Privacy Policy
Wuhu GDST Auto Parts Co., Ltd. is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and safeguard your information.
Who We Are
Wuhu GDST Auto Parts Co., Ltd. ("GDST", "we", "us", or "our") is a professional manufacturer and supplier of suspension and steering components headquartered in Wuhu, Anhui Province, China. We have been supplying high-quality automotive spare parts to aftermarket brands, importers, wholesalers, and distributors worldwide for over 20 years.
As a data controller, we are responsible for the personal data you provide to us in connection with your use of our website and our business-to-business (B2B) services. This Privacy Policy applies to all personal data processed by GDST in connection with our website, inquiries, quotations, orders, and ongoing business relationships.
Registered Address: Wuhu, Anhui Province, People's Republic of China
Data We Collect
We may collect the following categories of personal and business data:
Business Contact Data
- Full name and job title
- Company name and address
- Business email address
- Phone and fax numbers
- Country and region
Transaction Data
- Inquiry and quotation details
- Purchase order information
- Shipping and delivery addresses
- Payment and invoice records
- Product specifications requested
Technical & Usage Data
- IP address and browser type
- Pages visited and time spent
- Referring website or search terms
- Device type and operating system
Communication Data
- Email correspondence content
- Contact form submissions
- Trade show or event interactions
- Marketing preferences
Note: We do not intentionally collect sensitive personal data (such as health information, political opinions, or financial account details). If you are a business contact, much of the data we hold relates to your professional role rather than your private life.
How We Collect Data
-
Direct interactions
When you fill in our contact or inquiry form, send us an email, request a quotation, place an order, or communicate with us by phone, email, or at trade exhibitions.
-
Automated technologies
As you interact with our website, we automatically collect technical data about your equipment, browsing actions, and usage patterns using cookies and similar tracking technologies.
-
Third parties and public sources
We may receive data about you from business directories, trade platforms (e.g., Alibaba, Made-in-China), LinkedIn, referrals from existing customers, or from publicly available company registries.
How We Use Your Data
We use the personal data we collect for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Responding to product inquiries and providing quotations | Legitimate interest / Contract |
| Processing and fulfilling purchase orders | Contract performance |
| Managing ongoing business relationships with distributors and importers | Legitimate interest / Contract |
| Sending product updates, catalogs, and B2B marketing communications | Legitimate interest / Consent |
| Improving our website and user experience | Legitimate interest |
| Complying with legal and regulatory obligations (e.g., export controls, customs) | Legal obligation |
| Fraud prevention and security of our systems | Legitimate interest |
Legal Basis for Processing (GDPR)
For individuals located in the European Economic Area (EEA), the United Kingdom, or other jurisdictions with similar data protection laws, we rely on the following lawful bases under Article 6 of the GDPR:
Processing is necessary for the performance of a contract with you or your company, or to take steps prior to entering into a contract (Art. 6(1)(b)).
Processing is necessary to comply with a legal obligation under applicable law, including trade, tax, and export regulations (Art. 6(1)(c)).
Processing is necessary for our legitimate business interests, such as managing B2B relationships, improving our services, and sending relevant product information, provided these interests are not overridden by your rights (Art. 6(1)(f)).
Where you have explicitly opted in to receive marketing communications or agreed to the use of non-essential cookies (Art. 6(1)(a)). You may withdraw consent at any time.
Data Sharing & Disclosure
We do not sell your personal data. We may share your data with the following categories of recipients only as necessary:
-
Logistics and freight partners
Shipping companies, freight forwarders, and customs agents who require your business address and order details to fulfill deliveries.
-
IT and technology service providers
Website hosting, email platforms, CRM systems, and analytics tools that process data on our behalf under data processing agreements.
-
Financial and legal advisors
Banks, accountants, and legal counsel who require access to transaction data for payment processing or compliance purposes.
-
Regulatory and government authorities
When required by law, court order, or government regulation, including customs authorities and export control agencies.
International Data Transfers
As a China-based company serving a global B2B customer base, your personal data may be transferred to and processed in the People's Republic of China and other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.
Where we transfer personal data of individuals in the EEA or UK to countries not deemed adequate by the European Commission, we take appropriate safeguards such as:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Contractual obligations binding our processors to equivalent data protection standards
- Minimizing the personal data transferred to what is strictly necessary for the business transaction
You may request further information about the safeguards in place for international transfers by contacting us at the details provided in Section 12.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.
After the applicable retention period, data is securely deleted or anonymized. In some cases, we may retain data longer if required by applicable law or if there is an ongoing legal dispute.
Your Data Rights
Depending on your location and applicable law (including the GDPR and UK GDPR), you may have the following rights regarding your personal data:
Request a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete personal data.
Request deletion of your personal data where there is no compelling reason for continued processing.
Object to processing based on legitimate interests, including direct marketing.
Request restriction of processing in certain circumstances while a dispute is resolved.
Receive your personal data in a structured, machine-readable format where technically feasible.
How to exercise your rights: Submit a written request to privacy@gdstauto.com. We will respond within 30 days. We may need to verify your identity before processing your request. You also have the right to lodge a complaint with your local supervisory authority.
Data Security
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:
- SSL/TLS encryption for data in transit
- Access controls and role-based permissions
- Regular security assessments and updates
- Staff training on data protection practices
- Secure email communication for sensitive data
- Data breach response procedures
While we take all reasonable steps to protect your data, no method of internet transmission or electronic storage is 100% secure. If you suspect a security incident involving your data, please contact us immediately.
Contact & Data Controller
Data Controller
Wuhu GDST Auto Parts Co., Ltd.
Wuhu, Anhui Province
People's Republic of China
Privacy Inquiries
- privacy@gdstauto.com
- www.gdstauto.com
We aim to respond to all privacy-related requests within 30 days of receipt.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically. For material changes, we will notify existing business contacts by email where appropriate.