Privacy

01What this page covers, and who is responsible

This policy covers www.sunntc.com and every page on it, including the quotation form, the logo customiser and the chat window. It also covers the emails we send you, which is section 04. Shenzhen Sunning Tension Industrial Co., Ltd. decides why and how information about you is used on this website, which under the European Union and United Kingdom General Data Protection Regulation makes us the controller of it. Our full name, registered office and email address are at the end of this page.

This is a business-to-business website. We sell to companies that import, distribute or brand consumer electronics, and nothing here is directed at children or intended for personal shoppers.

It does not cover what happens after you become a customer. Purchase orders, quotations, invoices and shipping documents are handled by email and by our sales staff, and the terms of an actual sale are the ones written into the quotation you accept, not the ones on this website.

Shenzhen Sunning Tension Industrial Co., Ltd. is the controller of any personal information you send through sunntc.com, and of what the emails we send record.

02One form, eight fields, and a chat window

There are two places on this website where you can give us personal information: the enquiry form, and the chat window at the bottom right of every page. The form appears on the contact page, on the page shown when a link no longer works, and inside the logo customiser, and all three send to the same place.

Seven of the eight fields are required, because an enquiry missing any of them cannot be quoted. One is optional. We ask for nothing else, and there is no account to create, no password to choose and no newsletter to decline.

The chat window is answered by an AI assistant, and every answer is labelled AI. It answers from our own product list and company facts, and a member of our team takes over when you press “Talk to a person” or ask for one, and may reply in it at any time. Everything written in it is kept as an enquiry: your messages, the AI’s answers and our team’s replies, the date and time of each, the page you opened it on, and the country your connection came from, which our office system reads from the network address without keeping the address. If you give your name, company, email or WhatsApp in the chat, they are copied into that enquiry so our team can reply. Your browser keeps the conversation in its own storage for this website, so it carries on when you open another page; it sets no cookie, and clearing this website’s data in your browser removes it.

Three further things are recorded automatically with an enquiry: the date and time it arrived, the page of our own website it was sent from, and the approximate place it was sent from: a city, a region and a two-letter country code, all supplied by the network that hosts this site. When you came to this website from one of our Google ads, a fourth is kept with it: the label that ad's link carried, which names the ad's campaign, its search words and the ad, with Google's own number for the click (utm_source=google, utm_medium=cpc, utm_campaign, utm_term, utm_content and gclid). Nothing else from the link is kept, and the enquiry itself is never sent to Google (section 03 says what Google's own script tells Google Ads). When your visit came from another website, a fifth is kept with it: that website's name, such as google.com or chatgpt.com, never the page of it you were on; or, when you came from one of our ChatGPT ads (its link carries utm_source=chatgpt with utm_medium=cpc), that it was one of them. The page keeps it while you read on, exactly as it keeps an ad's label (section 03). Your IP address itself is not stored with an enquiry, and nothing more precise than a city is kept here. Email is the one place on this site where a full address is recorded, and section 04 says so plainly. The place is recorded because it catches a buyer who has mistyped their destination before we quote the wrong freight, and because an enquiry that names one country while connecting from another is worth reading twice.

The logo customiser sends the same eight fields (and, after one of our Google ads, the same label, and the same website name), the placement measurements you set on screen, and the visual proof, the small picture the tool draws of your logo on the product. It does not upload your own artwork file: that stays on your computer, and we ask for it when an order is confirmed and we need it at print resolution. The page tells you the same thing before you send.

03Counting visits, cookies, and what is loaded from elsewhere

This website counts visits in two ways. Our own count uses no cookie and keeps nothing about you. Google Analytics and Google Ads use cookies, and run only where they are allowed to. This section says exactly what each one does, and how to say no to it.

Our own count is kept on our own server. Each time a page of this website is opened, the page sends our server one short message: the address of that page and, on the first page of a visit, the address your browser says it came from. If the link that brought you here carries a label naming an AI assistant as its sender, such as utm_source=chatgpt.com, the page sends that assistant's name as well. If the link is one of our Google ads (utm_source=google with utm_medium=cpc, or Google's gclid), the page keeps that label while you read on: in your browser's storage for that tab where Google Analytics may count your visit, and in the page alone where you have to be asked first and have not said yes. The name of the website your visit came from, which an enquiry carries (section 02), is kept the same way, in that tab or in the page alone, and is sent with an enquiry and nowhere else. It sends our server the ad's campaign, its search words and the ad with that first page, with each tap on our links and with an enquiry, and the server adds one to a daily total kept under them. Any other label is left out of the message. From it the server adds one to a few daily totals: one for the page, and on the first page of a visit one each for the country, for the name of the website the visit came from, and for the kind of device, which is a phone, a tablet or a computer. A tap on our WhatsApp, email or phone links, and an enquiry that was sent, each add one to a total of their own.

That is everything it holds: totals for each day. It sets no cookie and gives your browser no number, so it cannot tell that two visits were the same person. It does not keep your network address, the time of day, or the address of the page you came from, only that website's name, such as google.com. The country is the two-letter code our hosting provider attaches to every request. Your browser's description of itself is read for a moment, to tell a phone from a computer and a person from a program, and is not kept. A program is never counted as a visit. When a program says it belongs to an AI assistant, as the ones that read pages for ChatGPT, Claude or Perplexity do, we add one to a daily total kept under that program's name, and one to a daily total kept under that program's name and the page it read: they say how often that assistant read our pages, and which, and nothing about any person. A page address is counted without anything after a question mark, so the words of a search are not in it; the things read from there are the assistant's name and the ad's label described above. The totals are kept apart, so nothing in them says which country read which page. They sit with our other records (section 06 says where), they are given to nobody, and our own staff's browsing is left out of them.

Google Analytics gives us a fuller picture, where it runs: which pages are read, roughly where in the world a visit comes from, what kind of device it is on, which website sent it here, and whether it ended in an enquiry or in a tap on our WhatsApp, email or phone links. It tells us about visits, not about people: there is no name, email address or company in it, and nothing you type into the enquiry form is sent to it. If you use the search box, the words you searched for are part of the page address, and Google's count includes them.

Google's counting is done by a script from Google, which sets two cookies on your browser whose names begin with _ga. They hold a random number, so that two pages read on the same browser are counted as one visit, and they last for up to two years unless you clear them. Google receives the address of each page you read here, the time, your browser's details and your network address, from which it works out a rough location; Google states that Analytics does not keep the network address itself. We have switched its advertising features off in the script itself, so it is not used to build an advertising profile of you. The figures are kept in our Google Analytics account for up to 14 months.

Since 19 October 2026 the same script from Google also works for Google Ads, so that we can see which of our Google ads and which searches bring enquiries. It sets cookies of Google Ads whose names begin with _gcl_: _gcl_au on the first page, which lasts 90 days, and _gcl_aw when you arrived by clicking one of our ads, which holds the number of that click and lasts 90 days. It tells Google Ads that each page was read, and that an enquiry was sent or our WhatsApp, email or phone links were pressed; with each, Google receives the number of the ad click that brought you if there was one, the page, the time, your browser's details and your network address. Your name, email address and phone number are never sent to Google, in any form. We have switched ad personalisation and Google's advertising signals off in the script itself, so none of it is used to build an advertising profile of you or to show you ads that follow you, and we use no remarketing.

Where it runs depends on where you are. In the European Economic Area, the United Kingdom and Switzerland the law asks for your agreement first, so a notice at the bottom of the page asks, with two buttons. “Accept all cookies” loads Google's script, and Google Analytics and Google Ads then work as described above. “Accept only essential cookies” leaves it off: its script is not loaded, no _ga or _gcl_ cookie is set and nothing is sent to Google Analytics or Google Ads. Until you press one of the two it stays off. Everywhere else it runs without asking.

Wherever you are, you can change that at any time: “Cookie settings”, at the bottom of every page, shows the same two buttons. “Accept only essential cookies” switches Google Analytics and Google Ads off on your browser and removes their cookies, the _ga and _gcl_ ones; “Accept all cookies” allows them.

To know which rule applies, the page asks our own server one question when it opens: must this visitor be asked first? The server answers yes or no from the two-letter country code our hosting provider attaches to every request. It answers nothing else, it writes nothing down, and if the country cannot be read the answer is yes.

Your answer is remembered by one cookie of our own, named sunntc_consent. It holds the word “all” or the word “essential” and nothing else, and it lasts 180 days. When it runs out, a visitor who must be asked is asked again, and elsewhere Google's script runs again until you say otherwise. It is the one cookie this website calls essential: without it the notice would have to ask you on every page.

So the cookies this website itself can place on a visitor's browser are six at most: the two from Google Analytics and the two from Google Ads, where they run; sunntc_consent, once you have answered the notice; and sunntc_nocount, only if you press the button at the end of this section. The only other cookies it is capable of setting belong to our own office system: the staff sign-in, a member of staff's own screen settings, and a mark that keeps our staff's browsing out of both counts. They are set only on the office's pages, or, for the mark, when one of our staff signs in to our office system, which sends their browser here once to set it; they never reach a visitor.

The contact page shows two maps, of our office and of our factory, and they are Google Maps. Wherever you are, a map is fetched from Google only when you press “Show the map” on it; Google then receives your network address and may set cookies of its own. No other page does this.

Where a product page carries a video, its still picture is fetched from YouTube when the page opens, and the video itself plays from YouTube's privacy-enhanced player only if you press play. Nothing else is loaded from anybody else's servers: there are no web fonts fetched from a font service, no social media buttons, no other advertising script, no heat-mapping and no session recording. The typefaces are the ones already on your device.

We ourselves do not record the network address of anyone who visits. Your address is used in the memory of the program that answers you, to count how many enquiries, and how many messages to our own count, arrive from one place in a minute. That is how we keep automated junk out of both without putting a puzzle in front of a real buyer, and it is never written down. Our hosting provider keeps its own operational records of requests to its servers, as every hosting provider does; we do not control what those contain and we do not read them.

One thing we do record a network address for, and it is not browsing. The emails we send can contain an invisible image, and if your mail app loads it we record the address it was loaded from, in full, together with the country that address is in. Nobody who has not had an email from us is affected by it, and reading this website does not start it. Section 04 sets it out: what is recorded, why, how long for, and how to stop it.

You can say no to all of the counting at once. Press “Do not count my visits” below: from then on our own count leaves your browser out, and Google Analytics and Google Ads are switched off on it as “Accept only essential cookies” switches them off. The button sets one cookie, sunntc_nocount, so that your browser is recognised as one to leave out; it lasts 400 days. Press it again and that cookie is removed and our own count includes your browser again; Google's script stays off until you allow it under “Cookie settings”.

Every page also loads the chat window from crm.esforge.ai, our own office system (section 02). It sets no cookie, counts nothing, and sends nothing until you write in it.

Sunntc's website counts visits itself, with no cookie and nothing kept about you, and with Google Analytics and Google Ads' measuring of which ad brought an enquiry, which set cookies whose names begin with _ga and _gcl_: only after “Accept all cookies” in the European Economic Area, the United Kingdom and Switzerland, and until you choose “Accept only essential cookies” anywhere else. The contact page can load two Google Maps. We do not store the network address of anyone who visits. Email is different, and section 04 says how.

The notice names Google Analytics and Google Ads and nothing else, because they are the only things its two buttons decide. Our own count is not in it because it sets no cookie and keeps nothing about you; the button above is how you take your browser out of it all the same.

04Emails we send can tell us they were opened

This is the one place where we record a full network address, so it is the part of this page worth reading even if none of the rest applies to you. It has nothing to do with visiting this website. It applies if we have sent you an email.

An email from us may contain an invisible image: a single dot, too small to see. If your mail app loads images automatically, it fetches that dot from our server, and the fetch tells us four things: which message it was, the date and time it was fetched, the network address it was fetched from, and the country that address is in. We record all four, and we record the address in full. It is not shortened. In most cases the address belongs to your mail provider rather than to you: Gmail loads every image through Google's own servers before showing it to you.

We do it so that a salesperson can see whether a quotation arrived and was opened before they chase it, and so that a quotation nobody has opened is followed up differently from one that has been read three times. That is the whole of the use. Nothing about you is scored, ranked or profiled from it, and no automated decision is made from it.

The address is often not yours. Most mail providers (Gmail, Outlook.com and Apple Mail among them) fetch the images in a message on their own servers before you ever see it, so what we get is that provider's address and it tells us nothing about where you are. Sometimes, typically with a mail program on an office network, it is the address your company connects to the internet from. We cannot tell those two apart from the record itself, so we treat every one of them as information about a person and everything on this page applies to all of them.

You can stop it, and you do not need to ask us first. Turn off automatic or remote image loading in your mail app: every mail app has that setting, and on a lot of phones it is already off. The dot is then never fetched, nothing is recorded, and nothing reaches us. The message still reads perfectly well without it. If you would rather we did not do this at all, say so in a reply and we will stop.

We keep the record with the message it belongs to, in our own office system, and it is read only by the sales and management staff who already have an account there. There is no automatic deletion, here or anywhere else on this site, and we will not pretend to a schedule we do not run. Section 07 says the same about an enquiry. Ask us and we will delete it, and section 08 is how to ask.

It is given to nobody. No advertising network, no analytics company and no email marketing platform is involved; nothing was bought in to do this, and the record leaves our office only if a law or a court obliges it.

An email from Sunntc may contain an invisible image. If your mail app loads it, we record that the message was opened, when, and in full the network address it was loaded from, usually your mail provider's rather than yours. Turn off automatic image loading and none of it happens.

Almost every company that sends business email does this, and most either say nothing about it or bury it under a line about improving your experience. We would rather you read it here than find it in a message header. It is separate from section 03: we still record no address for anyone who only visits this website, and a person who has never had an email from us is never in these records.

05What we use an enquiry for, and on what legal basis

We use what you send to quote your enquiry, to ask you the questions we need answered before we can quote it, and to reply to you. If the enquiry becomes an order we use it to make and ship that order. That is the whole of it.

Under the EU and UK General Data Protection Regulation our basis for this is that the processing is necessary in order to take steps at your request before entering into a contract. You asked us for a price; the information is what a price requires. We are not relying on your consent, which means you do not have a consent to withdraw: but you can object, and you can ask us to erase the record, and section 08 says how.

The open record described in section 04 is a different thing and rests on a different basis: our own legitimate interest in knowing whether the quotation we sent you actually reached you, weighed against the fact that it is a network address and that you can switch it off in your mail app at any time without telling us. If you object to it, that is the end of it: we stop, and we do not need to be argued with first.

Counting visits, described in section 03, rests on two things. Our own count rests on our legitimate interest in knowing which pages are read and which bring enquiries, weighed against the fact that it keeps only daily totals and nothing about you; if you object, the button in section 03 takes your browser out of it, and we do not need to be argued with first. Google Analytics, and Google Ads' measuring of which ad brought an enquiry, rest on the same interest outside Europe, and on your consent in the European Economic Area, the United Kingdom and Switzerland: there it runs only after “Accept all cookies”, and you can withdraw that under “Cookie settings” as easily as you gave it.

We do not sell, rent or share your information for anyone else's marketing. We do not add you to a mailing list. We send no newsletters and run no email campaigns, so there is nothing to unsubscribe from. If we ever want to send you something you did not ask for, we will ask you first.

Nothing on this site makes an automated decision about you, and we do not profile enquiries by algorithm. A person reads every enquiry, and a person decides and sends every reply. Our staff can ask software to translate a message, or to draft a reply for them to edit; section 06 says where that text goes.

We use an enquiry to quote it and to reply to it. Nothing is sold, nothing is shared for marketing, and nothing is added to a mailing list.

06Who else can see it, and which country it sits in

Inside our company, an enquiry is readable by the sales and management staff who hold an account in our office system. Each of them signs in with their own username and password, and an account can be switched off in seconds when somebody leaves. The same people, and only those people, can see that a message was opened.

Outside our company, six suppliers are involved, each for one job. Vercel Inc. runs this website: its servers receive every request, including the enquiry you send, and the code that handles an enquiry runs in Singapore. Google Cloud holds our records: the enquiry, the visual proof from the logo customiser, our email archive and the daily totals of our own visit count are kept in a database and a file store in Singapore. The chat window is served from crm.esforge.ai, our office system, which runs on Google Cloud in Singapore too, and its conversations are kept in the same database. Our email provider carries the message that tells our office an enquiry has arrived, and carries the reply we send you.

The fourth is OpenAI, a company in the United States. When a member of our staff asks for a translation of a message, or for a draft reply to edit, the text of that message is sent to OpenAI and the translation or the draft comes back. Nothing is sent unless a person presses for it, and no reply is sent to you unless a person has read it and sent it. The fifth is Google again, for Google Analytics and Google Ads' measuring in section 03.

The sixth is Anthropic, a company in the United States. When you write in the chat window, the conversation so far is sent to Anthropic so that its AI can write the next answer, which comes back to you labelled AI. Once a member of our team has taken over a chat, nothing more of it is sent to Anthropic.

We are a Chinese company and our staff read enquiries in Shenzhen, so information you send is also accessible from China. We would rather say that plainly here than have you discover it from an email header.

So an enquiry sent from Europe or the United Kingdom leaves those countries: it is stored in Singapore, it is read in China, if a member of staff asks for a translation or a draft, its text is sent to the United States for that, and a chat’s text is sent to the United States for each answer the AI writes.

We disclose an enquiry to no one else, except where a law or a court obliges us to. The same is true of an open record: beyond the suppliers named here, it is disclosed to nobody.

Enquiry records are kept in Singapore and are read by our staff in Shenzhen. Six suppliers work for us, named above, and the records are given to no other company.

Six suppliers, and no others: hosting, record storage, email, translation and drafting when our staff ask for it, Google Analytics with Google Ads' measuring, and the AI that answers the chat window.

07How long we keep an enquiry, stated honestly

We keep an enquiry for as long as it is still doing something: while we are quoting it, while an order is running, and afterwards for as long as we may need it to support what we supplied, to honour a warranty claim or to satisfy Chinese accounting and tax record-keeping requirements.

We will not pretend to a schedule we do not run. There is no automatic deletion on this site: a record stays in the store until a member of our staff deletes it, or until you ask us to and we do. If a fixed retention period is something you need for your own compliance file, ask us and we will tell you what we hold about you and remove what you want removed.

The open records in section 04 are kept the same way, and we will not dress them up as something tidier. Each one sits with the message it belongs to and is deleted when that message is deleted or when you ask us to delete it. There is no expiry date on them, because nothing on this site expires anything by itself, and saying otherwise would be a promise with nothing behind it.

A conversation in the chat window is an enquiry, and it is kept the same way.

When an enquiry is deleted it is deleted from the store itself, not merely hidden from the list.

There is no automatic deletion. An enquiry, and any record that an email was opened, is kept until our staff delete it or until you ask us to.

08What you can ask us for, and how to ask

If you are in the European Union or the United Kingdom you have the rights below by law. We will apply them to anybody who asks, wherever they are, because operating two standards would only mean maintaining two.

You can ask for a copy of what we hold about you. You can ask us to correct it if it is wrong. You can ask us to delete it. You can ask us to stop using it, or to restrict what we do with it while a disagreement is sorted out. You can object to our using it at all. And you can ask for it in a portable form to take elsewhere.

All of that covers the records in section 04 as well as an enquiry. You can ask what opens we have recorded against your address, you can ask us to delete them, and you can tell us to stop recording them: and the fastest of the three needs nothing from us at all, because turning off image loading in your mail app stops it at your end immediately.

The two visit counts in section 03 are the records here we cannot look up by your name, because they hold none. You can stop both at your end at any time. “Cookie settings”, at the bottom of every page, switches Google Analytics and Google Ads off or on. “Do not count my visits”, in section 03, takes your browser out of our own count and switches Google's script off with it.

Email us and say which of those you want. Please send the request from the address you used to enquire, or tell us what that address was. It is how we make sure we are not handing your enquiry to somebody else. We will reply within 30 days, and we will not charge you for it.

If you are unhappy with how we answer, you may complain to the data protection authority in your own country. In the United Kingdom that is the Information Commissioner's Office; in the European Union it is the supervisory authority of the member state you live in.

Email us to see a copy of your enquiry, correct it, or have it deleted. We reply within 30 days and charge nothing.

09When this page changes

This page carries the date it was last changed, at the top. If we change how we use enquiries in a way that matters to you, we will change this page and move that date, and where the change is significant we will say so on the page rather than leaving you to compare two versions.

The change of 26 August 2026 is one of those, so here it is in one line: emails we send may now contain an invisible image, and if your mail app loads it we record that the message was opened, when, and the full network address it was loaded from. Section 04 is new and covers the rest of it. Nothing about the website itself changed that day.

The change of 9 October 2026 is another. On that day this website began counting visits with Google Analytics, at first not at all for visitors in the European Economic Area, the United Kingdom and Switzerland. On the same day we brought three other things on this page up to date. Enquiry records have been kept in Singapore, not the United States, since August 2026. Our staff have been able to ask for a machine translation of a message since 23 August 2026 and for a draft reply since 5 September 2026, which sends the text of that message to OpenAI. And the contact page has carried two Google Maps since 24 August 2026.

The change of 10 October 2026 is the third. This website now has a cookie notice: a visitor in the European Economic Area, the United Kingdom or Switzerland is asked before Google Analytics runs, with two buttons, “Accept all cookies” and “Accept only essential cookies”, and anyone can change the answer under “Cookie settings” at the bottom of every page. On the same day we began a visit count of our own, which uses no cookie and keeps only daily totals, with a button in section 03 that takes a browser out of it. And for a visitor who is asked first, the two maps on the contact page now wait for a press. Section 03 is rewritten to say all of it.

The change of 12 October 2026 is a small one. Our own count now also keeps two daily totals about AI assistants: how many visits one sent here, and how often one's own program read our pages. Section 03 says how each is told, and neither holds anything about you.

The change of 19 October 2026 is another small one. When you come here from one of our Google ads, the label on that ad's link is kept with an enquiry you send (section 02), and our own count keeps daily totals under the ad's campaign, its search words and, from that afternoon, the ad (section 03); nothing about you is in them. The same day the enquiry form's WhatsApp box began to take a phone number as well. That afternoon Google's script began to tell Google Ads which of our ads brought an enquiry or a press on WhatsApp, email or phone, with two cookies of its own, under the same notice and the same two buttons as Google Analytics, and with ad personalisation off (section 03). The two maps on the contact page now wait for “Show the map” wherever you are.

The change of 20 October 2026 is a small one too. Our own count of the pages an AI assistant's program read is now also kept for each page, under that program's name (section 03); it holds nothing about you.

The change of 5 November 2026 is a small one. An enquiry you send now also carries the name of the website your visit came from, such as google.com or chatgpt.com, or that you came from one of our ChatGPT ads: the page keeps it while you read on, under the same rule as an ad's label, and our office uses it to know where a buyer found us (sections 02 and 03). On the same day, the mark that keeps our own staff's browsing out of both counts began to be set when one of them signs in to our office system, which sends their browser here once to set it (section 03); it is set on no visitor's browser and says nothing about anybody.

The change of 10 November 2026: this website has a chat window at the bottom right of every page, answered by an AI assistant that says so, where a member of our team takes over when you ask for a person. What it keeps is in section 02, and the AI that writes its answers, Anthropic in the United States, is in section 06.

Who we are, and how to reach us

Any request about your information: a copy of it, a correction, or its deletion, goes to the address below and is answered within 30 days.