Privacy

Privacy Policy

We collect as little as possible, we set no cookies and we store nothing on your device to measure visits. This page states exactly what we keep, why, for how long, and how to get it back, switch it off or have it deleted.

Version 1.1 · last updated 25 September 2026 · applies to www.qumtrix.com and all of its pages

1. Who is responsible

Qumtrix (a brand of Ennfu Scientific), Room A411–A413, No. 99 Daxue Road, Xuzhou, Jiangsu 221116, China, is the controller for the personal data described here.

Privacy questions and requests: admin@qumtrix.com. We answer within 30 days.

2. What we collect

a. When you send us an inquiry or a partner application

Company, your name, business e-mail, country, the products or quantities you are interested in, your message, and an optional phone number. For security we also record the IP address and browser identification of the submission and the page it came from, so we can recognise spam and abuse.

b. When you subscribe to the newsletter

E-mail address, the page you subscribed from, and the confirmation timestamps of the double opt-in. Unsubscribing is one click and removes you from the list.

c. Anonymous visitor statistics

We measure visits anonymously so we can see which pages and products actually get read. You can switch this off with one click, and it stays off. Two details that matter here:

  • Your IP address is not stored in the statistics tables. It is used in memory to derive an approximate country/region and to compute a visitor identifier, which is a salted hash of (IP + browser + date) that rotates every day. It cannot be reversed and cannot follow you across days or across websites.
  • Nothing is written to your device for this. No analytics cookies, no browser storage: the visit is reconstructed on the server from the anonymous hash and a 30-minute time window. There is no Google Analytics, no advertising pixel and no social media tracker on this site.

d. Server logs

Like every web server, ours writes access logs that include IP addresses, requested URL, timestamp and browser identification. They exist for security and troubleshooting, are rotated daily, compressed, and deleted after 14 days.

3. Why we process it

PurposeLegal basis (GDPR Art. 6)
Answering your inquiry and preparing a quotationPerformance of / steps prior to a contract — 6(1)(b)
Newsletter and product updatesYour consent — 6(1)(a), withdrawable at any time
Anonymous statistics that tell us which pages work — cookie-free, no device storage, switchable off at any time and never collected when your browser sends Do Not Track or GPCLegitimate interests — 6(1)(f), with the right to object (see section 4)
Spam, fraud and abuse prevention, service securityLegitimate interests — 6(1)(f)
Invoices, contracts and accounting recordsLegal obligation — 6(1)(c)

We do not use your data for automated decision-making, we do not build advertising profiles, and we do not sell or rent personal data to anyone.

4. Cookies & local storage

We use no cookies at all — not for analytics, not for advertising, not for social plugins. The complete list of what can be stored in your browser is one entry:

NameTypePurposeLifetime
qm_cookie_consentlocalStorageRemembers your privacy choice so we do not ask again, and so a refusal keeps workingUntil you clear it or change the choice

That entry is strictly necessary (without it we could not remember a refusal). Measuring visits stores nothing on your device: there is no session or campaign key in your browser, and the server rebuilds the visit from the anonymous daily hash and a 30-minute window instead.

You can change or switch off statistics at any time through Cookie settings in the footer. Switching off takes effect immediately and stops all further measurement for you. If you object to the legitimate-interest basis described above, that switch is the way to exercise it — or write to us and we will handle it for you.

5. Do Not Track & Global Privacy Control

If your browser sends Do Not Track or Global Privacy Control (GPC), we collect nothing at all — no banner needed, no statistics, no exception. The same applies if the page is loaded with tracking disabled.

6. Who else sees it

  • Hosting: Amazon Web Services, region eu-central-1 (Frankfurt, Germany). The website, the database and the access logs live there.
  • E-mail delivery: our SMTP provider, used to send the notification of your inquiry to our sales mailbox and to send you the newsletter if you asked for it.
  • AI-assisted reporting: our internal weekly report is summarised with the DeepSeek API. Only aggregated figures and business details (page paths, countries, product names, company names) are sent — never e-mail addresses, never IP addresses, never the message text of an inquiry.

We do not use third-party analytics, tag managers, ad networks, CDNs with behavioural tracking or data brokers.

7. How long we keep it

DataRetention
Visitor statistics (page views, scroll, searches, clicks)400 days, then automatically deleted
Full IP address in form records30 days, then irreversibly masked (a.b.c.0)
Inquiries, quotations, contractsAs long as needed to handle the request and the business relationship; contract and accounting records are kept for the statutory period
Newsletter subscriptionUntil you unsubscribe
Server access logs14 days
Administrative audit log (who changed what in the console)730 days

These limits run automatically every night; the job is visible in the console under Settings → Privacy & GDPR.

8. Your rights

  • Access — a copy of everything we hold about you.
  • Rectification — correction of inaccurate data.
  • Erasure — deletion of your personal data (see below for the records we must keep).
  • Restriction and objection — to processing based on legitimate interests.
  • Portability — your data in a machine-readable format.
  • Withdraw consent or object — switch statistics off in Cookie settings (instant), or ask us to do it.

To exercise any of them, write to admin@qumtrix.com. You also have the right to complain to the data protection authority in your country.

9. Export & deletion

When you ask, we produce a machine-readable export of every record that carries your e-mail address (inquiries, newsletter subscription, NDA requests, CRM contact and follow-up notes), and we can delete those records.

Two honest exceptions, because the law requires them: contracts, quotations and accounting records are kept for the statutory retention period — we erase the contact person's details from them instead; and the anonymous statistics contain no e-mail address and no reversible identifier, so they cannot be traced back to you.

10. Security

The site is served over HTTPS only. The console and the CRM are separate, individually authenticated areas with their own sessions; changes are written to an audit log; the database is reachable only from the server itself. Full IP addresses are not retained, and the visitor identifier rotates daily.

11. Changes

If this policy changes in a way that affects you, the version number and the date at the top of this page change with it, and material changes are announced on the site. The current version always lives at /privacy.html.