Privacy policy

1. Scope

This Policy applies where we operate this site and affiliated digital touchpoints aimed at institutional and professional customers worldwide. Separate notices may apply for specific portals; where they contradict this Policy, the specific notice controls.

2. Information we may collect

• Information you submit — name, institution, corporate email or phone number, postal address if you request shipping, enquiry text, RFQ payloads and attachments.
• Account & transactional data — identifiers, carts, quotations and correspondence needed to progress a request.
• Technical & log data — approximate location derived from IP, browser type/version, referrer, timestamps, pages viewed for security, auditing and optimisation.
• Cookies — we may rely on strictly necessary cookies (session, preference) plus analytics/marketing cookies subject to banner/consent jurisdictions. You may control cookies via browser controls.

3. How we use information

• Respond to quotations, feasibility questions or technical-support tickets;
• Operate, analyse and continuously improve browsing performance and UX;
• Detect abusive traffic, unauthorised attempts to access administrator areas and fraud mitigation;
• Comply with tax, sanctions, subpoenas or lawful orders.

4. Legal bases (EEA / UK style)

Depending on geography we may rely on contract performance, legitimate interests (balancing test completed for security/analytics/marketing collateral) or consent. Where consent is the basis you may withdraw it without affecting lawful processing beforehand.

5. Sharing

We never sell personal data. We disclose information only:

• To trusted processors (hosting, email delivery, analytics) under contractual security obligations;
• To logistics/payment counterparts when strictly needed to fulfil a shipment;
• To authorities when legally compelled;
• Within our corporate organisation on a need-to-know basis for global account handling.

International recipients may reside outside your country — we safeguard transfers via appropriate mechanisms.

6. Retention

We retain data only as long as necessary for the stated purposes, contractual limitation periods and statutory tax or regulatory archives. Afterwards we pseudonymise, delete or archive offline as applicable.

7. Security

We adopt administrative, organisational and reasonable technical safeguards (least-privilege accounts, hardened transport where deployed, confidentiality obligations). Nonetheless no transmission is flawless; promptly notify us of suspected unauthorised access referencing your enquiry ID.

8. Your choices & GDPR-style rights

You may:

• Request access to or portability of structured personal data;
• Rectify inaccuracies;
• Request erasure/object to certain processing absent overriding grounds;
• Opt out from non-service marketing communications via unsubscribe links;
• Lodge complaints with your lead supervisory authority (EEA).

Submit requests via our contact route. We may authenticate you before granting access.

9. Children

Puweituo's storefront is geared to adult professionals. We do not knowingly collect data about children under 13 (or Digital Age thresholds). Contact us regarding inadvertent submissions.

10. Links

External sites reachable from banners or references maintain their own practices; review their policies independently.

11. Updates

We revise this Policy as features expand. Meaningful changes elevate the Effective date atop this document; where required we recollect consent.

12. Contact

Reach us anytime through the contact channels published on Puweituo's corporate site so we direct your enquiry to Data Protection / Compliance teams.