Privacy Policy

Effective date: 29 October 2026

1. Who we are

This website is operated by Drapemill, a family-run finished-curtain manufacturer (“we”, “us”), No. 395 Wenhua Road, Keqiao District, Shaoxing, Zhejiang, China. We are the controller of the personal data described in this policy.

Privacy questions: sales@drapemill.com. We have not appointed an EU or UK representative.

2. What we collect

We only collect personal data that you choose to send us, plus limited technical data needed to protect the inquiry form:

• Inquiry form: your name, work email, company, country or market, WhatsApp/phone number (optional), product interest, quantity (optional), your message, and any files you attach (for example tech packs, drawings or reference photos).
• Security data: your IP address, approximate country derived from it, browser information and the page you sent the form from. Cloudflare Turnstile (our anti-spam check) processes browser and device signals to tell people from bots.
• Direct contact: if you email us or message us on WhatsApp, we receive the details and content you send through those services.

This website does not use advertising, analytics or tracking cookies, so we do not show a cookie banner. We do not ask for sensitive personal data. Please do not include it in your message or attachments.

3. Why we use it (purposes and legal bases)

• To answer your inquiry and prepare quotations, samples and orders — steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)).
• To keep a record of business correspondence and follow up on your inquiry — our legitimate interest in running a B2B export business (Art. 6(1)(f)).
• To protect the form from spam, fraud and abuse — our legitimate interest in keeping the website secure (Art. 6(1)(f)).
• To comply with legal obligations, for example accounting or export rules, where an order follows (Art. 6(1)(c)).

We do not sell your personal data, and we do not use it for automated decision-making or profiling. We will only send you marketing messages if you ask for them, and you can stop them at any time.

4. Who processes it for us

We share your data only with service providers that help us run the website and handle your inquiry:

• Cloudflare, Inc. — website hosting, form processing, Turnstile anti-spam check, a backup copy of form submissions and email delivery.
• Our email provider — Google (Gmail) — stores the inquiry emails we receive and send.
• WhatsApp (Meta) — only if you choose to contact us there.

Our sales staff and, where needed for your order, logistics and inspection partners may see the information required for that task. We may also disclose data where required by law.

5. International transfers

We are based in China, and our service providers may process data in other countries. If you are in the EU/EEA, UK or Switzerland, your data will therefore be transferred outside your country. We transfer the data you send us because it is necessary to answer your request and to take steps toward a contract with you. Where our providers offer contractual safeguards (such as Standard Contractual Clauses), we rely on them.

6. How long we keep it

• The backup copy of each form submission stored with Cloudflare is deleted automatically after about 13 months (400 days).
• Inquiry emails and correspondence: 3 years after our last contact with you, or longer if an order follows and records must be kept by law.
• Spam and blocked submissions are not stored by us.

7. Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data, to restrict or object to how we use it, and to data portability. Where we rely on legitimate interests, you may object at any time. To make a request, email sales@drapemill.com. We will reply within one month. You also have the right to complain to the data protection authority in your country.

8. Security

The website is served over HTTPS only. Form submissions are checked for spam and stored with access limited to our staff who handle inquiries. No method of transmission or storage is completely secure, but we take reasonable steps to protect your data.

9. Changes to this policy

We may update this policy when our services or legal requirements change. The effective date above shows when the current version took effect.