1. Introduction

ContainerHomeWorld ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://containerhomeworld.com (the "Website") or use our services.

This policy complies with the EU General Data Protection Regulation (GDPR) 2016/679 and applicable data protection laws. By using our Website, you consent to the data practices described in this policy.

2. Personal Data We Collect

We collect the following categories of personal data when you interact with our Website:

Identity & Contact Data: Your name, company name, email address, phone number, WhatsApp number, and country of residence — provided when you fill out our quotation or contact forms.
Project Information: Details about your project, including project type, preferences, requirements, and any additional information you choose to share in your message.
Technical Data: IP address, browser type and version, time zone setting, operating system, and device information — collected automatically when you browse our Website.
Communication Data: Records of your interactions with our chat service, email correspondence, and form submissions.

3. How We Collect Your Data

We collect personal data through the following methods:

Direct Interactions: When you voluntarily complete our quotation form, contact form, or communicate with us via email, chat, or phone.
Automated Technologies: Through cookies, server logs, and analytics tools when you browse our Website. See Section 10 for details on cookies.
Third-Party Services: We use Google Tag Manager and analytics services that may collect anonymized usage data. These services operate under their own privacy policies.

4. How We Use Your Data

We use your personal data for the following purposes:

To respond to your inquiries and provide price quotations for our products.
To process and fulfill your requests for information about our container homes and modular solutions.
To communicate with you about your projects, orders, and after-sales support.
To improve our Website, products, and customer service experience.
To comply with legal obligations and enforce our terms of service.

5. Legal Basis for Processing (GDPR)

Under the GDPR, we rely on the following legal bases for processing your personal data:

Consent: By submitting our forms, you give explicit consent for us to process your data for the purposes stated at the point of collection.
Legitimate Interest: We process technical data to maintain Website security, prevent fraud, and improve our services — this is in our legitimate business interest and does not override your rights.
Legal Obligation: We may process data to comply with applicable laws, tax regulations, or lawful requests from public authorities.

6. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We may share data only in these limited circumstances:

Service Providers: We use trusted third-party services to operate our business — including notification services (Telegram, DingTalk) for form alerts, and Cloudflare for hosting. These providers process data on our behalf under strict confidentiality agreements.
Legal Compliance: We may disclose data if required by law, court order, or governmental regulation, or to protect our legal rights.
Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred as part of that transaction. You will be notified before any such transfer.

Our Website is hosted on Cloudflare's global infrastructure. Data may be processed in data centers worldwide, including outside the European Economic Area (EEA), under Cloudflare's standard contractual clauses and data processing agreements that ensure adequate protection.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Inquiry and quotation data is typically retained for 24 months after your last interaction, unless you request earlier deletion. Technical logs and analytics data are retained for a maximum of 26 months.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include SSL/TLS encryption for data in transit, secure server infrastructure provided by Cloudflare, and access controls limiting data access to authorized personnel only. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights Under GDPR

If you are located in the European Union or European Economic Area, you have the following rights regarding your personal data:

Right of Access: You may request a copy of the personal data we hold about you, free of charge.
Right to Rectification: You may request that we correct any inaccurate or incomplete personal data.
Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.
Right to Restriction: You may request that we restrict the processing of your data in certain circumstances.
Right to Data Portability: You may request that we transfer your data to another organization, or directly to you, in a structured, commonly used, machine-readable format.
Right to Object: You may object to the processing of your personal data for direct marketing purposes or where we rely on legitimate interest as the legal basis.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
Right to Complain: You have the right to lodge a complaint with your local data protection supervisory authority if you believe your data protection rights have been violated.

10. Cookies & Tracking Technologies

Our Website uses cookies and similar tracking technologies to enhance your browsing experience and analyze Website traffic.

We use the following types of cookies:

Essential Cookies: Required for the Website to function properly, including language preferences (i18n cookie) and session management.
Analytics Cookies: Google Tag Manager and related analytics services help us understand how visitors interact with our Website. These cookies collect anonymized data about pages visited, time spent, and navigation patterns.
Managing Cookies: You can control and delete cookies through your browser settings. Disabling certain cookies may affect Website functionality. For detailed guidance, visit your browser's help documentation or www.allaboutcookies.org.

11. International Data Transfers

Our Website is operated from China and hosted globally via Cloudflare. If you are accessing the Website from outside your country of residence, your data may be transferred to, stored, and processed in countries that may have different data protection laws than your country. We ensure that any such transfers comply with applicable data protection laws through appropriate safeguards, including standard contractual clauses and adequacy decisions where applicable.

12. Children's Privacy

Our Website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately and we will take steps to delete such information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. The updated version will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy periodically. Significant changes will be communicated via a notice on our Website.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: [email protected]
Contact Form: Contact Us Page

15. Supervisory Authority

If you believe that our processing of your personal data infringes GDPR requirements, you have the right to lodge a complaint with the supervisory authority in your EU member state of residence, place of work, or place of the alleged infringement.