1. What we collect
| Category | Examples | When |
|---|---|---|
| Account | Email, company, country, password hash | Register. No phone required. |
| Order / RFQ | Addresses, Incoterms, qty, payment status | Quote, RFQ, checkout |
| Design files | Gerber, BOM, CPL, drawings, wire receipts | Upload slots · signed URL |
| Technical | IP, device, logs needed to run the service | Visit / login |
不收集不强制手机号；6 周不做营销画像。Newsletter 可选，默认勾选也必须能退订。
2. How we use it
- Create accounts, send verification mail, reset passwords manually.
- Price PCB quotes, process RFQs, issue quotations / PI, take payment, fulfil orders.
- Share files with partner factories only as needed to build the boards.
- Fraud / price-guard / security logs. Transactional email (quotes, PI, shipping).
邮件基础设施SPF / DKIM / DMARC 配错则报价信进垃圾箱，等于白做。隐私政策写「我们会发交易邮件」必须和实际发信域名一致。
3. Legal basis (GDPR)
- Contract — quoting, producing, shipping, invoicing.
- Legitimate interests — site security, SLA operations, limited logs.
- Consent — non-essential cookies, newsletter.
- Legal obligation — tax / export records where applicable.
4. Who we share with
- Partner factories (production files), under confidentiality.
- Payment processor (card). T/T handled on our banking details; we store wire-proof files.
- Carriers (name, address, phone for delivery).
- Email / file-storage processors. No sale of personal data. No case-study use without consent.
国际传输数据在中国处理、客户在欧是默认场景。条款须写清传输机制（SCCs 等）由律师填 {{legal.transferMechanism}}。不要假装数据只留在客户本国。
5. Retention
- Account: until deletion request + legal hold.
- Orders / PI / quotes: as required for tax and dispute window {{legal.retainYears}}.
- Design files: kept for production and agreed archive, then deleted or anonymized. Matches How We Quote H08 “retain or destroy after the project”.
6. Your rights
Access, rectification, export (machine-readable), deletion, restriction, objection, withdraw consent, complaint to a supervisory authority.
How to exercise: email {{legal.privacyEmail}} from the registered address, or contact form. We will not build a self-serve GDPR console in 6 weeks — inbox process is enough if SLA is documented.
导出 / 删除是 P0可以人工做，但不能没有入口。删除设计文件要走签名存储的真实删除，不要只在库里打 deleted 标记而对象存储仍公开。
7. Cookies
| Type | Purpose | Consent |
|---|---|---|
| Strictly necessary | Session, CSRF, login, load balancing | No — required |
| Preferences | Cookie banner choice | No |
| Analytics | Optional (Plausible / GA). Off until accept | Yes |
| Marketing | 6 周默认不做广告像素 | Yes · default off |
横幅欧盟访客首次进入公共页底部出现（见页脚上方示意）。Accept all / Necessary only。选择写入 cookie，刷新仍在。不要用「继续浏览即同意」糊弄 GDPR。
8. Security of design files
- Encryption at rest; time-limited signed download URLs.
- Customer A cannot open Customer B files. Admin downloads are audited later; 6-week: signed URL still required.
- We do not lower this standard if the customer skips NDA.
Children: this service is for business users, not for under-16s.
Contact: {{legal.privacyEmail}} · same NAP as contact.html and footer.