Privacy Policy

HBK Steel Structure Co., Ltd. ("HBK", "we", "us", or "our"), headquartered in Xuzhou, Jiangsu, China, is committed to protecting the privacy and personal data of all individuals who interact with our website, services, and business operations. This Privacy Policy explains how we collect, use, store, share, and protect your personal information in connection with our steel space frame structure EPC contracting services and related business activities.

By accessing our website or engaging with our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our website and services.

1. Who We Are

HBK is a B2B international steel structure space frame trading and EPC contracting company. We serve overseas project contractors, project owners, and design institutes across Southeast Asia, Africa, the Middle East, Central Asia, Europe, and North America. Our services include overall project design, manufacturing, transportation, and construction/installation of long-span steel space frame roofing projects.

Our design, production, and installation capabilities are certified by Bureau Veritas (BV). We are the data controller responsible for the personal information collected through our website and business communications.

2. Information We Collect

We collect personal information only to the extent necessary to provide our services and maintain business relationships. The categories of information we may collect include:

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• + Business Inquiries & Quotations: To respond to project inquiries, prepare technical proposals, and provide free design proposals based on your requirements.
• + Contract Execution: To fulfill EPC contracting obligations including design, manufacturing, logistics, and on-site installation coordination.
• + Project Tracking & Communication: To provide complete project tracking from initiation through final commissioning and to maintain ongoing client communications.
• + Customer Relationship Management: To maintain our business relationship, manage repeat orders, and provide after-sales support.
• + Marketing & Business Development: To send relevant product updates, case studies, and project showcases that may be of interest to you, where permitted by applicable law.
• + Website Improvement: To analyze website usage patterns and improve the functionality, content, and user experience of our website.
• + Legal Compliance: To comply with applicable laws, regulations, export control requirements, and contractual obligations.

4. Legal Basis for Processing

Where applicable under data protection laws (including GDPR for contacts in the European Economic Area), our legal bases for processing personal data are:

5. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

• + Project Subcontractors & Partners: With trusted logistics providers, installation teams, engineering subcontractors, or design partners who are involved in delivering your project, bound by confidentiality obligations.
• + Certification Bodies: With Bureau Veritas (BV) or other relevant certification and inspection bodies as required for quality assurance and compliance verification.
• + Service Providers: With IT service providers, CRM platforms, and website hosting providers who process data on our behalf under strict data processing agreements.
• + Legal & Regulatory Authorities: When required by law, court order, or governmental authority, including customs and export control authorities in China and destination countries.
• + Business Transfers: In connection with any merger, acquisition, or sale of business assets, where personal data may be transferred as part of the business, subject to equivalent privacy protections.

6. International Data Transfers

As an internationally operating company headquartered in China, your personal information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

When transferring personal data internationally, we implement appropriate safeguards, which may include:

• + Standard contractual clauses approved by relevant data protection authorities
• + Contractual protections with our international business partners and subcontractors
• + Compliance with China's Personal Information Protection Law (PIPL) requirements for cross-border data transfers

7. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website performance. The types of cookies we use include:

You can manage your cookie preferences through your browser settings or our cookie consent tool. Please note that disabling certain cookies may affect the functionality of our website.

8. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including:

• + Active Business Relationships: For the duration of our business relationship and as long as reasonably necessary for follow-up opportunities.
• + Contractual Records: Project contracts, technical documentation, and correspondence are retained for a minimum of 10 years to comply with Chinese commercial law and international trade requirements.
• + Marketing Contacts: Until you withdraw consent or opt out of communications.
• + Website Analytics Data: Typically retained for up to 26 months in aggregated or anonymized form.

When personal data is no longer required, we securely delete or anonymize it in accordance with our internal data management procedures.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• + SSL/TLS encryption for data transmitted via our website
• + Access controls limiting data access to authorized personnel on a need-to-know basis
• + Regular security assessments and staff training on data protection practices
• + Confidentiality obligations imposed on all employees and third-party service providers with access to personal data

While we take all reasonable steps to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to addressing any security incidents promptly.

10. Your Rights

Depending on your country of residence and applicable data protection law, you may have the following rights regarding your personal information:

To exercise any of these rights, please contact us using the details provided in Section 12. We will respond to your request within the timeframe required by applicable law (typically within 30 days). We may need to verify your identity before processing your request.

11. Third-Party Links & Platforms

Our website and communications may contain links to third-party platforms including Alibaba, LinkedIn, Facebook, Made-in-China, and other business directories. These platforms operate under their own privacy policies, and we are not responsible for their data practices. We encourage you to review the privacy policies of any third-party platforms you access.

When you communicate with us via WhatsApp or other third-party messaging platforms, those communications are also subject to the privacy policies of those platforms.

12. Children's Privacy

Our website and services are directed exclusively at business professionals and organizations. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete such information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or data processing activities. When we make material changes, we will:

• + Update the "Effective Date" at the top of this policy
• + Post the updated policy on our website
• + Notify active clients and contacts of significant changes where required by law

Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.