Effective Date: 01 July 2026]
Website: wellyay.com
1. Who We Are
This website wellyay.com is operated by Well Yay Construction Material Co., Ltd.
Registered Address: Lishui Town, Nanhai Dist., Foshan City, GD Prov., China
Privacy & Business Contact Email: info@wellyay.com
We are the Data Controller of all personal information collected from global visitors to this website. When processing user data, we comply with applicable data protection regulations including the EU GDPR, California CCPA, Australian Privacy Act and the Personal Information Protection Law of China, applicable based on the visitor’s residential region.
2. Information We Collect & How We Use It
2.1 Comment Data
When you submit a comment on our site, we collect the information you enter in the comment form, your IP address, and browser user agent string to detect and filter spam.
A hashed anonymized version of your email may be shared with Gravatar to display your profile avatar. You can view Gravatar’s privacy policy at https://automattic.com/privacy/. Your avatar will be publicly visible alongside your comment once approved.
2.2 Enquiry & Form Data (Core Business Collection)
When you fill out contact forms, quotation forms, wholesale cooperation forms or project consultation forms, we collect your full name, company name, phone number, email, project address, customization demands and business needs.
We use this data solely for:
- Providing custom cabinet design quotations and scheme communication
- Following up on production, order, logistics and after-sales service
- Sending product updates only if you actively opt into marketing emails
We will never use your personal data for irrelevant commercial promotion without your explicit consent.
2.3 Uploaded Media Files
If you upload images to our website, please avoid files with embedded EXIF GPS location data, as any site visitor can download and extract location metadata from images. We only store your uploaded project photos with your voluntary approval.
2.4 Automatic Browsing Data (Cookies & Tracking)
We collect anonymous browsing records via cookies and third-party analytics tools, including page access records, device type, language preferences and access time. See Clause 4 for full cookie rules.
3. Data Sharing With Third Parties
We only share your personal data with authorized service providers who sign strict data protection agreements, and will never sell, rent or trade your personal identifiable information to unrelated third parties. Authorized processors include:
- Anti-spam service providers: used to filter malicious comment submissions.
- Website operation tools: hosting providers, cloud storage, cross-border email delivery systems.
- Analytics tools: such as Google Analytics, for anonymous website traffic statistics.
- Legal mandatory disclosure: We may disclose your data when required by local laws, court orders or official regulatory authorities.
If you apply for an account password reset, your IP address will be attached to the reset notification email sent to your mailbox.
4. Cookie Policy
Cookies are small text files stored on your browser to optimize your website experience.
4.1 Functional Cookies
- Comment cookies: Save your name, email and website for 1 year to avoid repeated filling of comment information.
- Login cookies: Temporary session cookies to verify browser cookie support (deleted after closing the browser); login credentials are stored for 48 hours, preference cookies for 12 months. If you select “Remember Me”, login validity extends to 14 days; all login cookies are cleared after logout.
- Editing cookies: A temporary cookie that records edited page IDs, expires after 24 hours, and contains no personal data.
4.2 Classification & Consent
- Necessary Cookies: Required for basic website operation, cannot be disabled.
- Analytics Cookies: Collect anonymous browsing data; you may refuse via our cookie consent pop-up or browser settings.
- Marketing Cookies: Used for product case recommendation, only activated with your active opt-in.
You can disable non-essential cookies at any time by adjusting your browser privacy settings.
5. Embedded Third-Party Content
Pages on this website may contain embedded external content such as videos, images and articles from other platforms.
Embedded third-party content operates in accordance with the privacy rules of the source website. Third-party platforms may collect your data, deploy independent cookies and track your interactive behavior if you hold an account on their platforms. We are not responsible for the data processing rules of external websites.
6. Data Storage & Retention Period
- Comment data: Comments and metadata are stored permanently to automatically identify your follow-up comments without manual moderation.
- Registered user profile data: Permanently stored, and you can edit/delete your personal information at any time (username cannot be modified).
- Enquiry form data from unregistered visitors: Retained for a maximum of 5 years for business communication, quotation follow-up and after-sales support, then securely erased.
- Anonymous browsing statistics: Stored in anonymized form for up to 24 months, and cannot be associated with specific individuals.
7. Cross-Border Data Transmission
Our third-party service providers may store data on servers located in different countries/regions around the world. We adopt standardized encryption and data protection clauses to ensure cross-border data storage meets equivalent privacy protection standards required by local laws in each visitor’s region. Visitor comment data may be processed by overseas automated spam detection services.
8. Your Legal Data Rights
Depending on your local regional laws, you may hold the following rights:
- Right of Access: Request an exported file containing all personal data we store about you.
- Right of Rectification: Request correction of inaccurate or incomplete personal information.
- Right of Erasure: Request full deletion of your personal data, excluding data we must retain for legal, tax and security compliance purposes.
- Right to Restrict Processing: Request temporary suspension of your data processing under legal grounds.
- Right to Object to Marketing: Unsubscribe from all marketing emails free of charge at any time.
To submit a data rights request, send an email to info@wellyay.com with valid identity verification materials. We will respond to all valid requests within 30 working days.
9. Direct Marketing Emails
We only send cabinet product cases, new design updates and wholesale cooperation information to you if you actively tick the marketing consent box on forms. Every marketing email contains a one-click unsubscribe link. You may withdraw your marketing consent at any time without additional fees or penalties.
10. Data Security Measures
We adopt SSL full-site encryption, restricted staff data access permissions and regular system security audits to protect your personal data from unauthorized access, leakage, tampering and loss. In the event of a serious personal data breach that poses risks to users, we will notify affected visitors and relevant regulatory authorities in a timely manner in accordance with local laws.
11. Privacy Complaint Channels
If you have doubts or complaints about our processing of your personal information, please send an email to info@wellyay.com. We will complete the investigation and send a formal reply within 30 working days.
If you are not satisfied with our handling result, you have the right to submit a complaint to the local data protection authority in your residential country/region.
12. Revision of This Policy
We reserve the right to update this Privacy Policy according to business adjustments and legal changes. The revised version will be published on this page with an updated effective date. Continued use of this website after the revision takes effect constitutes your acceptance of the updated policy.