Privacy Policy & Data Governance

Welcome to Gate Opener Factory / HEIXIONG Gate Automation ("we," "our," or "us"). We are a manufacturer, engineering solutions provider, and international distributor of automatic gate motors (sliding, swing, underground), commercial barrier gates, remote controllers, safety sensors, and smart perimeter security systems.

Headquartered at Building 7, Dahe Industrial Zone, Guanhu Street, Longhua District, Shenzhen, Guangdong Province, China, we provide perimeter automation equipment to homeowners, commercial developers, industrial plant operators, and B2B global importers worldwide.

This Privacy Policy outlines the types of information we collect when you visit our website, submit requests for quotations (RFQs), download CAD diagrams and technical manuals, purchase gate hardware, or communicate with our engineering and sales support staff. We are committed to ethical data stewardship, transparent processing, and adherence to global data privacy regulations, including the General Data Protection Regulation (GDPR – EU 2016/679), the UK GDPR and Data Protection Act 2018, the California Consumer Privacy Act (CCPA) as amended by the CPRA, and international export and commercial data governance standards.

Our Core Privacy Guarantee: We never sell, rent, or trade your contact details, commercial project drawings, or business inquiries to third-party data brokers or marketing lists.

Depending on how you engage with our digital platform, customer portal, or engineering team, we collect several categories of information to facilitate commercial transactions and technical support:

• Personal & Business Contact Details: Full legal name, business email address, company/organization name, professional role/title, telephone number, WhatsApp contact number, country, and city.
• Project & Technical Specifications: Gate classification (sliding, swing, barrier, underground), physical gate dimensions, gate weight estimates, duty cycle requirements (residential vs. heavy industrial), power configurations (AC 110V/220V, DC 24V, solar kits), and attached architectural/wiring drawings submitted with quotation requests.
• Commercial Transaction & Invoicing Data: Corporate tax/VAT registration numbers, delivery and billing addresses, chosen Incoterms (FOB, CIF, EXW, DDP), proforma invoices, order history, and payment confirmation details.
• Automated Device & Browsing Telemetry: Internet Protocol (IP) address, approximate geographic location, browser type and version, operating system, referrer URL, pages viewed, download timestamps (e.g. manual downloads), and user journey metrics.
• Customer Support & Correspondence Records: Transcripts of WhatsApp inquiries, technical support tickets, email discussions, feedback notes, and warranty claim records.

We process your data strictly for legitimate commercial, operational, and technical purposes:

• Engineering Quotations & Customization: Evaluating your gate requirements, calculating appropriate motor wattage/torque ratings, preparing detailed price quotes, and recommending suitable access accessories.
• Order Fulfillment & Global Shipping: Processing purchase orders, arranging manufacturing scheduling, coordinating with international freight carriers, preparing customs export documentation, and sending real-time tracking numbers.
• Technical Support & Manual Distribution: Providing access to product datasheets, CE compliance certificates, wiring schematics, and troubleshooting instructions.
• Warranty Management & After-Sales Service: Tracking serial numbers, validating warranty periods, processing replacement part dispatches, and providing firmware/software update notifications.
• Security & Platform Performance: Detecting and mitigating cybersecurity threats, preventing fraudulent bulk inquiry submissions, and optimizing website loading speeds globally.
• B2B Communications: Delivering product updates, service notices, trade expo invitations (such as Canton Fair or Security Essen), and technical newsletters. You can opt out at any time.

Under international data protection regulations (including Article 6 of the EU GDPR), our processing of personal information is grounded in the following lawful bases:

• Contractual Necessity (Art. 6(1)(b) GDPR): Processing is required to respond to your pre-contractual RFQ inquiries, execute sales agreements, manufacture custom products, and deliver purchased gate automation systems.
• Legitimate Business Interests (Art. 6(1)(f) GDPR): Processing necessary for securing our IT networks, maintaining business-to-business customer relationships, enhancing factory product reliability, and preventing commercial fraud.
• Legal & Regulatory Obligations (Art. 6(1)(c) GDPR): Fulfilling statutory tax accounting, international trade compliance, export customs filings, and lawful governmental regulatory reporting.
• Explicit Consent (Art. 6(1)(a) GDPR): Where you have explicitly opted into non-essential cookies, technical marketing bulletins, or voluntary customer satisfaction surveys. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Our website uses essential and performance cookies to deliver a fast, localized browsing experience. Cookies are small text files stored on your device that allow our servers to recognize your session.

Types of Cookies We Use

• Essential Cookies: Required for core security, session management, CSRF protection, and page navigation. These cannot be disabled.
• Preference Cookies: Remember your preferred language (e.g., English, Spanish, French, Arabic, Portuguese) and regional preferences.
• Performance & Analytics Cookies: Collect aggregated, anonymous statistics regarding catalog visits, download frequency of spec sheets, and server response times to help us optimize system reliability.

How We Obtain and Manage Cookie Consent

For visitors in the EU, UK, and other regions that require it, non-essential cookies (preference, performance, and analytics) are only set after you give consent through our cookie consent banner. You can accept all, reject all non-essential cookies, or set your preferences by category. You can change or withdraw your choices at any time.

You may also manage or disable cookies through your browser preferences (Chrome, Edge, Safari, Firefox). Disabling certain cookies may affect the language selector or download portal features.

"Do Not Track" and Global Privacy Control (GPC)

Some browsers offer a "Do Not Track" (DNT) setting or transmit a Global Privacy Control (GPC) signal. Where required by applicable law (including the CCPA/CPRA), we treat a valid GPC signal as a request to opt out of the sale or sharing of personal information. We do not sell personal information; where technically detected, GPC signals are honored for opt-out of targeted sharing.

We treat your information with high confidentiality. We do not sell or monetize personal or business information. We only share information with trusted third parties under strict confidentiality and data protection agreements in these specific contexts:

• International Freight & Logistics Carriers: We disclose destination address, consignee contact name, and phone number to freight forwarders and couriers (e.g., DHL, FedEx, UPS, ocean shipping lines) solely to transport and clear your orders.
• Authorized Regional Dealers & Technical Installers: If you request on-site surveys or local installation assistance in supported countries, we may connect you with our authorized local distributors.
• Cloud Infrastructure & Security Vendors: We utilize enterprise cloud hosting providers, database clusters, and CDN caching networks (Bunny CDN) operating under strict data security protocols.
• Statutory Legal Requirements: When mandatory under applicable domestic or international trade laws, customs audits, subpoenas, or official court orders.

Because Gate Opener Factory operates manufacturing facilities in Shenzhen, China, and exports gate automation systems worldwide, your information may be processed and stored outside your home country.

When transferring data across international boundaries, we implement appropriate safeguards in compliance with GDPR Chapter V and global cross-border data transfer laws. These safeguards include Standard Contractual Clauses (SCCs), end-to-end data encryption in transit, strict administrative access controls, and regular partner security audits.

We deploy industry-standard technical, operational, and physical measures to safeguard your personal and business data against unauthorized access, destruction, loss, or alteration:

• Encryption in Transit & at Rest: All web communications, quotation form submissions, and database interactions use TLS/SSL encryption protocols.
• Role-Based Access Control (RBAC): Access to customer data is compartmentalized and accessible only by authorized sales engineers and compliance staff with Multi-Factor Authentication (MFA).
• Physical Security: Our corporate premises and server data centers maintain 24/7 CCTV surveillance, controlled access, and fire suppression systems.
• Periodic Vulnerability Assessments: Continuous vulnerability scanning and automated server patch management to defend against emerging cyber threats.

We retain your personal and business data only for as long as necessary to fulfill the operational, commercial, and legal obligations described in this Privacy Policy:

• Commercial Transaction & Invoicing Records: Retained for 5 to 7 years in compliance with international commercial trade laws, tax filings, and customs accounting requirements.
• Technical Quotations & Inquiries: Retained for 3 years from your last date of interaction to ensure seamless future support, spare part identification, and reordering history.
• Customer Support Tickets & WhatsApp Inquiries: Retained for 2 years following ticket resolution and subsequently deleted or fully anonymized.
• Web Server Analytics Logs: Retained in anonymized format for a maximum period of 12 months.

Depending on your country or region of residence, you possess specific statutory rights regarding how your personal information is stored and processed:

• Right of Access (Data Subject Access Request): You have the right to request confirmation of whether we process your data and to receive a copy of that data.
• Right to Rectification: You can request correction of any outdated, incorrect, or incomplete personal or business details.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal information where there are no overriding legal or statutory requirements to retain it.
• Right to Restrict or Object to Processing: You have the right to restrict our processing of your personal data or object to processing based on legitimate interests or direct marketing.
• Right to Data Portability: You can request the transfer of your provided data to yourself or another service provider in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.
• California Consumer Rights (CCPA / CPRA): California residents have the right to know what categories of personal information are collected, request deletion, correct inaccurate information, opt out of any sale/sharing of personal data (we do not sell data), limit use of sensitive personal information, and receive non-discriminatory service for exercising these rights.

To submit a request, please contact us at openbearrudi@gmail.com. We will verify your identity and respond within the timeframe required by applicable law (within 30 days under GDPR; within 45 days under CCPA/CPRA, extendable where permitted), free of charge.

Right to Lodge a Complaint

If you are located in the EU, UK, or another region with a data protection authority, you have the right to lodge a complaint with your local supervisory authority if you believe our processing of your personal data infringes applicable law. We ask that you contact us first so we can try to resolve your concern directly.

Our website, gate automation catalog, B2B quotation services, and industrial products are strictly designed for commercial enterprises, property developers, security professionals, and adult consumers aged 18 and older.

We do not knowingly solicit or collect personal information from individuals under the age of 18 (or under 16 in the European Union). If we discover that personal data from a minor has been collected without verified parental consent, we take immediate action to permanently delete such information from our database.

If you have questions, feedback, or data privacy requests, please contact our Data Governance & Compliance Office:

• Data Controller: Gate Opener Factory Gate Automation / HEIXIONG Gate Automation
• Factory & Corporate Address: Building 7, Dahe Industrial Zone, Guanhu Street, Longhua District, Shenzhen, Guangdong Province, China
• Privacy & Compliance Email: openbearrudi@gmail.com
• Direct Hotline & WhatsApp: +86 135 5471 9243
• Operating Hours: Monday – Saturday, 09:00 – 18:00 (China Standard Time / GMT+8)
• Data Governance Contact: Reachable directly at openbearrudi@gmail.com

We may update this Privacy Policy from time to time to accommodate changes in our automation product offerings, technological infrastructure, or international privacy legislation. The updated revision date and version number will be reflected at the top of this document. Material changes will be communicated through a notice on this page.