Get in touch with Cenwan Machine Company
Privacy Policy — How Cenwan Machine Handles Your Business Data
Cenwan Machine engineers folder gluer machines for converters in 40+ countries. This policy explains, in plain language, what information we collect when you request a quotation, browse our catalog, or contact our engineering team — and the controls you have over that data.
Who We Are
This Privacy Policy applies to cenwanpack.com (“the Website”) and any related digital touchpoints operated by Cenwan Machine (“Cenwan”, “we”, “our”, “us”). Cenwan Machine is a folder gluer machine manufacturer based in Wenzhou, China, serving carton and corrugated converters in over forty countries with Tier 1 to Tier 4 packaging line equipment.
For the purposes of the EU General Data Protection Regulation (GDPR), Cenwan Machine acts as the data controller of personal data collected through the Website. For the purposes of the California Consumer Privacy Act (CCPA / CPRA), Cenwan Machine acts as a business with respect to California residents’ personal information.
We do not sell personal information and we do not use personal data for behavioral advertising. The Website exists to support B2B procurement workflows — model selection, quotation, technical documentation, and after-sales coordination.
Information We Collect
We collect only the data needed to respond to your inquiry, deliver a quotation, or service your equipment. Categories are listed below, separated by collection method.
2.1 Data You Provide Directly
When you submit a contact form, request a custom quote, or correspond with our engineering team, we collect:
- Identity data — your full name and job title.
- Contact data — business email address, phone number, WhatsApp number, and company name.
- Inquiry content — the message text you send, including the box style, production volume, format range, and integration requirements you describe.
- Project data — engineering specifications, drawings, or sample artwork you choose to share during the quotation process.
2.2 Data Collected Automatically
When you browse the Website, we and our analytics processors automatically collect:
- Technical data — IP address, browser type and version, operating system, device type, and screen resolution.
- Usage data — pages visited, time on page, click paths, referring URL, and search terms that brought you to our site.
- Approximate location — country and region derived from IP address. We do not collect precise GPS location.
2.3 Data We Do Not Collect
We do not collect government identification numbers, payment card data (commercial orders are invoiced separately through banking channels), biometric data, racial or ethnic origin, political opinions, religious beliefs, health data, or sexual orientation. We do not knowingly collect data from anyone under 18 years of age.
How We Use Your Data
We use the data described above for clearly defined business purposes, each tied to a legal basis under GDPR or a permitted business purpose under CCPA.
| Purpose | Data Used | Retention |
|---|---|---|
| Respond to quotation requests | Identity, contact, inquiry content, project data | Active inquiry + 36 months |
| Deliver after-sales technical support | Identity, contact, machine serial reference | Warranty period + 5 years |
| Ship spare parts to your country | Contact, shipping address, OEM part reference | 7 years (shipping records) |
| Improve the Website and catalog | Aggregated usage data (anonymized) | 26 months (Google Analytics default) |
| Comply with legal obligations | Transaction and inquiry records as required | As required by applicable law |
We do not use your data to train artificial intelligence models. We do not use your data to build advertising profiles. We do not enrich your data with third-party information brokers.
Legal Bases for Processing
Under Article 6 of the GDPR, we rely on one of the following lawful bases each time we process personal data:
- Performance of a contract — processing your inquiry and quotation request is a pre-contractual step you have initiated.
- Legitimate interest — responding to qualified B2B procurement inquiries from carton and corrugated converters, and improving the technical accuracy of our catalog. Our interest is balanced against your rights, and you can object at any time.
- Legal obligation — retaining commercial records as required by Chinese accounting law, export regulations, and tax authorities in your jurisdiction.
- Consent — for optional cookies (analytics, marketing) where required by your local law. Consent can be withdrawn at any time without affecting prior lawful processing.
Cookies and Tracking Technologies
cenwanpack.com uses a minimal set of cookies and similar technologies. We classify them into three categories:
5.1 Strictly Necessary Cookies
Required for the Website to function — session management, security tokens, language preference, and the WordPress / Blocksy theme’s user interface state. These cookies do not require consent and cannot be disabled while continuing to use the site.
5.2 Performance and Analytics Cookies
We use Google Analytics 4 to understand which folder gluer pages procurement teams find useful. Analytics cookies record page views, session duration, and approximate geography. IP addresses are anonymized at collection. You can opt out using the Google Analytics Opt-out Browser Add-on or by declining analytics in our cookie banner.
5.3 Functional Cookies
The Cenwan Folder Gluer Model Selector, ROI Calculator, and other interactive tools use functional cookies to remember your inputs across pages. These are first-party only and expire when you close your browser.
Your Control
You can clear, block, or limit cookies through your browser settings at any time. Disabling strictly necessary cookies may break form submission and interactive tools.
Third-Party Services and Processors
We work with a small number of vetted service providers (“processors”) who handle data on our behalf under written data processing agreements. Each processor is bound to use your data only for the specific purpose we direct.
- Web hosting — our hosting provider maintains the server infrastructure that delivers cenwanpack.com.
- Email delivery — transactional emails (quotation responses, after-sales notifications) are sent through a standard SMTP relay.
- Analytics — Google Analytics 4 (with IP anonymization).
- Performance optimization — FlyingPress caching layer, which processes only technical telemetry, no personal data.
- Messaging platforms — when you contact us via WhatsApp, that conversation is also governed by WhatsApp’s own privacy policy.
We never sell, rent, or trade your personal data to advertisers, data brokers, or unrelated third parties.
When We Share Data
We disclose your personal data only in the following limited situations:
- To our engineering and after-sales teams — internal Cenwan staff in Wenzhou who handle your quotation, installation, or spare-parts request.
- To our regional service partners — when you request a site visit, parts delivery, or local support in one of the 40+ countries we serve, we share the minimum necessary contact and project data with the regional partner handling your case.
- To shipping and logistics providers — name and delivery address required for spare-parts dispatch.
- To professional advisors — accountants, lawyers, and auditors under confidentiality obligations.
- In response to legal requirements — when compelled by a valid court order, regulatory directive, or government investigation under applicable law.
- In a corporate transaction — if Cenwan is involved in a merger, acquisition, or asset transfer, your data may transfer to the successor entity, subject to the same protections described here.
International Data Transfers
Cenwan Machine is headquartered in the People’s Republic of China. Personal data you submit through cenwanpack.com is processed primarily on servers located in China and may be accessed by our engineering teams in Wenzhou. Regional service partners in your country may also receive limited data to fulfill your inquiry.
Where personal data of EU, UK, or Swiss residents is transferred outside the European Economic Area, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses (SCCs) and equivalent UK / Swiss transfer mechanisms. Where data of Chinese residents is transferred outside China, we comply with the Personal Information Protection Law (PIPL) standard contract or security assessment requirements as applicable.
You may request a copy of the safeguards in place for any specific transfer by contacting us at the address in Section 14.
How Long We Keep Your Data
We retain personal data only as long as needed for the purpose it was collected, plus any period required by law. Specific retention periods are listed in the table in Section 03.
As a general rule:
- Inactive inquiries are deleted or anonymized 36 months after last contact.
- Customer records (where a purchase was completed) are retained for the duration of the warranty plus five years to support after-sales spare-parts service.
- Commercial and tax records are retained for the period required by Chinese accounting law and applicable tax jurisdictions, typically seven to ten years.
- Analytics data follows the Google Analytics 4 default retention setting (26 months) and is stored in aggregated, non-identifiable form.
How We Protect Your Data
We apply technical and organizational measures appropriate to the sensitivity of the data we handle:
- Encryption in transit — TLS 1.2 or higher on all Website traffic.
- Encryption at rest — for backups and offline archives.
- Access control — role-based access limited to engineering, sales, and after-sales staff who need the data for their work.
- Hosting hardening — server-level firewalls, regular security patches, and isolation of administrative interfaces.
- Staff training — all employees handling personal data receive privacy awareness training and sign confidentiality undertakings.
No internet transmission is ever completely secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security and you transmit personal data to us at your own risk.
Your Rights and How to Exercise Them
Depending on your country of residence, you may have some or all of the following rights with respect to your personal data. Cenwan will honor verified requests free of charge within the timeframe required by your local law (typically 30 days under GDPR, 45 days under CCPA).
Access
Request a copy of the personal data we hold about you.
Rectification
Correct inaccurate or incomplete information.
Erasure
Request deletion where no overriding legal obligation applies.
Restriction
Limit how we process your data while a dispute is resolved.
Portability
Receive your data in a structured, machine-readable format.
Objection
Object to processing based on legitimate interest.
Withdraw Consent
Withdraw consent where processing relies on it.
Non-Discrimination
CCPA: exercise your rights without service penalty.
To exercise any of these rights, send a request to the email address in Section 14. We may ask you to verify your identity using the business email associated with your inquiry. You also have the right to lodge a complaint with a supervisory authority — in the EU, your national Data Protection Authority; in the UK, the Information Commissioner’s Office (ICO); in California, the California Privacy Protection Agency (CPPA).
Children’s Privacy
cenwanpack.com is a business-to-business website intended for procurement teams, engineering staff, and plant managers in the packaging industry. The Website is not directed to children, and we do not knowingly collect personal data from anyone under 18 years of age. If you believe a minor has provided us with personal data, please contact us using the details in Section 14 and we will delete the data promptly.
Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, new service offerings, or evolving legal requirements. When we make a material change, we will update the “Last Updated” date at the top of this page and, where appropriate, notify you by email or through a notice on the Website.
Continued use of cenwanpack.com after a policy update constitutes acknowledgement of the revised policy. We encourage you to review this page periodically.
How to Reach Us
For any privacy-related question, rights request, or complaint about how Cenwan handles your data, please contact us through one of the channels below. We aim to acknowledge every privacy request within seven working days.
Privacy & Data Protection Contact
Cenwan Machine — Data Protection Office
For access requests, rectification, erasure, or any other matter under this Privacy Policy, our team in Wenzhou responds to inquiries from converters in 40+ countries within seven working days.




