Privacy policy

1. Who is responsible for your data

Shanghai Spear And Shield Commercial Co., Ltd., trading as CW TAPE, Shanghai, People's Republic of China, is the controller for the personal data described here. For any question about this policy or about data we hold, write to nina@cwtape.com. We do not have a data protection officer; privacy questions go to that address and are answered by the person responsible for the website.

2. What this policy covers

This policy covers www.cwtape.com. Our QR and NFC product pages run on a separate service with its own handling of activation records, and links to third-party sites are governed by those sites' policies, not this one.

3. What we process, and why

Visit statistics — Umami. We use Umami Cloud, hosted in the European Union, to count visits. It is cookieless: it records the page requested, the referring site, approximate country, device type and browser, through a rotating identifier that cannot be traced back to a person. No profile of an individual is built, and no consent is required because nothing is stored on your device.

Visit statistics — Google Analytics 4. Only after you accept the consent banner do we load Google Analytics 4 (measurement ID G-21KCJPRS06). It sets the cookies listed in section 4 and records the pages you view, how you arrived, and interaction events such as scroll depth. IP addresses are anonymised before storage. If you decline, gtag stays in a denied state and no cookie is written; the Umami count above continues either way.

Server logs. Our hosting provider records the IP address, timestamp, requested URL, response code and user agent of every request. These logs exist for security, abuse prevention and fault diagnosis, are kept for a short period, and are not used to build marketing profiles.

Enquiries. When you write to us by email, WhatsApp or the contact form, we process your name, company, contact details and the content of your message in order to answer it and, if it leads to business, to perform the contract. We keep enquiry records for as long as the business relationship lasts and for the period we are required to keep commercial records afterwards.

4. Cookies and local storage

The two Google cookies are written only after you press Accept. The last two entries are stored in your browser's local storage, contain no personal data, and are necessary for the site to work the way you set it up, so they do not depend on consent. We use no advertising, remarketing or social-media tracking cookies; the advertising storage categories in Google Consent Mode are set to denied and are never upgraded.

5. Legal bases

• Consent (GDPR Art. 6(1)(a)) — Google Analytics. You can withdraw it at any time; see section 8.
• Legitimate interests (Art. 6(1)(f)) — cookieless visit counting, server logs and security. We keep this to what is necessary to run and protect the site, and you may object.
• Contract or pre-contractual steps (Art. 6(1)(b)) — handling an enquiry you send us, quoting, and performing an order.

6. Who else is involved

We use a small number of processors and do not sell data to anyone. Google LLC processes analytics data and may transfer it outside the EEA under the EU–US Data Privacy Framework or standard contractual clauses. Umami Software processes visit counts on EU infrastructure. Hostinger International Ltd. provides hosting and holds the server logs. Our email and messaging providers process correspondence. Each is bound to use the data only to deliver that service.

7. How long we keep it

Event-level analytics data is retained for no longer than 14 months, after which only aggregated reports remain. Consent state is kept in your browser until you clear it or change it. Server logs are kept for a short operational period. Enquiry records are kept for the duration of the business relationship plus the period required for commercial and tax records.

8. Your rights

You may ask for a copy of the data we hold about you, ask us to correct or delete it, ask us to restrict or stop processing it, object to processing based on legitimate interests, or ask for it in a portable format. Write to nina@cwtape.com and we will respond within one month. If you are in the European Union you also have the right to complain to your national supervisory authority.

To withdraw analytics consent, use the Cookie settings link in the footer. It clears the stored choice and shows the banner again, where Decline stops all Google Analytics cookies and removes the ones already set by this site.

9. What we do not do

We do not sell personal data, do not build advertising audiences from site visitors, do not make automated decisions that affect you, and do not knowingly collect data from anyone under 16.

10. Changes

If this policy changes in a way that affects what we collect, we will update the date at the top and, where the change is significant, ask for consent again.

隐私政策（中文）