INFORMATIONPrivacy Policy
How LANIBOLU handles business enquiries and website information. Updated 11 October 2026; describes current operations.
Status and contact
LANIBOLU is operated by 民程鞋材厂 (Mincheng Shoe Materials Factory, a descriptive English translation), based in Foshan, Guangdong, China. Only the city and province are published; the street address is not displayed. For business or privacy correspondence, contact cqm238655639@163.com. Additional disclosures required for a particular market will be assessed before expanding targeted activities there. The city location is not represented as a full registered address.
Information you provide
We collect the name, company, country, email and project information entered in enquiry and catalog forms. Optional fields include WhatsApp, website, target market, price expectations, customization requirements, messages and reference files. Required fields are identified on the form. Do not upload sensitive personal information or materials you are not entitled to share.
Website and security information
Submitted enquiries include first and last touch campaign information, landing page and referrer. The server uses a hashed IP-based identifier to limit repeated submissions. Cloudflare Turnstile checks browser and network signals to help detect automated submissions. Hosting and service providers may also process technical logs under their own terms.
What the information is used for
The system saves your request, sends an acknowledgement or requested catalog, notifies the sales team and supports follow-up about your enquiry. A rule-based lead score helps staff prioritize enquiries; it does not automatically approve or reject orders. Submitting an enquiry does not subscribe you to a marketing mailing list. Where GDPR or UK GDPR applies, our legitimate interests are responding to requested business enquiries, managing professional buyer relationships and securing this website. We assess necessity and the effect on business contacts, limit use to the enquiry and allow objections. Where the individual requesting a quotation is a prospective contracting party, necessary pre-contract steps may instead use the contract basis. Optional analytics uses your consent, which you can withdraw without affecting an enquiry. We do not treat the enquiry acknowledgement as blanket consent for advertising.
Service providers and transfers
The current website uses Netlify for hosting, Supabase for database, private reference-file storage and administrator authentication, Resend for transactional emails, and Cloudflare Turnstile for abuse prevention. Notifications are delivered to the sales team's 163.com mailbox. Providers and the sales team may process information outside your country. Provider processing is subject to the applicable service agreements and data-processing terms. Their published terms describe contractual protections, subprocessors and transfer arrangements; the applicable terms and actual route must be considered for each market. See supabase.com/legal, netlify.com/trust-center, resend.com/legal, cloudflare.com/turnstile-privacy-policy and privacy.google.com/businesses. Database region selection does not keep all processing within that region. Information about the relevant arrangements can be requested through our contact email. No blanket certification or single-country storage guarantee is made.
Optional measurement
Google Analytics 4 is configured to measure visits and interactions such as product views and enquiry submissions. It loads only after optional-cookie acceptance. Google advertising consent and Google Signals are disabled in the current setup; Google Ads and Meta Pixel are not configured. Enquiry names, email addresses, WhatsApp numbers and messages are not included in our custom analytics events. Rejecting optional cookies does not prevent an enquiry. See the Cookie Policy and use Cookie preferences in the footer to change your choice.
Access and reference files
Enquiries are accessible through the authenticated administrator area. Uploaded reference files are stored in a private bucket and accessed using temporary links. Product photographs are public. Do not send confidential information that is unnecessary for the enquiry; separate confidentiality arrangements should be discussed before sharing sensitive designs.
Retention
Retention must be assessed against the ongoing enquiry, quotation or business relationship, any applicable recordkeeping requirement and the need to resolve disputes. We review inactive enquiries for continued need after 24 months without recorded activity. This is a review threshold, not an automatic deletion deadline or a tax-record retention period. Active projects, orders and records needed for legal obligations or disputes are assessed separately. Our review includes related notes, uploaded references, email records and sales-mailbox copies; records that are no longer necessary are scheduled for deletion after verification of the scope. The current application does not automatically erase enquiries after a fixed period; provider logs and backups have separate retention rules. Contact the privacy email for a retention or deletion request.
Requests and choices
You may contact cqm238655639@163.com to request access, correction, deletion or information about your data. Depending on applicable law, you may also have rights to restriction, objection, portability, withdrawal of consent and a complaint to a relevant supervisory authority. Identity and scope may need verification. Optional measurement consent can be withdrawn through Cookie preferences. We assess the scope of a request, verify identity proportionately and respond within the applicable legal deadlines. Where appropriate, you can complain to the authority in your country; UK authority information is available at ico.org.uk and EU authority details through edpb.europa.eu. Any required regional representative or additional market-specific disclosure must be assessed before expanding targeted activities in that market.
Changes
We review this policy when providers, measurement tools, purposes or contact details change. This operational content review is separate from jurisdiction-specific legal advice. No GDPR or other compliance certification is claimed.