Privacy policy

1. Who is responsible

The data controller is Shenzhen Sunnyzir Biotechnology Co., Ltd (深圳市黄不了科技有限公司), No. 1 Huanan Avenue, Hehua Community, Pinghu Subdistrict, Longgang District, Shenzhen, Guangdong Province, China.

For any question about your personal data: info@sunnyzir.com or WhatsApp +86 185 9400 6532.

2. What data we collect

Contact form: your name, company name, email address, phone number, country and the content of your message.

Emails and WhatsApp messages you send us: your contact details and the content of the exchange.

Technical data: like any website, our hosting provider automatically records technical information (IP address, browser type, pages visited, date and time) to deliver the site and keep it secure.

We do not use advertising or analytics cookies. Your language choice is stored only in your own browser so the site remembers it.

3. Why we use it

To answer your questions, send you quotes and information on our products, and manage our business relationship with you. This is necessary to take steps at your request before a contract, or to perform a contract (Art. 6(1)(b) GDPR).

To keep the website secure and running, and to communicate with our professional customers, based on our legitimate interest (Art. 6(1)(f) GDPR).

Where Chinese law applies, we process your data with your consent, given when you contact us, or because it is necessary for a contract with you (Personal Information Protection Law, Art. 13).

We never sell your data and we do not use it for automated decision-making.

4. How long we keep it

We keep your contact data for as long as we have a business relationship with you. It is then deleted, unless the law requires us to keep it longer.

Technical logs are kept by our hosting provider for a short period, for security purposes only.

5. Who receives it

Your data is accessed only by the Sunnyzir team in charge of answering your request.

If you are located in Europe, your request may be shared with our European distributor, ASTEROMED SLU, Avinguda de Sant Antoni 27, AD400 La Massana, Principality of Andorra (+376 626 547), so that it can serve you locally. Andorra is recognised by the European Commission as providing an adequate level of data protection.

We use trusted service providers who process data on our behalf: our website host, which also receives the contact form submissions (Netlify, Inc., United States), and our email and messaging providers (including WhatsApp, operated by Meta).

We may also disclose data to authorities when required by law.

6. International transfers

Sunnyzir is based in China and our hosting provider is based in the United States. If you contact us from the European Union or elsewhere, your data will therefore be processed outside your country. We only share it with providers that protect it appropriately and only for the purposes described above.

When you send the contact form, you expressly consent to this transfer by ticking the dedicated box. You can also contact us by email or WhatsApp instead.

7. Your rights

You can ask to access, correct or delete your data, to restrict or object to its use, to receive it in a portable format, and withdraw your consent at any time. These rights apply under the GDPR and the Chinese Personal Information Protection Law.

To exercise them, write to info@sunnyzir.com. We answer within one month.

If you are in the European Union, you can also lodge a complaint with your national data protection authority.

8. Security

The website is served over an encrypted connection (HTTPS) and access to your data is limited to the people who need it. No method of transmission over the internet is completely secure, but we take reasonable measures to protect your data.

9. Changes to this policy

We may update this policy, for example if we add new services to the website. The date at the top shows the latest version.