Privacy Policy
Last updated: 2 May 2026
ZEMSS (trading name of Shanxi Zeming Environmental Protection Technology Co., Ltd., “we”, “us”, “our”) operates the website at zemsteel.com. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under applicable data protection law including the EU General Data Protection Regulation (GDPR).
Please read this policy carefully. By using zemsteel.com you acknowledge that you have read and understood it.
1. Who We Are (Data Controller)
Trading name: ZEMSS
Legal entity: Shanxi Zeming Environmental Protection Technology Co., Ltd.
Address: Taiyuan, Shanxi Province, People’s Republic of China
Website: zemsteel.com
Contact email: [email protected]
We are the data controller for personal data collected through this website.
2. Data We Collect
2.1 Data You Provide Directly
When you submit an enquiry through our contact form, we collect:
- Full name
- Email address
- Phone number
- Country
- Company name
- Products or materials you are interested in
- Your message or enquiry details
Providing this information is voluntary. Without it, we cannot respond to your enquiry.
2.2 Data Collected Automatically
When you visit zemsteel.com, our systems and third-party analytics tools automatically collect:
- IP address (anonymised before storage where technically possible)
- Browser type and version
- Operating system
- Pages visited and time spent on each page
- Referring URL (the page that linked you to us)
- Date and time of your visit
This data is collected via cookies and similar technologies. See our Cookie Policy for full details.
3. How We Use Your Data and Legal Basis
| Purpose | Data Used | Legal Basis (GDPR Art. 6) |
|---|---|---|
| Respond to your product enquiry or quotation request | Name, email, phone, company, message | Pre-contractual steps at your request (Art. 6(1)(b)) |
| Follow up on your enquiry if we have not heard back | Name, email, phone | Legitimate interests — completing a business enquiry you initiated (Art. 6(1)(f)) |
| Improve website content and user experience | Analytics data (anonymised) | Legitimate interests — understanding how visitors use the website (Art. 6(1)(f)) |
| Comply with legal obligations | Any data required by applicable law | Legal obligation (Art. 6(1)(c)) |
We do not use your personal data for automated decision-making or profiling.
4. Cookies
We use cookies to operate the website and to collect anonymised analytics data. For a full list of cookies, their purpose, and how to manage them, please see our Cookie Policy.
5. Who We Share Your Data With
We do not sell your personal data. We may share it with the following categories of third parties where necessary:
| Recipient | Purpose | Location |
|---|---|---|
| Google LLC (Google Analytics 4) | Website traffic analytics (anonymised) | USA — covered by Google’s EU Standard Contractual Clauses |
| Hosting provider (web server operator) | Storing and serving website data | USA |
| FluentForms / WPManageNinja | Processing contact form submissions | Form data stored on our server only |
We may also disclose your data if required by law, regulation, court order, or governmental authority.
6. International Data Transfers
ZEMSS is based in China and our website server is located in the United States. When you submit personal data through our contact form, that data is transmitted to and stored on servers in the United States, and may be accessed by our team in China for the purpose of responding to your enquiry.
Where we transfer personal data originating from the European Economic Area (EEA) to countries not recognised as providing adequate data protection, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) adopted by the European Commission, or equivalent mechanisms.
For enquiries about international transfers and the safeguards in place, contact us at [email protected].
7. Data Retention
| Data Type | Retention Period | Reason |
|---|---|---|
| Enquiry form submissions | 3 years from last contact | Business records; follow-up on potential orders |
| Google Analytics data | 14 months (Google default; configured in GA4) | Analytics aggregation period |
| Server access logs | 90 days | Security monitoring |
After the applicable retention period, personal data is deleted or anonymised.
8. Your Rights
If you are located in the European Economic Area or United Kingdom, you have the following rights under the GDPR or UK GDPR. Similar rights may apply under other data protection laws depending on your jurisdiction.
- Right of access (Art. 15) — You may request a copy of the personal data we hold about you.
- Right to rectification (Art. 16) — You may ask us to correct inaccurate or incomplete data.
- Right to erasure (Art. 17) — You may ask us to delete your personal data, subject to legal retention requirements.
- Right to restriction of processing (Art. 18) — You may ask us to limit how we use your data in certain circumstances.
- Right to data portability (Art. 20) — You may request your data in a structured, machine-readable format.
- Right to object (Art. 21) — You may object to processing based on legitimate interests. We will stop unless we have compelling legitimate grounds.
- Right to withdraw consent — Where processing is based on consent (e.g. marketing cookies), you may withdraw consent at any time without affecting prior processing.
To exercise any of these rights, email us at [email protected] with the subject line “Data Subject Request”. We will respond within 30 days.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These include HTTPS encryption on all pages, access controls on our server, and regular security reviews.
No method of transmission over the internet is 100% secure. If you have reason to believe that your data has been compromised, please contact us immediately at [email protected].
10. Children
This website is directed at business professionals and is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be notified via a notice on the website homepage. We encourage you to review this page periodically.
12. Contact Us
For any questions, requests, or concerns about this Privacy Policy or our data practices:
ZEMSS — Shanxi Zeming Environmental Protection Technology Co., Ltd.
Taiyuan, Shanxi Province, China
Email: [email protected]
Website: zemsteel.com