Last updated: 12 September 2026
1. Who we are
Cyfoss Lubrication Technology (Shanghai) Co., Ltd. (赛复斯润滑技术（上海）有限公司) — “Cyfoss”, “we”, “us” — designs and manufactures single point automatic lubricators. We operate this website, www.cyfoss.com, and we are the controller of the personal information described below.
- Address: Room 102, Building 1, No. 688 East Huiwang Road, Jiading District, Shanghai, China
- Email: sales@cyfoss.com
- Telephone: +86 138 1702 1629
2. Scope
This policy applies to all language versions of www.cyfoss.com. This is an informational and enquiry website: we do not sell products online, we do not operate user accounts, and we do not process payments here.
3. What information we collect
3.1 Information you give us
When you submit the enquiry form on the contact page, or the quick enquiry panel, we collect:
- Company name (required)
- Contact name (required)
- Email address and/or telephone number, or a messaging ID such as WeChat, WhatsApp or Skype. At least one of these is required so that we can reply to you.
- Your message describing your equipment and lubrication requirements.
Please do not put sensitive personal information — health data, identity document numbers, payment card details — in the message field. We do not need it, and we ask you not to send it.
3.2 Information collected automatically when you submit the form
Our server records the following with each submission, for security purposes only:
- your IP address and browser user-agent string
- the page you submitted from, and the language version you used
- the date and time of submission
We use this to detect and block automated spam and to apply rate limits. A one-way hash of your IP address is stored briefly as a rate-limiting counter. We do not use this data to build a profile of you.
3.3 WeChat
The Chinese-language pages of this site show a WeChat Work QR code. If you choose to scan it, that conversation happens inside WeChat and is governed by Tencent’s privacy policy, not this one. We will see the profile information WeChat shows to business accounts and whatever you send us in that conversation.
4. Why we use your information, and our legal bases
| Purpose | Information used | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Answering your enquiry and preparing a quotation | Form data | Steps taken at your request before entering into a contract, Art. 6(1)(b); our legitimate interest in responding to business enquiries, Art. 6(1)(f) |
| Continuing business correspondence with you | Contact details, correspondence | Contract, Art. 6(1)(b); or legitimate interests, Art. 6(1)(f) |
| Protecting the enquiry form from spam and abuse | IP address, user-agent, timestamps | Our legitimate interest in keeping our systems secure and usable, Art. 6(1)(f) |
| Measuring whether an advertisement led to an enquiry | Cookie and tag data | Your consent, Art. 6(1)(a) |
| Meeting legal, tax and accounting obligations | As required | Legal obligation, Art. 6(1)(c) |
Where we rely on consent, you can withdraw it at any time — see section 5. Withdrawing consent does not affect processing carried out before you withdrew it.
5. Cookies and similar technologies
We use a consent banner so that you can accept or reject non-essential cookies before they are set. Advertising and measurement cookies are only set after you accept them.
5.1 Strictly necessary
| Cookie | Purpose | Retention |
|---|---|---|
| CookieScriptConsent | Remembers your cookie choices. Set by our consent management provider, Cookie Script. | Up to 12 months |
These cannot be switched off, because without them we could not record that you had made a choice.
5.2 Advertising and measurement — only with your consent
| Provider | Purpose | Typical cookies | Retention |
|---|---|---|---|
| Microsoft Advertising (UET tag, Microsoft Corporation) | Tells us whether a visit that came from a Microsoft or Bing advertisement resulted in an enquiry. | MUID, _uetsid, _uetvid | Up to 13 months |
| Google Ads (gtag.js, Google LLC / Google Ireland Limited) | Tells us whether a visit that came from a Google advertisement resulted in an enquiry. | _gcl_au and Google advertising cookies | Up to 90 days for _gcl_au |
We do not use Google Analytics on this website, and we do not use cookies to build advertising profiles of individual visitors.
5.3 Changing your mind
You can reopen the cookie banner from the cookie settings link on any page and change your choices at any time. You can also delete cookies in your browser settings, or opt out directly with the providers: Microsoft at account.microsoft.com/privacy/ad-settings and Google at myadcenter.google.com.
Our servers do not respond to browser “Do Not Track” signals. Where California law requires it, we treat a Global Privacy Control (GPC) signal as a valid opt-out request.
6. Who we share your information with
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We disclose it only to the following, and only for the purposes described:
- Alibaba Cloud (Aliyun) — website hosting and DirectMail email delivery. Servers in Shanghai, China.
- Microsoft Corporation — advertising measurement, where you have consented.
- Google LLC / Google Ireland Limited — advertising measurement, where you have consented.
- Cookie Script — cookie consent management.
- Tencent — only if you choose to contact us through WeChat.
- Professional advisers, courts or public authorities — where we are legally required to disclose, or need to establish or defend legal claims.
7. International transfers
Cyfoss is established in China, and our website and email systems are hosted on Alibaba Cloud servers in Shanghai, China. If you are in the EEA, the United Kingdom, Singapore, Australia or New Zealand, your information will be transferred outside your own country when you contact us.
China is not covered by an EU or UK adequacy decision. For transfers from the EEA or the UK we rely on one or both of the following:
- the transfer being necessary for the performance of a contract with you, or for steps taken at your request before entering into a contract (GDPR Art. 49(1)(b)); and
- Standard Contractual Clauses, where these are in place with the relevant provider.
You can ask us for more detail about these safeguards using the contact details in section 12.
8. How long we keep your information
| Information | Retention period |
|---|---|
| Enquiry emails and subsequent correspondence | Up to 24 months after our last contact with you, unless a longer period is needed for an ongoing business relationship or required by law |
| Server security log (IP, user-agent, timestamp) | 30 days, then deleted automatically |
| Rate-limiting counter (hashed IP address) | Up to 24 hours |
| Cookies | As set out in section 5 |
9. How we protect your information
- The website is served over HTTPS/TLS.
- Enquiry emails are transmitted over an authenticated, encrypted SMTP connection (SMTPS, port 465).
- Mail credentials are stored outside the public website directory and are never present in page source.
- The destination mailbox is set on the server; it is never taken from anything a visitor types, and it is not published in the page source.
- Access to the enquiry mailbox is limited to staff who need it in order to reply to you.
No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
10. Your rights
10.1 EEA and United Kingdom (GDPR and UK GDPR)
You have the right to request access to your personal data, and to have it corrected or erased; to restrict or object to our processing of it, including processing based on legitimate interests; to receive it in a portable format; and to withdraw consent at any time.
We will respond within one month. You may also complain to your national data protection authority — in the United Kingdom, the Information Commissioner’s Office (ico.org.uk).
10.2 California (CCPA / CPRA)
California residents have the right to know what personal information we collect and how we use it; to request deletion or correction; to opt out of the sale or sharing of personal information; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights.
In the preceding 12 months we have not sold or shared personal information, and we do not knowingly collect personal information from anyone under 16. The categories we collect are identifiers (name, email address, telephone number, IP address), commercial information (the content of your enquiry) and internet activity (the page you submitted from, browser user-agent). We collect them for the business purposes set out in section 4. You may use an authorised agent to make a request.
10.3 Singapore (PDPA)
You may request access to, and correction of, the personal data we hold about you, and you may withdraw consent to our use of it. Please use the contact details in section 12. If you are not satisfied with our response, you may contact the Personal Data Protection Commission (pdpc.gov.sg).
10.4 Australia and New Zealand
Under the Australian Privacy Principles (Privacy Act 1988) and the New Zealand Privacy Act 2020 you may request access to, and correction of, your personal information. Please raise any complaint with us first. If it is not resolved, you may contact the Office of the Australian Information Commissioner (oaic.gov.au) or, in New Zealand, the Office of the Privacy Commissioner (privacy.org.nz).
We may need to verify your identity before acting on a request. We do not charge a fee, unless a request is manifestly unfounded or excessive.
11. Children
This website is aimed at businesses. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
12. How to contact us
For any question about this policy, or to exercise any of the rights above:
- Email: info@cyfoss.com
- Post: Cyfoss Lubrication Technology (Shanghai) Co., Ltd., Room 102, Building 1, No. 688 East Huiwang Road, Jiading District, Shanghai, China
- Telephone: +86 138 1702 1629
13. Links to other websites
This site links to third-party services including WhatsApp, TikTok, Instagram and Threads. We are not responsible for their content or their privacy practices; please read their own policies.
14. Changes to this policy
If we change this policy we will publish the new version on this page and update the date at the top. Where a change is significant, we will say so clearly on the page.