Privacy Policy

This policy explains how we process personal data when you visit lidream.com, request an order or a quote, contact us or subscribe to our newsletter. It is based on the EU General Data Protection Regulation (GDPR).

1. Controller

• Controller: Hainan New Li-Dream Technology Co., Ltd.
• Address: Available on request — contact [email protected]
• Email: [email protected]
• Tel / WeChat: +86 15674824355

EU representative (Art. 27 GDPR): Available on request — contact [email protected]

You can contact us or our EU representative about any question concerning your personal data.

2. Data we process and why

2.1 Visiting the website

When you open a page, your browser sends technical data: IP address, date and time, the page requested, the referring page, browser type and operating system. This is necessary to deliver the website, keep it secure and detect misuse. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

Our website is delivered through Cloudflare's network (see section 3). Our own web server and application do not keep your IP address in plain text: where we need it to limit abuse, for example to count repeated form submissions, we store only a salted hash of it. How long we keep server and security logs is stated in section 5.

2.2 Request Order (shopping cart)

When you send a Request Order, we process: name, email address, phone number (optional), country, delivery address, your message, the products and quantities in your cart, the website language, the page you sent the request from, the order number and the date and time. When we quote and fulfil your order we add the quote, payment status and carrier tracking number.

Purpose: to prepare a quote, conclude and perform the contract, arrange shipping and customs clearance, and handle withdrawals, returns and warranty claims. Legal basis: steps taken at your request before a contract and performance of the contract (Art. 6(1)(b) GDPR). Where a law of the EU or of a member state requires us to keep invoices and order records, the legal basis is Art. 6(1)(c) GDPR.

2.3 Quote requests (B2B, OEM and Power Battery)

For quote requests we process: company name, your name, email address, phone number, country, the products or specifications you ask about, quantities and your message. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps at your request) and, for business contacts, our legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR).

2.4 Contact form, email, WhatsApp and WeChat

If you contact us, we process the data you give us (usually name, email address, phone number and message) to answer you. Legal basis: Art. 6(1)(b) GDPR if your message concerns a contract or order, otherwise Art. 6(1)(f) GDPR (our interest in answering enquiries).

If you choose to contact us via WhatsApp or WeChat, the messages are also processed by the provider of that service under its own privacy policy. We only use these channels if you contact us there first or ask us to.

2.5 Newsletter

If you subscribe to our newsletter, we process your email address and preferred language. We use the double opt-in procedure: you receive an email with a confirmation link, and you are only added to the list after you click it. We record the time of sign-up and confirmation and a salted hash of your IP address to be able to prove your consent. Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every newsletter or by email; this does not affect the lawfulness of processing before the withdrawal.

2.6 Spam protection (Cloudflare Turnstile)

Our forms are protected by Cloudflare Turnstile, which checks whether a form is being sent by a person or an automated program. For this check, technical data from your browser and device is processed by Cloudflare. Legal basis: our legitimate interest in protecting our forms against spam and abuse (Art. 6(1)(f) GDPR).

2.7 Payment

We do not take payments on the website. You pay our invoice by PayPal or bank transfer. If you pay by PayPal, PayPal processes your payment data as an independent controller under its own privacy statement. For bank transfers, your bank details are processed by the banks involved. We receive the payment confirmation (amount, date, payer name and transaction reference). Legal basis: Art. 6(1)(b) GDPR.

2.8 Shipping and customs

To deliver your order, we pass your name, delivery address, phone number and email address, together with the shipment contents and value, to the freight forwarder, carrier and customs broker handling the shipment. They need this data for delivery notifications and for the customs declarations in the destination country. Legal basis: Art. 6(1)(b) GDPR and, for customs declarations, Art. 6(1)(c) GDPR. The forwarder and carrier used for your order depend on the destination and the size of the shipment; they are named in your quote or shipping confirmation.

3. Service providers (processors) and other recipients

We use the following service providers, who process data on our behalf and according to our instructions under a data processing agreement (Art. 28 GDPR):

Contracting Alibaba Cloud entity: Available on request — contact [email protected]

Within our company, your order and quote data is accessible only to the staff who handle orders, quotes and customer service.

We do not sell your personal data and do not pass it on for advertising purposes.

4. Transfers to countries outside the EU

China. We are established in China. When you send us a Request Order, a quote request or a message, you give your data directly to us as the controller, and our team in China handles your request, quote, payment and shipping. The GDPR applies to this processing because we offer our products to customers in the EU (Art. 3(2)(a) GDPR). Some of this data is stored for us by our service providers in the EU, in particular Alibaba Cloud in Frankfurt (website, order database and backups) and Brevo (emails), see section 3. There is no EU adequacy decision for China. When our EU service providers make this data available to us in China, the transfer is based on the European Commission's Standard Contractual Clauses, module 4 (processor to controller) (Art. 46(2)(c) GDPR). In individual cases, a transfer can also be based on its being necessary for the performance of your contract or for steps taken at your request before a contract (Art. 49(1)(b) GDPR). Standard Contractual Clauses in place with each of these providers: Available on request — contact [email protected]

USA. Cloudflare and, depending on the provider chosen, our email hosting provider may process data in the USA. For providers certified under the EU–US Data Privacy Framework, transfers are based on the European Commission's adequacy decision of 10 July 2023; you can check a provider's certification in the Data Privacy Framework List at dataprivacyframework.gov. Otherwise, transfers are based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Safeguard used by each provider: Available on request — contact [email protected]

Copies of the safeguards. You can obtain a copy of the Standard Contractual Clauses we rely on by emailing [email protected].

5. How long we keep data

• Tax records (invoices, orders, quotes we issued and payment records): for the periods required by the tax and commercial laws of the EU member states in which we are registered for VAT, counted from the end of the calendar year. Legal basis: Art. 6(1)(c) GDPR. Member states and retention periods: Available on request — contact [email protected]
• Accounting records under Chinese law: as a company established in China, we keep our accounting vouchers and books, which include order and payment data, for the period required by the Chinese rules on accounting archives. The legal basis is our legitimate interest in complying with the legal obligations that apply to us in China (Art. 6(1)(f) GDPR). Retention period: Available on request — contact [email protected]
• Other data of completed orders (for example delivery details and correspondence that are not part of the tax or accounting records): Available on request — contact [email protected]
• Order requests that did not lead to a contract, quote requests and contact messages: 2 years after our last contact, unless they lead to a contract.
• Newsletter: until you unsubscribe. We then keep only the record of your consent and of your unsubscription, to be able to prove both.
• Security data (salted IP hashes in rate-limiting and server logs): Available on request — contact [email protected]
• Database backups: backups are overwritten on a rolling basis after 30 days.

6. Your rights

You have the right to:

• access the personal data we hold about you (Art. 15 GDPR);
• have incorrect data corrected (Art. 16 GDPR);
• have your data erased (Art. 17 GDPR) or its processing restricted (Art. 18 GDPR), unless we must keep it by law;
• receive the data you gave us in a common machine-readable format (Art. 20 GDPR);
• object at any time to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation, and to the use of your data for direct marketing (Art. 21 GDPR);
• withdraw your consent at any time with effect for the future (Art. 7(3) GDPR).

To exercise your rights, email [email protected]. We may ask you to confirm your identity.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work or where you believe the infringement took place (Art. 77 GDPR). A list of the national authorities is published by the European Data Protection Board at edpb.europa.eu.

7. Is providing data required?

You do not have to provide personal data to browse the website. To receive a quote and to buy from us, we need your name, email address, country and delivery address; without them we cannot prepare a quote or deliver.

8. No automated decisions

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. Quotes are prepared by our staff.

9. Cookies and local storage

Information about cookies and similar technologies on this website is in our Cookie Policy.

10. Security

The website is served only over encrypted connections (HTTPS). Access to order data is limited to authorised staff and protected by passwords.

11. Changes to this policy

We update this policy when our services or the law change. The date of the latest version is shown at the top of this page.

This English version is the binding version. Translations are provided for convenience.