Privacy Policy

Who we are

Shanghai Safeway Co., Ltd ("Safeway", "we", "us") is a manufacturer of luggage, bags and accessories, headquartered in Shanghai, China, serving brand clients across Europe and the Americas. We are the data controller responsible for the personal information described in this policy.

This policy applies to shsafeway.com and any subdomain of it. It does not apply to third-party websites we may link to, or to information we process under a separate customer or supplier agreement.

Information we collect

Information you give us

When you submit the inquiry form on this site, or contact us by email, we collect the information you choose to provide:

• Identification and contact details — your name, company name, business email address and country or region.
• Commercial details — the product category you are interested in and any message you write, such as estimated order quantity, target market or customization requirements.
• Correspondence — records of our email exchanges, quotations, samples and orders.

Information collected automatically

Like most websites, our hosting and content-delivery provider records standard technical data when a page is requested: IP address, browser and device type, referring page, the pages visited and the date and time of access. This data is used in aggregate to keep the site available and secure; we do not use it to build individual profiles.

Voluntary information

You are free to decide what to send us. However, if you do not provide a name, company and a valid email address, we will not be able to respond to your inquiry.

How we use your information

We use the information you provide only for the purposes below:

• to respond to your inquiry and correspond with you about products, specifications and pricing;
• to prepare quotations, samples, product development and production plans you request;
• to maintain our business relationship and provide after-sales support;
• to comply with legal, accounting, customs and export-control obligations;
• to protect the website against spam, abuse and fraudulent submissions.

We do not use your information for automated decision-making or profiling, and we do not send you marketing newsletters unless you have explicitly asked to receive them. If you have subscribed to our updates, you can unsubscribe at any time.

Legal bases for processing

Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases:

Where we rely on consent, you may withdraw it at any time by writing to us. Withdrawal does not affect the lawfulness of processing carried out before you withdrew.

Cookies and local storage

This website sets no advertising, tracking or analytics cookies, and contains no advertising pixels or social-media trackers. We do not build behavioural profiles of visitors.

The site uses your browser's local storage for one narrow, functional purpose: if your inquiry cannot be transmitted immediately (for example, a temporary network failure), a copy is kept in your own browser so that nothing is lost, and it is offered back to you as a pre-filled email. This data stays on your device, is never read by us automatically, and can be removed at any time by clearing your browser data.

Sharing and third parties

We keep your information inside our company and share it only with the service providers needed to run this website and our business, each of which is bound to use it solely on our instructions:

We may also disclose information where we are legally required to do so, or where it is necessary to establish, exercise or defend legal claims. Should our business ever be reorganised or transferred, information may be transferred as part of that transaction, subject to this policy.

We never sell personal information.

International data transfers

We are based in China, and our service providers may process data in other countries, including the European Economic Area, the United States and the Asia-Pacific region. When personal information from the EEA, the UK or Switzerland is transferred outside those areas, we put appropriate safeguards in place — for example, standard contractual clauses approved by the European Commission, together with technical measures such as encryption in transit.

You may ask us for more information about the safeguards that apply to a particular transfer.

How long we keep your information

• Inquiries that do not lead to a business relationship — kept for up to 24 months from our last contact, then deleted.
• Customer, quotation and order records — kept for the duration of the business relationship and afterwards only as long as required for accounting, tax, customs and warranty purposes.
• Website technical logs — kept by our hosting provider for a short operational period and then deleted or aggregated.

Your privacy rights

Depending on where you live, you may have some or all of the following rights. We honour these requests for all visitors, wherever you are based:

• Access — to receive a copy of the personal information we hold about you.
• Rectification — to have inaccurate or incomplete information corrected.
• Erasure — to ask us to delete your information where there is no overriding legal reason for us to keep it.
• Restriction and objection — to restrict or object to certain processing, including processing based on our legitimate interests.
• Portability — to receive information you gave us in a structured, commonly used, machine-readable format.
• Withdrawal of consent — to withdraw consent at any time, without affecting the lawfulness of earlier processing.
• Non-discrimination — we will not refuse to do business with you or offer you different terms because you exercised a privacy right.

California residents

Under the CCPA/CPRA you have the right to know what categories of personal information we collect and how we use it, to request deletion or correction, and to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined by California law, so there is nothing for you to opt out of.

How to make a request

Email us at info@shsafeway.com with the subject line "Privacy Request". We will acknowledge your request promptly and respond within the time limit set by applicable law — normally 30 days. To protect your privacy we may ask you to confirm your identity or your company's domain before we release any information.

If you believe we have not handled your information correctly, you have the right to lodge a complaint with your local data-protection supervisory authority. We would appreciate the chance to resolve the issue with you first.

How we protect your information

We use HTTPS encryption for all traffic on this website, restrict access to inquiry data to the colleagues who need it to serve you, and keep our systems and service providers under regular review. We also follow internal procedures for handling personal information in line with applicable data-protection requirements.

No method of transmission over the internet is completely secure. If a breach ever affects your information, we will notify you and the relevant authorities as required by law.

Children's privacy

This website is intended for business professionals and is not directed at children. We do not knowingly collect personal information from children under 16. If you believe a child has sent us information, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time, for example if we change a service provider or if the law changes. The revised version will always be published on this page with a new "last updated" date. Where the changes are material, we will make that clear on the website or, where appropriate and if we hold your contact details, notify you directly.