Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

Where required under applicable law, we act as data controller for all personal data collected through this website and our contact forms.

2. What Data We Collect

2.1 Contact Form Data

When you submit an enquiry through our website contact form, we collect:

• First and last name
• Work email address
• Company name
• Area of interest (selected from a dropdown)
• Message content

2.2 Technical & Usage Data

When you visit our website, we may automatically collect:

• IP address (anonymised where applicable)
• Browser type and version
• Device type (mobile, tablet, desktop)
• Pages visited and time spent
• Referring website or source
• Country/region of access

2.3 Cookie Data

We use cookies and similar technologies. Please see our Cookie Policy for full details on what cookies we set, their purpose, and your options.

2.4 Data We Do Not Collect

We do not collect sensitive personal data (special category data under Article 9 GDPR) such as health information, race, religion, biometric data, or political opinions. We do not knowingly collect data from individuals under the age of 16.

3. How We Use Your Data

We use the data we collect for the following purposes:

• Responding to enquiries — to reply to contact form submissions and business enquiries
• Business communication — to follow up on quotes, proposals and project discussions
• Website improvement — to understand how visitors use our site and improve its performance
• Legal compliance — to meet our legal and regulatory obligations
• Security — to detect and prevent fraudulent or malicious activity

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal Basis for Processing

Under the GDPR, we rely on the following legal bases:

• Legitimate interests (Art. 6(1)(f)) — for responding to business enquiries, improving our website, and fraud prevention
• Consent (Art. 6(1)(a)) — for non-essential cookies and analytics, where you have given explicit consent via our cookie banner
• Contract performance (Art. 6(1)(b)) — where processing is necessary to fulfil a contract or take pre-contractual steps at your request
• Legal obligation (Art. 6(1)(c)) — where processing is required to comply with applicable law

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We may share data with trusted third parties only where necessary:

• Email service providers — to deliver email communications
• Website hosting and infrastructure providers — including Cloudflare for CDN and DNS services
• Analytics providers — where you have consented to analytics cookies
• Legal and professional advisors — where required by law or regulation
• Group companies — our parent entity Shanghai ZT Smart Packaging Technology Co., Ltd. may receive data where operationally necessary for B2B enquiries

All third-party processors are bound by data processing agreements and are required to process data only in accordance with our instructions and applicable law.

6. Data Retention

We retain personal data only for as long as necessary for the purposes set out in this policy:

• Contact form enquiries — retained for up to 2 years from last contact, or as required to fulfil a business relationship
• Analytics data — retained for up to 14 months (anonymised aggregates may be retained longer)
• Cookie consent records — retained for 12 months from the date of consent
• Legal and compliance records — retained for the minimum period required by applicable law (typically 5–7 years)

When data is no longer required, it is securely deleted or anonymised.

7. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These include:

• HTTPS/TLS encryption for all data in transit
• Access controls and authentication requirements for internal systems
• Regular security reviews and updates
• Staff training on data protection obligations

No method of transmission over the internet is 100% secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.

8. International Data Transfers

ZTSPT operates globally with offices in Sweden, the United States, and China. Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area (EEA), including China and the United States.

Where such transfers occur, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Binding Corporate Rules or other appropriate mechanisms

You may request information about the specific safeguards in place for any international transfer by contacting us at the details below.

9. Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights under the GDPR:

• Right of access (Art. 15) — to request a copy of the personal data we hold about you
• Right to rectification (Art. 16) — to request correction of inaccurate or incomplete data
• Right to erasure (Art. 17) — to request deletion of your data, subject to legal exceptions
• Right to restrict processing (Art. 18) — to request we limit how we use your data
• Right to data portability (Art. 20) — to receive your data in a structured, machine-readable format
• Right to object (Art. 21) — to object to processing based on legitimate interests
• Right to withdraw consent (Art. 7(3)) — where processing is based on consent, you may withdraw it at any time
• Right to lodge a complaint — with your national supervisory authority (e.g. IMY in Sweden, ICO in the UK)

To exercise any of these rights, please contact us at info@ztspt-international.com. We will respond within 30 days.

10. Cookies

We use cookies and similar tracking technologies on our website. For full details on what cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

Continued use of our website after any changes constitutes your acknowledgement of the updated policy.

12. Contact & Data Protection

For any questions, concerns or requests regarding this Privacy Policy or our data practices, please contact us: