1. Who is responsible
The data controller is Sichuan Wanyoda Technology Co., Ltd. (四川万药达科技有限公司), Chengdu, China — the entity named in the business licence listed in the site footer. Written requests go to [email protected] or to the registered address shown on the contact page.
2. What we collect
Only what an enquiry requires, and only when you submit it:
- Identity and role — name, company, job title
- Contact details — business email, telephone or WhatsApp
- Market and licence — destination country, importer or distribution licence number where you choose to give it
- Message content — the product or territory you are asking about
- Technical data — server logs record IP address, user agent and timestamp for security and abuse prevention
We do not ask for, and do not want, patient data, health records or any special category of personal data. Do not send them through this site.
3. Why we use it, and on what legal basis
- To answer your enquiry and qualify the account — necessary for steps taken at your request prior to entering a contract (GDPR Art. 6(1)(b)); under China's Personal Information Protection Law, processing necessary to conclude or perform a contract to which you are a party (Art. 13(2)).
- To meet export, sanctions-screening and pharmacovigilance obligations — compliance with a legal obligation (Art. 6(1)(c)).
- To keep records of who we appointed and when — our legitimate interest in running a documented channel (Art. 6(1)(f)), balanced against your rights.
We do not use enquiry data for advertising, do not build profiles, and do not run automated decision-making that produces legal effects for you.
4. Cookies
This site sets no advertising, analytics or tracking cookies. It stores no identifiers in localStorage or sessionStorage. Your language choice is encoded in the URL (/ for English, /zh/ for Chinese), not in a cookie.
If analytics or a CRM chat widget is added later, this section will list the cookie names, providers, purposes and retention periods before the script is enabled, and consent will be requested first where the law requires it.
5. Who we share it with
- The manufacturer concerned. Only for the product and market you asked about, and only what is needed to assess availability. We name the manufacturer on every product page, so you always know who that is.
- Service providers — email hosting and CRM, under written data-processing terms, with no independent right to use the data.
- Authorities — where export control, customs, sanctions or pharmacovigilance law requires disclosure.
We do not sell personal data. We do not share it for cross-context behavioural advertising.
6. International transfers
Enquiries reach servers in China and, depending on the destination market, may be shared with the manufacturer in China. Where data originating in the EEA or the UK is transferred, it moves under standard contractual clauses or an equivalent safeguard, and a transfer impact assessment is kept on file.
7. How long we keep it
Qualified enquiries and appointment records: for the term of the relationship plus six years, because export and tender files must remain auditable. Unqualified or abandoned enquiries: 24 months. Server logs: 90 days. Deletion requests are honoured within 30 days unless a legal retention duty overrides them — we will tell you which duty applies.
8. Your rights
You may ask for access, correction, deletion, restriction, portability, or object to processing based on legitimate interest. You may withdraw consent at any time where consent was the basis. Write to [email protected]; we answer within 30 days and do not charge for the first request. You may also complain to a supervisory authority — in the EU, the authority of your habitual residence; in China, the cyberspace administration or the market regulation authority at the level that has jurisdiction.
9. Security
Transport encryption in transit, access limited to the channel team, and regulatory documents released under a mutual NDA with watermarking and recipient logging. No system is perfect: if a breach affects your data we notify the competent authority within 72 hours of becoming aware, and you without undue delay where the risk is high.
10. Changes
The date at the top of this page changes whenever the text does. Material changes are announced on this page for 30 days before they take effect.
隐私、Cookie 与数据使用说明
本页为中文摘要，与上方英文版本具有同等效力；如有歧义，以中文版本为准（适用于中国境内访问者）。
一、责任主体
本网站的数据控制者为万药达（wanyoda），注册地成都，具体主体名称以页脚所列营业执照为准。
二、我们收集什么
仅收集您主动提交的询盘信息：姓名、公司、职务、商务邮箱、电话或 WhatsApp、目标市场与进口/经营许可证号（如您选择填写）、询盘内容；以及服务器日志中的 IP 地址、浏览器标识与访问时间，用于安全防护。我们不收集患者信息、病历或任何敏感个人信息，请勿通过本网站提交此类内容。
三、使用目的与合法性基础
用于回复询盘、完成合作方资质审核、履行出口与药物警戒等法定义务，以及与您订立或履行合同所必需的处理。依据《中华人民共和国个人信息保护法》第十三条，上述情形分别对应「订立、履行合同所必需」「履行法定职责或义务所必需」及「取得个人同意」。
我们不会将询盘信息用于广告推送，不进行用户画像，不实施对您产生法律影响的自动化决策。
四、Cookie
本网站不设置任何广告、统计或追踪 Cookie，也不在本地存储中写入标识符。语言版本通过网址区分（/ 为英文，/zh/ 为中文），不依赖 Cookie。
五、共享与跨境
仅在您所询产品与市场的范围内，向对应生产厂家提供必要信息（每个产品页均标明厂家名称）；向签署数据处理协议的邮件与客户管理系统服务商提供；依出口管制、海关、制裁或药物警戒法律法规向主管部门提供。我们不出售个人信息。涉及个人信息出境的，依法履行告知、取得单独同意、开展个人信息保护影响评估等程序。
六、保存期限
合格询盘与合作档案：合作终止后保存六年，以满足出口与招投标文件的可审计要求；未成立或中止的询盘：24 个月；服务器日志：90 天。删除请求在 30 日内处理，法律另有强制留存规定的除外，并会向您说明具体依据。
七、您的权利
您有权查阅、复制、更正、补充、删除您的个人信息，撤回同意，或要求解释说明处理规则。请致信 [email protected]，我们将在 30 日内答复，首次请求不收费。您也可向有管辖权的网信部门或市场监督管理部门投诉。
八、安全与变更
我们采取传输加密、最小权限访问、监管文件保密与留痕等措施。发生个人信息泄露时，将依法在知悉后 72 小时内告知主管部门，并按风险程度及时告知您。本页内容变更时同步更新页首日期。
Want your enquiry deleted?
One email is enough. Say which address you wrote from and we will confirm removal within 30 days — no form, no account, no justification required.