Privacy Policy

1. Controller and brand

LTWEIZZY is the outward-facing brand used by Hangzhou Jodays Technology Co., Ltd.. For the purposes of applicable data protection law, Hangzhou Jodays Technology Co., Ltd. is the controller responsible for the personal data described in this policy.

Registered address: Room 404, Building 7, No. 112 Jinjiadu Road, Liangzhu Street, Yuhang District, Hangzhou City, Zhejiang Province, China.

Privacy contact: contact@ltweizzyhome.com.

2. Scope

This policy applies to this B2B website and to personal data submitted through its inquiry form. It does not apply to third-party websites or to consumer account services that are not offered on this site.

3. Information we collect

Inquiry details you provide: name, business email, company, country or market and message. Optional fields include partnership model, product interest, estimated order quantity and WhatsApp or phone number.

Direct email: if you contact us by email using the address on this site, we receive your email address, the content of your message and any attachments you choose to send.

Page and campaign context: if you submit from a product detail page, the product model; the page path you submitted from; and UTM source, medium and campaign values when present in the URL.

Technical and operational records: an inquiry ID, submission time, inquiry status, notification status, notification attempts, last notification attempt time and a short notification error code. These records support follow-up, duplicate-submission checks and email delivery troubleshooting. The D1 inquiry table does not store your IP address or browser user-agent.

Turnstile: Cloudflare Turnstile processes a challenge token and technical signals to verify that a submission is not automated. We use the verification result but do not store the Turnstile token in D1.

Session storage: UTM values are stored in your browser's session storage so that campaign attribution survives navigation between pages during the same browser session. This is not a persistent advertising cookie and is not used for cross-site advertising.

4. How we use inquiry information

• To receive, review and respond to your B2B inquiry.
• To discuss product selection, samples, quotations, OEM/ODM programmes and commercial next steps.
• To maintain business records and administer repeat or ongoing business communication.
• To protect the inquiry form against spam, abuse and automated submissions.
• To comply with applicable legal, tax and record-keeping obligations.

We do not sell inquiry information. We do not use it for consumer advertising, behavioural advertising or automated profiling.

5. Legal bases

We use different legal bases depending on who contacts us and why:

• Individuals and sole traders: where you contact us in your own capacity and your inquiry concerns a contract with you, we process the data because it is necessary to take steps at your request before entering into a contract or to perform that contract (GDPR Article 6(1)(b)).
• Employees and representatives of corporate buyers: where you contact us for a company or other organisation, the contract is normally with that organisation rather than with you personally. We process your business contact details on the basis of our legitimate interests in responding to B2B inquiries, managing supplier and customer relationships and following up on samples, quotations and commercial discussions (GDPR Article 6(1)(f)). We balance those interests against your rights, including your right to object to direct follow-up.
• Legal obligation: where retention or disclosure is required by applicable law (GDPR Article 6(1)(c)).
• Consent: where consent is required for a specific optional use. You may withdraw consent at any time.

We do not make automated decisions with legal or similarly significant effects from inquiry data.

6. Service providers and disclosures

We use the following service providers to operate the inquiry process:

• Cloudflare — website hosting, Pages Functions, D1 database storage and Turnstile verification.
• Resend — delivery of inquiry notification emails to our business mailbox. Your email address is used as Reply-To, not as the sender of the notification.
• Alibaba Cloud — business email and domain DNS services, including the mailbox that receives notification emails.

These providers process information as needed to provide their services to us. We do not sell personal data. We may disclose information where required by law or to protect legal rights.

7. Cookies, session storage and Turnstile

We do not currently use Google Analytics, advertising pixels or advertising cookies. Turnstile may use necessary cookies or similar challenge data to distinguish people from automated submissions. UTM values are kept in session storage as described above.

If analytics, advertising tools or additional cookies are introduced later, this policy and any required consent mechanism will be updated before those tools are used.

8. International transfers

Our service providers may process information in countries other than your own. The applicable transfer safeguards depend on the provider and the specific transfer; contact us for current information.

9. Retention

We retain ordinary B2B inquiry records for 24 months after the last effective business contact, then delete or anonymise them through a manual review process. This retention rule has been approved by the business owner. Order, contract and legally required records are managed separately. Automatic deletion is not enabled.

Inquiry information may exist in more than one place: the Cloudflare D1 database, Resend notification emails, the Alibaba Cloud business mailbox, and provider logs or backups. Deleting a D1 row alone does not remove those other copies. Manual deletion covers the accessible copies and records any provider-side limitation; it does not imply that every backup or log can be erased immediately.

10. Your rights

Depending on applicable law, you may have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of data that we are not required to retain;
• request restriction of processing;
• object to processing based on legitimate interests;
• request portability where applicable;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a competent supervisory authority.

These rights are subject to legal exceptions and to our need to retain business records.

11. How to make a privacy request

Email contact@ltweizzyhome.com with the subject line Privacy Request. Please describe your request and provide enough information for us to identify the relevant inquiry. We may ask for reasonable identity or authority verification before acting. An authorised agent may submit a request on your behalf with appropriate evidence.

We will handle requests without undue delay and within the period required by applicable law. We do not currently publish a fixed response-time commitment beyond that legal requirement.

12. Security

We use server-side validation, Cloudflare Turnstile, access-controlled cloud services and limited administrative access to protect inquiry information. No internet transmission or storage system can be guaranteed completely secure.

13. Changes to this policy

We may update this policy as the inquiry process, service providers or legal requirements change. The updated date at the top of this page will be revised when material changes are made.

14. Contact

For privacy questions or requests, contact contact@ltweizzyhome.com.

This policy is effective from 4 November 2026.