Privacy center
Privacy & Cookie Policy
How PHYFLOW handles personal information when you browse our website, request product information, or discuss an OEM/ODM project with us.
PHYFLOW, the business operating phyflow.com (“PHYFLOW”, “we”, “us” or “our”), respects your privacy. This policy explains what we collect, why we use it, who may receive it, and the choices available to you.
Scope
This policy applies to personal information processed through phyflow.com, including product and catalog requests, quotation forms, email communications, and discussions about PHYFLOW hydrogen products and OEM/ODM services.
It does not govern third-party websites, marketplaces, social networks, distributors, or services that have their own privacy notices.
Information we collect
Information you provide
- Contact details, such as your name, business email address and telephone number.
- Business details, such as company name, country or region, job role and target market.
- Inquiry details, including products of interest, quantity, customization needs, certifications, delivery requirements and message content.
- Transaction and support information if you proceed with samples, orders, shipping or after-sales service.
Information collected automatically
- Device and browser information, IP address, language, approximate location and operating system.
- Pages viewed, referring page, time spent, interactions with inquiry links and website errors.
- Cookie and consent choices, where applicable.
How we use information
We use personal information to:
- Respond to inquiries and prepare relevant product, catalog, sample or quotation information.
- Assess OEM/ODM requirements and manage business communications.
- Process orders, coordinate logistics and provide after-sales support.
- Operate, secure, troubleshoot and improve our website.
- Measure website usage and marketing performance where you have provided the required consent.
- Prevent fraud, enforce our terms and meet legal, tax, accounting or regulatory obligations.
We do not sell personal information. We do not use inquiry details for unrelated automated decision-making that produces legal or similarly significant effects.
Legal bases
Where the GDPR, UK GDPR or similar laws apply, we rely on one or more of the following bases:
- Pre-contractual steps and contract: to respond to a quotation request or perform an order.
- Legitimate interests: to operate a secure B2B website, answer relevant business inquiries and improve our services, where those interests are not overridden by your rights.
- Consent: for optional analytics or marketing cookies and where otherwise required.
- Legal obligation: to retain or disclose information when required by applicable law.
You may withdraw consent at any time without affecting processing that occurred before withdrawal.
Cookies and similar technologies
Cookies are small files or similar browser storage technologies used to remember settings, protect forms and understand website use. Optional cookies should remain disabled until you make a choice.
| Category | Purpose | Default |
|---|---|---|
| Strictly necessary | Security, form operation, network delivery and saving your privacy choices. | Always active |
| Analytics | Understand traffic and website interactions, for example through Google Analytics. | Off until consent |
| Marketing | Measure campaigns or support advertising and remarketing, if these services are enabled. | Off until consent |
You can accept, reject or change optional cookie categories at any time. Browser controls can also delete existing cookies, but blocking necessary storage may affect some website functions.
How we share information
We may share information only as reasonably necessary with:
- Website hosting, email, security, analytics, customer support and IT service providers.
- Production, inspection, payment, freight, customs and logistics partners involved in your requested transaction.
- Professional advisers, auditors and insurers.
- Government bodies, regulators or law enforcement where disclosure is legally required.
- A successor in connection with a merger, restructuring or sale of the relevant business, subject to appropriate safeguards.
Service providers are expected to process information only for agreed purposes and to apply appropriate confidentiality and security measures.
International data transfers
PHYFLOW operates from Xiamen, China and serves buyers internationally. Information submitted through the website may therefore be accessed or processed in China and in countries where our service, payment or logistics providers operate.
Where applicable law requires it, we use appropriate transfer measures, contractual protections and access controls. You may contact us for more information about safeguards relevant to your information.
How long we retain information
We keep information only for as long as reasonably needed for the purpose collected, including the business relationship, dispute handling, security and legal obligations. Typical working periods are:
| Record | Typical period |
|---|---|
| Initial inquiries that do not proceed | Up to 24 months after the last meaningful contact |
| Quotations and business correspondence | Up to 3 years after the last meaningful contact |
| Order, payment, tax and shipping records | For the period required by applicable accounting and legal rules |
| Security logs | Normally up to 90 days, unless needed for investigation |
| Analytics data | According to the configured analytics retention setting, normally no more than 14 months |
We may retain limited records for longer where necessary to establish, exercise or defend legal claims.
Your privacy rights
Depending on your location and applicable law, you may have the right to:
- Request access to or a copy of your personal information.
- Correct inaccurate or incomplete information.
- Request deletion or restriction of processing.
- Object to processing based on legitimate interests or to direct marketing.
- Receive certain information in a portable format.
- Withdraw consent and lodge a complaint with your local data protection authority.
To protect information, we may need to verify your identity and clarify the scope of a request. We will respond within the period required by applicable law.
Information security
We use reasonable technical and organizational measures intended to protect personal information, including access controls, transport encryption, system maintenance and limited access based on business need.
No internet transmission or storage method is completely secure. Please do not send passwords, full payment card details, medical records or other unnecessary sensitive information through a general inquiry form.
Children
Our website and B2B services are intended for business users and are not directed to children. We do not knowingly collect personal information from children through our inquiry services. If you believe a child has provided information to us, please contact us so we can review and delete it where appropriate.
Changes to this policy
We may update this policy to reflect changes in our services, providers or legal obligations. The revised version will be posted on this page with a new “Last updated” date. Where required, we will provide additional notice or request renewed consent.
Contact us
For privacy questions or requests, contact PHYFLOW using the details below. Please use the subject line “Privacy Request” so your message can be routed appropriately.
6th Floor, Building 7, No. 15 Dongfu West 2nd Road, Haicang, Xiamen, Fujian, PRC