Privacy Policy
Last updated: 22 September 2026
This policy explains what information is collected when you visit druomu.com, why we collect it, and what rights you have. It applies to this website only.
1. Who we are
The controller of the personal data described in this policy is:
- Shanghai Druomu M&E Equipment Ltd. (上海卓穆机电设备有限公司)
- Room 1003, Building 1, No. 2 Dongye Road, Dongjing Town, Songjiang District, Shanghai, China
- Contact for any privacy question or request: sales@hashoer.com
- Personal Information Protection Officer (PIPO): we have designated a person responsible for personal information protection. You may reach them at sales@hashoer.com (marked "Attn: PIPO").
2. Information we collect
a) Information you give us voluntarily
When you submit our enquiry form or contact us through WhatsApp or email, we receive the information you choose to provide. Our form asks for:
- your name (required)
- your email address (required)
- your telephone or WhatsApp number (required)
- your company or organisation name (optional)
- the content of your message (required)
b) Information collected automatically
Like most websites, we automatically receive technical information when you browse, including:
- your IP address (used to estimate your approximate location — country and city, not a precise address — and, through our visitor-identification service, to identify the organisation you browse from; see section 6)
- the device, operating system and browser you use, and the language your browser reports
- the pages you view, how long you stay and which links you click
- the website or search engine that referred you to us
- Google Analytics 4 may also build approximate, non-identifying audience profiles of visitors for analytics purposes.
3. Why we use this information
- to answer your enquiry and provide quotations or technical information
- to understand how our website is used, so we can improve its content and structure
- to understand which countries, markets and product pages attract interest
- to keep the website secure and prevent abuse
- to meet our legal and accounting obligations when a business relationship results
We do not sell, rent or trade your personal information to anyone.
4. Legal basis for processing
Where the EU/UK General Data Protection Regulation applies, we rely on the following legal bases:
| Processing | Legal basis |
|---|
| Answering your enquiry, providing a quotation | Performance of a contract or steps taken at your request before entering into one |
| Website analytics, security, improvement of our services | Our legitimate interests in operating and improving our business |
| Company-level website visitor identification | Our legitimate interests in understanding which organisations are interested in our products. We identify organisations, not individuals, and this service does not use cookies. |
| Non-essential cookies, where consent is legally required | Your consent (which you may withdraw at any time) |
5. Cookies and similar technologies
We use strictly necessary cookies to make the site work (for example, security and load balancing by Cloudflare). We also use analytics cookies (Google Analytics 4): our analytics provider sets identifiers such as _ga and _ga_*, which distinguish one browser from another and may remain on your device for up to two years. We use this data only in aggregate form to understand how the website is used.
You can refuse or delete cookies at any time in your browser settings, and you can install Google's official Analytics opt-out browser add-on. If you block cookies, the website will still work; only statistical measurement is affected.
6. Who else may process your information
We use a small number of service providers. They process data on our instructions and only for the purposes listed above:
| Provider | Purpose |
|---|
| Google Analytics 4 (Google Ireland Limited) | Website traffic measurement and statistics |
| Cloudflare, Inc. | Website hosting and delivery, security, and aggregate visit statistics |
| Leadfeeder (Dealfront Group GmbH) | Company-level website visitor identification — matches a visitor's IP address against a database of companies so that we can see which organisations visit our website; it does not use cookies and does not identify individuals |
| Web3Forms | Contact-form delivery — forwards enquiry emails to us without storing form data on our own server |
| WhatsApp (Meta Platforms) | Direct communication with customers who message us via WhatsApp |
Some of these providers may process data on servers outside your country. Where required, such transfers are covered by appropriate safeguards such as standard contractual clauses.
Because our company is established in China, personal information collected through this website may be transferred out of mainland China to the service providers listed above (including Google, Cloudflare and Meta, whose servers are located outside China). Where such cross-border transfer of personal information is governed by China's Personal Information Protection Law (PIPL), we will rely on one of the lawful cross-border transfer mechanisms prescribed by the PIPL — such as a standard contract filed with the competent Cyberspace Administration of China, a security assessment, or certification — and will update this section accordingly. You may request a copy of the relevant safeguards by contacting us.
If we add further analytics or visitor-identification tools in the future, we will update this section before or when they go live.
7. How long we keep information
- Enquiry and contact data (name, email, phone, company, message): kept for as long as needed to handle your enquiry and any resulting business relationship, and thereafter for the period required by tax, accounting and limitation laws (generally up to 6 years in China).
- Website analytics data (Google Analytics 4, Cloudflare aggregate statistics): retained for 14 months, then automatically deleted or anonymised.
- Server and security logs (IP addresses): kept for 12 months for security and abuse prevention, then deleted.
8. Your rights
Subject to applicable law, you have the right to:
- ask what personal data we hold about you and receive a copy
- ask us to correct inaccurate data
- ask us to delete your data
- ask us to restrict or object to certain processing
- request a portable copy of your data, or ask us to explain our processing rules
- withdraw consent at any time, where processing is based on consent
- lodge a complaint with your local data protection authority
If you are in mainland China, the above rights are provided under the Personal Information Protection Law (PIPL) and, where applicable, the GDPR. To exercise any right, contact us at sales@hashoer.com; we will verify your identity and respond within 15 working days under PIPL (or within 30 days under GDPR, which may be extended for complex requests).
9. Security
Our website is served over an encrypted HTTPS connection. Access to enquiry data is limited to staff who need it to respond to you. No method of transmission over the internet is completely secure, but we take reasonable technical and organisational measures to protect your information.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and affected users as required by law (without undue delay under the GDPR, and as required under the PIPL).
10. Children
This website is aimed at a professional, business audience and is not directed at children. In mainland China, where the PIPL applies, we do not knowingly collect personal information from children under 14 without the consent of their guardian.
11. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows the current version. If we make material changes, we will post the updated policy on this page and, where required by law, notify you (for example, by email or a prominent notice on the website).
12. Contact
Questions, requests or complaints about privacy can be sent to sales@hashoer.com, or by post to the address in section 1.
隐私政策
最后更新：2026 年 9 月 22 日
本政策说明您访问 druomu.com 时我们会收集哪些信息、为什么收集，以及您享有哪些权利。本政策仅适用于本网站。
一、我们是谁
本政策所述个人数据的控制者为：
- 上海卓穆机电设备有限公司（Shanghai Druomu M&E Equipment Ltd.）
- 地址：上海市松江区洞泾镇东业路 2 号 1 幢 1003 室
- 隐私相关问题的联系方式：sales@hashoer.com
- 个人信息保护负责人：我们已指定专人负责个人信息保护，您可通过 sales@hashoer.com（邮件注明"收件人：个人信息保护负责人"）联系。
二、我们收集哪些信息
1. 您主动提供的信息
当您提交询盘表单，或通过 WhatsApp、邮件联系我们时，我们会收到您主动填写的信息。表单包含：
- 您的姓名（必填）
- 电子邮箱（必填）
- 电话或 WhatsApp 号码（必填）
- 公司或组织名称（选填）
- 留言内容（必填）
2. 自动收集的信息
与大多数网站一样，您浏览时我们会自动获得以下技术信息：
- 您的 IP 地址（用于估算大致位置——国家与城市，而非精确地址；并通过访客识别服务，识别您访问时所用网络所属的企业，详见第六节）
- 您使用的设备、操作系统、浏览器及浏览器语言
- 您浏览的页面、停留时长与点击情况
- 将您带到本站的来源网站或搜索引擎
- Google Analytics 4 还可能为分析目的生成访客的大致、去标识化用户画像。
三、我们如何使用这些信息
- 回复您的咨询，提供报价或技术资料
- 了解网站使用情况，以改进内容与结构
- 了解哪些国家、市场与产品页面更受关注
- 保障网站安全、防止滥用
- 在形成业务关系时，履行我们的法律与财务义务
我们不会向任何第三方出售、出租或交易您的个人信息。
四、处理的合法依据
在适用欧盟／英国《通用数据保护条例》（GDPR）的情况下，我们依据以下合法依据处理数据：
| 处理活动 | 合法依据 |
|---|
| 回复咨询、提供报价 | 履行合同，或应您要求在订立合同前采取步骤 |
| 网站统计、安全防护、服务改进 | 我们在经营与改进业务方面的正当利益 |
| 公司级访客识别 | 我们在了解哪些企业对我方产品感兴趣方面的正当利益。识别的是企业而非个人，且该服务不使用 Cookie。 |
| 法律要求取得同意的非必要 Cookie | 您的同意（可随时撤回） |
五、Cookie 及类似技术
我们使用严格必要的 Cookie 使网站正常运行（如 Cloudflare 的安全与负载均衡）。同时使用分析 Cookie（Google Analytics 4）：统计服务商会设置 _ga、_ga_* 等标识，用于区分不同浏览器，最长可能在您的设备上保留两年。我们仅以汇总方式使用这些数据来了解网站使用情况。
您可以随时在浏览器设置中拒绝或删除 Cookie，也可以安装谷歌官方的 分析退出浏览器插件。屏蔽 Cookie 不影响网站正常使用，仅影响统计计量。
六、还有谁会处理您的信息
我们仅使用少量服务商，它们按我们的指示、仅为上述目的处理数据：
| 服务商 | 用途 |
|---|
| Google Analytics 4（Google Ireland Limited） | 网站流量统计与分析 |
| Cloudflare, Inc. | 网站托管与分发、安全防护、汇总访问统计 |
| Leadfeeder（Dealfront Group GmbH） | 公司级访客识别——将访客 IP 地址与公司数据库比对，以便我们了解有哪些企业访问了本站；不使用 Cookie，也不识别到个人 |
| Web3Forms | 联系表单递送——将询盘邮件转发给我方，不在我方服务器存储表单数据 |
| WhatsApp（Meta Platforms） | 与通过 WhatsApp 联系我们的客户直接沟通 |
部分服务商可能在您所在国家／地区以外的服务器上处理数据。如法律要求，此类跨境传输均有适当保障措施（如标准合同条款）。
由于本公司设立于中国，本网站收集的个人信息可能会传输至上述服务商（包括 Google、Cloudflare、Meta，其服务器位于中国境外）。当此类个人信息跨境传输受《个人信息保护法》规制时，我们将依据该法规定的跨境提供机制之一——如向网信部门备案的标准合同、通过安全评估或认证——进行，并相应更新本节。您可通过联系方式索取相关保障措施的副本。
如我们将来新增其他统计或访客识别工具，将在其启用前或启用时更新本节内容。
七、信息保留期限
- 询盘与联系数据（姓名、邮箱、电话、公司、留言）：在用于处理您的咨询及由此产生的业务关系所需期限内保存，之后按税务、会计与诉讼时效相关法律要求保存（在中国通常最长 6 年）。
- 网站分析数据（Google Analytics 4、Cloudflare 汇总量）：保存 14 个月，之后自动删除或匿名化。
- 服务器与安全日志（IP 地址）：为安全与防滥用保存 12 个月，之后删除。
八、您的权利
在适用法律范围内，您有权：
- 了解我们持有您的哪些个人数据，并获取副本
- 要求更正不准确的数据
- 要求删除您的数据
- 要求限制处理，或反对特定处理
- 要求提供可携带的数据副本，或要求我们说明处理规则
- 在处理基于同意时，随时撤回同意
- 向当地数据保护监管机构投诉
如您位于中国内地，上述权利依据《个人信息保护法》（PIPL）及（如适用）GDPR 提供。行使任何权利请通过 sales@hashoer.com 联系我们；我们将核验您的身份，并在 PIPL 下 15 个工作日内（或 GDPR 下 30 日内，复杂请求可延长）作出答复。
九、安全措施
本网站通过 HTTPS 加密连接提供服务。询盘数据的访问权限仅限处理您咨询所必需的员工。互联网传输不存在绝对安全的方式，但我们采取合理的技术与组织措施保护您的信息。
若发生可能危及您权利与自由的个人数据泄露事件，我们将依法通知相关监管机构及受影响用户（依据 GDPR 毫不迟延地通知，并依《个人信息保护法》要求履行通知义务）。
十、未成年人
本网站面向企业专业客户，并非针对未成年人。在中国内地，《个人信息保护法》适用时，未经监护人同意，我们不会有意收集 14 岁以下儿童的个人信息。
十一、政策更新
我们可能不时更新本政策。顶部"最后更新"日期即为当前版本。如作出重大变更，我们会在本页面发布更新后的政策，并在法律要求时通知您（例如通过邮件或网站醒目公告）。
十二、联系我们
有关隐私的问题、请求或投诉，请发送至 sales@hashoer.com，或按第一节地址邮寄。