Privacy Policy

1. Who is responsible

The data controller for this website is Ningbo Candid Pharmaceutical Co., Ltd. ("CandidPharm"), Ningbo Hi-Tech Zone, Zhejiang 315048, China. Questions about this policy can be sent to [email protected].

2. What we collect

• The fields you fill in yourself when you submit a quotation request or a contact form: your name, company, email address, and any phone number, product name, CAS number, specification, quantity, destination and message you choose to enter. Sample and controlled-document requests also include development phase, country, any institutional-email exception explanation, courier details and project files you provide.
• The IP address of the request that submits the form.
• The current website submission path records an unavailable status for IP-based location lookup. It does not request coordinates or call an external geolocation service. Any country or destination you enter is stored as information you provide.
• A language-preference cookie so that the site remembers whether you read the English or the Chinese pages.

3. Why we collect it

We use the data to answer your inquiry and to follow it up internally - replying by email, checking availability with partner manufacturers, and preparing a quotation. The country and destination you provide help our team assess your sourcing requirements. We do not sell the data, and we do not use it for advertising.

Optional browsing analytics and your choice

Optional analytics are off until you select Allow analytics. Declining does not prevent catalog browsing, enquiries or document-access requests. We remember your choice in local storage under cp_analytics_consent_v1; an old banner acknowledgement is not treated as consent under this notice. The choice remains until you change it or clear your browser storage.

If allowed, our first-party analytics stores a random visitor identifier (cp_vid) and reports page paths, referring-page origin and path, visit duration, browser user agent and device category to our CRM in Hangzhou, China. URL search parameters and fragments are removed from these browsing reports. The service records the request IP and approximate country/region/city; this is not anonymous data and does not identify a precise street address. The CRM uses ip-api over HTTP as an external IP-location provider, which may receive the request IP when a lookup is needed. This server-to-provider lookup is not encrypted in transit; a local database is used when external lookup is unavailable or rate-limited. Website inquiry submissions use their separate handling described above.

Allowing analytics also loads Google Analytics from Google. Google receives browser network and analytics data to measure website use, subject to its processing and retention settings; processing can occur outside your country. Our site disables Google signals and ad-personalization signals in its analytics configuration and does not use this measurement for advertising. Hosting and analytics processing locations and account-specific retention settings remain subject to owner review. The current CRM analytics implementation does not set an automated deletion period; we do not claim a fixed retention period that has not been implemented.

You can reopen Analytics preferences below or in the footer. Declining after earlier acceptance stops new reports, removes cp_vid and the analytics cookies accessible on this site, disables Google Analytics, and reloads the page to terminate the loaded script. This does not recall information already transmitted or delete server-side records; contact us for an access or deletion review. cp_vid otherwise remains in local storage until you withdraw or clear browser storage. Essential web-server/security logs and the information you submit for an enquiry are separate from optional analytics.

4. Where it is stored

Website inquiries are forwarded through our Hong Kong submission service to the customer-relationship (CRM) system in Hangzhou, China. The CRM stores inquiry records and associated lead information for staff follow-up. The Hong Kong service separately stores private project context, contact email, courier account information you provide, quarantined attachments, qualification decisions and controlled-document access records. These private files are not stored in the public website content-management system. CRM access is controlled through staff accounts and permissions; private-file operations require authorized administrators and approved access codes.

5. Third parties

The current website submission path does not send your IP address to a third-party location lookup service. Hosting providers support the website and CRM infrastructure. We share information with relevant providers when needed to answer your request, such as product and specification questions for a partner manufacturer, while limiting the information to the purpose of that request.

6. Deletion and access

Write to [email protected] from the address you used to request access, correction or deletion. We will review your request, confirm the relevant inquiry and associated records, and explain the action and scope that can be carried out. Retention obligations and any applicable backup limitations are reviewed before confirming deletion. Unlinked uploads expire after 24 hours; linked attachments are removed from active storage after 30 days, with hourly cleanup. This does not delete inquiry receipts, qualification or access audit records, or copies retained in protected backups. Other record and backup retention is reviewed by the owner; a company-wide fixed period has not yet been finalized.

7. Changes

If we change how inquiry data is handled, we update this page and its effective date.

See also our Terms of Use.