Privacy Notice

Information we handle

The consultation form handles your name, phone number, project type, project city, budget range, intended start time, preferred contact method and project brief. Email, WeChat ID and project area are optional. We also record your consent status, submission time and consultation reference so that we can handle the enquiry.

Please do not include unrelated identity document numbers, financial account details, health information or other unnecessary sensitive information in free-text fields.

Session identifier and rate limiting

The browser stores a first-party random UUID in sessionStorage for the current session. It supports session-level rate limiting and abuse prevention, does not read hardware attributes, and is not a device fingerprint used for cross-site tracking.

The server derives security and rate-limit identifiers from the request IP address and the session identifier to detect duplicate submissions, limit abnormal traffic and protect the form. These identifiers are not used for advertising profiles.

Why we use the information

We use the information only to receive and respond to design enquiries, assign an appropriate adviser, maintain submission references, protect the website and interfaces, investigate faults, and meet applicable compliance duties. We will not use enquiry information for unrelated marketing without separate notice and any required permission.

Sharing and service providers

We do not arbitrarily publish or sell consultation information. Access is limited to authorised team members and service providers bound to support the enquiry. If WeCom notifications are enabled in production, they must go only to authorised internal recipients and contain the minimum information needed to handle the enquiry.

Before production launch, the operator must confirm the actual providers, processing locations and data flows. If an actual arrangement involves a cross-border transfer of personal information, the operator will complete the required assessment, give additional notice and obtain any consent required by applicable law.

Retention and security

Information is retained only for as long as needed to follow up the enquiry, protect the service and meet applicable legal duties. The operator must confirm and publish the concrete retention rules before production launch, so this notice does not invent a fixed period. Information will then be deleted or anonymised as applicable, unless law requires otherwise.

We use reasonable controls such as access restriction, transport protection, field encryption or masking, rate limiting and audit records to reduce the risk of unauthorised access, disclosure, alteration or loss. No internet transmission can be guaranteed absolutely secure.

Your rights and contact

Subject to applicable law, you may request access to, a copy of, correction, completion or deletion of your personal information, withdraw consent, or ask for an explanation of the processing rules. Withdrawal does not affect processing carried out on the basis of consent before withdrawal.

Email the address below and include enough information to locate the consultation record. We may verify your identity before acting on a request in order to protect your information.

Privacy request email: shanghai@csid-design.com

Personal Information Protection Law of the PRC (National People's Congress)