier. |
| Optional first-party website measurement | When enabled and allowed through Measurement choices, our own Cloudflare endpoint counts daily totals for known website pages and button actions. These totals contain no visitor identifier, inquiry reference, contact or project details, raw URL query, referrer, user-agent or IP address. This remains separate from inquiry source snapshots and the third-party services below. |
| Google Analytics 4 | With separate optional tracking permission, measures marketing-page views and quotation/WhatsApp button clicks. Our integration supplies canonical page paths without query strings, a blank referrer and no contact or project fields. Google can process browser identifiers, cookies and technical request information. Google signals and advertising personalization are disabled in this integration. |
| Microsoft Clarity | With the same optional permission, provides marketing-page session recordings and heatmaps. Content is masked before loading; unsafe current URLs or referring addresses prevent loading. Microsoft still receives technical/session information and may use cookies and identifiers. Forms, confirmation pages, legal pages, customer accounts and administration are excluded. |
| ShipSolo-hosted Plausible | With optional permission, receives limited marketing-page and quotation/WhatsApp click events through plausible.shipsolo.io/api/event. We exclude raw queries, referral addresses, contact and project fields. Our adapter creates no Plausible browser cookie or visitor ID; the host can still process IP, user-agent and other technical request information. This is a separately hosted service, not a claim that Plausible's software publisher operates the endpoint. |
| Ahrefs Web Analytics | With fresh optional permission, receives public marketing-page views, quotation/WhatsApp events and SDK-observed public link clicks. It processes public page titles, canonical addresses, checked referrers and technical/device information. The provider describes cookieless measurement and a daily pseudonymous visitor ID derived using IP and user-agent information. Our integration skips parameterized URLs and unsafe referrers and excludes inquiry forms and private areas. |
Our operator handles inquiries from mainland China. Cloudflare runs a global infrastructure, so network processing, storage and authorized access may occur outside your country. We do not promise that all data stays in a visitor's country or in one particular region. Cloudflare describes its service handling in its privacy policy and customer data processing terms.
Optional tracking permission is independent of inquiry permission and is initially off. You can reject it or withdraw through Measurement choices without losing access to an ordinary inquiry. Withdrawal stops future tracking in this browser; it does not itself erase information already received by a provider. The services above may process information outside your country. See Google's explanation, Microsoft's privacy statement, Ahrefs' explanation, and our Cookie Policy for technologies and controls. Contact us about information already collected. A WhatsApp button click is not proof that a message was sent, and this marketing integration does not transmit a completed inquiry or its contents to these services.
Before a project-specific disclosure or transfer requiring further safeguards, notice or permission, we address those requirements for that activity. You may contact us for details of the relevant arrangement. We do not treat the website's inquiry checkbox as approval for every possible future disclosure.
AI assistance is disabled for sales@exactmec.com, including automatic reply drafts and AI rewriting or verification of manually written messages. The website inquiry form does not call an AI service. Inquiry review and customer correspondence are handled by people. Discuss special handling with us before sending confidential project files.
7. How long information is kept
We keep identifiable inquiry records only while needed to review the request, communicate with you, keep relevant follow-up history and protect the service. A form submission is an inquiry record, not an online order record. The website does not apply an automatic expiry based on whether a sale occurred.
We review whether records are still needed for these purposes and delete or anonymize information when it is no longer needed. You can ask us to delete your inquiry or stop contacting you by emailing sales@exactmec.com. Limited preservation may apply where a specific legal obligation or dispute requires it; in that case, use is restricted to that purpose. We do not keep unrelated contact details merely because a record was once submitted.
Clearly invalid or spam submissions are removed when they are no longer needed for necessary security investigation or error handling. Internal reminder emails contain only an inquiry reference and restricted dashboard link. We review these copies separately rather than treating an email copy as a reason to keep the entire inquiry. Our application uses short-lived pseudonymous rate-limit records instead of storing raw IP addresses in the lead database; infrastructure security records follow the provider's applicable service handling.
Customer sign-in challenges expire after 10 minutes and sessions after 8 hours. Expired challenge, session and abuse-limit records are removed during service housekeeping. Signing out invalidates the current session. Supplemental project notes follow the inquiry's retention rules. Withdrawing an inquiry records a request to stop that project's follow-up; it does not automatically delete the inquiry, email or WhatsApp history. Use the contact below for deletion or a broader contact-stop request.
Cloudflare D1 recovery copies can include earlier database states within its rolling recovery window. The available window depends on the applicable service plan and limits; it is separate from our purpose-based handling of an inquiry. Deletion from the active database does not instantly erase every recovery copy. Deleted information is not used for ordinary business contact from recovery copies. Before reopening a restored database, deletion and contact-stop decisions must be reapplied. Relevant email and separately shared project records also need to be addressed when handling a deletion request.
Contact-stop records are limited to information needed to honor the choice and avoid contacting you again. We do not retain a full project merely to remember a stop request. Information exchanged later in WhatsApp is handled through that service and the applicable project discussion; an inquiry form submission does not automatically copy that conversation into the website dashboard.
8. Protection and requests
We use access controls and safeguards appropriate to the information and actual systems. No website or messaging channel can promise absolute security.
You can contact sales@exactmec.com to request information about your record, correction, deletion, withdrawal of permission, a change of contact channel or to raise a concern. We may ask for proportionate information to locate the record and verify the request. We do not routinely require identity documents for an ordinary inquiry request.
We handle requests, applicable exceptions and response periods under the law that applies. Depending on the applicable rules, your rights may also include objection, restriction, a copy or transfer of relevant information, or a complaint to a competent authority. We explain any applicable requirements or justified limits when handling a request.
9. Cookies and changes
See our Cookie Policy for the actual technologies, purposes and choices. We update this notice when our handling changes and provide further notice or choices where required. A change to this notice does not retrospectively authorize a new use of existing information.