What happens to the information you send us — through the quote form, WhatsApp, email or an Alibaba enquiry — and what this website itself stores.
The short version. We are a factory, not a data business. We use your details to answer your enquiry, quote, ship and support what you buy. We do not sell or rent personal data, we run no advertising or analytics trackers, and this website sets no cookies. The rest of this page is the detail.
The company responsible for your data (the “controller”) is:
This policy covers this website and any enquiry, quotation, order or after-sales conversation you have with us by email, WhatsApp, WeChat or through our Alibaba store. It does not cover third-party platforms you use to reach us — those have their own policies.
We only ask for what a quotation or a shipment actually needs.
| Enquiry details | Name, company, business email, phone or WhatsApp number, destination country, product of interest, estimated quantity and the text of your message. From you, via the quote form, email, WhatsApp, WeChat or Alibaba. |
|---|---|
| Order & shipping details | Consignee name, delivery address, contact phone, tax or VAT number where the destination requires it, and your forwarder’s details. From you or your forwarder, once an order is placed. |
| Correspondence | Emails, chat threads, call notes, and the photos or videos you send us for fault diagnosis, sample approval or artwork proofs. From you, during our work together. |
| Technical data | IP address, browser type, pages requested and time of request, recorded automatically in standard server logs by our hosting provider. Generated when you load a page. |
What we do not collect. No payment card numbers — orders are paid by bank transfer or through Alibaba’s own checkout, which handles card data under its policy. No identity documents, no precise location, no biometric data. We do not buy contact lists from data brokers, and we do not build advertising profiles.
The enquiry form on this site is not submitted to a server. It composes your message locally in the browser and hands it to your own email client or to WhatsApp when you press send — so nothing reaches us until you actually send it.
Where the EU or UK GDPR applies, we rely on the following bases:
| Answer your enquiry and prepare a quotation | Legitimate interests — responding to a business request you initiated (Art. 6(1)(f)); consent where local law requires it |
|---|---|
| Produce, invoice, ship and support your order | Performance of a contract (Art. 6(1)(b)) |
| Customs declarations, tax records, export licences | Legal obligation (Art. 6(1)(c)) |
| Keep the website online and secure, prevent abuse | Legitimate interests (Art. 6(1)(f)) |
| Send product updates or new-model notices to existing customers | Legitimate interests / soft opt-in — one click to opt out in every message |
| Send marketing to a new contact who asked for it | Consent (Art. 6(1)(a)), withdrawable at any time |
We do not carry out automated decision-making or profiling that produces legal effects for you.
This site sets no cookies. It writes nothing to local storage, runs no Google Analytics, no advertising pixel, no heat-map or session-recording script, and embeds no third-party video player. That is why you have not seen a cookie banner here — there is nothing to consent to.
Two honest exceptions worth knowing about:
fonts.googleapis.com and
fonts.gstatic.com). That request discloses your IP address and browser
user-agent to Google, and Google’s privacy policy governs it. If you block it, the
page falls back to your system fonts and remains fully usable.If we ever add analytics, we will update this page first and — where the law requires it — ask for your consent before any script runs.
We share the minimum necessary, and only with parties who need it to fulfil your order or to keep the business running:
We never sell, rent or trade personal data, and we do not pass it to advertising networks or data brokers.
Our company and our production are in mainland China. China is not covered by an adequacy decision of the European Commission or the UK Government, so when personal data of EU, EEA or UK individuals is transferred to us we rely on the European Commission Standard Contractual Clauses (2021/914) or the UK International Data Transfer Addendum, together with the technical and organisational measures described in section 09. We can send you a copy of the safeguards on request.
Our email and hosting providers may process data in other countries as part of delivering their service. Where the law requires it, we obtain separate consent for cross-border provision of personal data, as provided by China’s Personal Information Protection Law.
| Enquiries that never become an order | 24 months, then deleted |
|---|---|
| Quotations and price lists | 24 months |
| Orders, invoices, packing lists, customs records | As long as PRC tax and customs rules require — currently up to 10 years |
| Chat threads and email correspondence | 24 months after the last message |
| Warranty and RMA records | Warranty period plus 12 months |
| Server logs | Typically deleted or rotated within 90 days |
When a period ends we delete or irreversibly anonymise the data, unless we must keep a particular record to defend a legal claim or to meet a statutory obligation.
If you are in the EU, EEA or UK, you have the right to:
If you are in mainland China, under the Personal Information Protection Law you may request access to and a copy of your data, correction or completion, deletion, withdrawal of consent, transfer to another processor where technically feasible, and an explanation of how we process your data.
If you are a California resident, you may request to know, delete or correct the personal information we hold, and to opt out of “sale” or “sharing” — we do neither, so there is nothing to opt out of. We will not discriminate against you for exercising any right.
To exercise a right, email kirsten_yang@hkatbingo.com with the subject line “Data request”. We reply within 30 days. We may ask you to confirm from the business email address we already hold, so that we do not hand your data to someone else. Exercising your rights is free.
This site is served over HTTPS. Access to enquiry mailboxes and order records is limited to the staff who need it, protected by two-factor authentication, and reviewed when someone leaves. We keep no card data and no identity documents on our systems. Paper documents are stored at our Shenzhen office with restricted access.
No system is perfectly secure. If a breach occurs that is likely to put your rights at risk, we will notify you and the relevant authority without undue delay, as the applicable law requires.
This is a business-to-business website selling wholesale equipment. It is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.
Pages here link to WhatsApp, our Alibaba store, LinkedIn and YouTube. Once you leave hkatbingo.com, the privacy policy of that platform applies. We are not responsible for how those services handle your data.
We update this page when our process changes — for example if we add a payment gateway or an analytics tool. The date at the top always shows the current version. If a change materially affects you, we will also mention it in the next email we send to existing customers, or post a notice on the home page.
Questions about this policy, or a request about your data, go to:
If you are not satisfied with our answer, you may complain to the data protection authority in the country where you live or work. We would rather resolve it with you first, so please write to us before escalating.