Privacy Policy
Last updated: 6 November 2026
1. Who we are
This website, https://bomaterial.com, is operated by Shenzhen Bomaterial Landscaping Co., Ltd. (Chinese legal name: 深圳博美景观材料有限公司; “BOMATERIAL”, “we”, “us”), a company incorporated in China on 9 August 2023.
- Contact for privacy questions: info@bomaterial.com
- Contact address: No. 2 Jucui Road, Jinsha Community, Kengzi Subdistrict, Pingshan District, Shenzhen, Guangdong, China.
- Data Protection Officer: BOMATERIAL has not appointed a Data Protection Officer.
2. What this policy covers
This policy explains how we handle personal data collected through bomaterial.com, mainly when you send us an inquiry, contact us by email or WhatsApp, or browse the site. BOMATERIAL supplies solar lighting products to business customers (importers, distributors, retailers and project buyers); the site is not directed at children.
3. Personal data we collect
a) Inquiry form. When you send a quote request, the form collects your name, company (optional), email address, phone number (optional), the product model you are interested in (optional) and your message. We also record the page the form was sent from and the date and time of the inquiry. The inquiry is saved in the website’s database and a notification email is sent to our company mailbox.
b) Source information attached to an inquiry (only if you allow “Marketing attribution” cookies). If you allow marketing attribution, our own cookies remember how you first reached the site and how you most recently reached it. When you send an inquiry, this is stored with it: traffic source, medium, campaign, search term and ad content values from the link you used, an advertising click identifier (such as a Google Ads gclid) if present, the landing page, the referring website and the channel type (for example paid search, organic search, direct, referral, social, email). If you do not allow these cookies, your inquiry still works and its source is recorded as unknown.
c) Email, WhatsApp and phone. If you contact us at info@bomaterial.com or through the WhatsApp link, we receive the information you choose to send. WhatsApp messages are handled by WhatsApp under its own terms and privacy policy.
d) Analytics data (only if you allow “Analytics” cookies). Google Analytics 4 collects usage data such as pages viewed, approximate location, device and browser information, referrer, and events such as clicks on WhatsApp or email links and inquiry submissions. It uses cookies or identifiers such as _ga and _ga_<container ID>. We have not intentionally configured Google Analytics to receive the contents of your inquiry (name, email address, phone number or message).
e) Advertising measurement data (only if you allow “Advertising” cookies). If you allow Advertising cookies, we load Google’s advertising tags. Google Ads uses identifiers such as _gcl_au, _gcl_aw and _gac_* cookies to measure which ads lead to visits and inquiries, and Google may receive advertising signals such as ad-user-data and ad-personalisation consent signals, technical information about your browser and device, and information about the page and the conversion event (for example that an inquiry was saved). Depending on the settings of the Google Ads account and on Google’s own features, Google may process additional data that is provided to it on pages where its tags are loaded, which could include information you enter on a website form; Google handles such data under its own terms and privacy policy. When a genuine inquiry has been saved, our website tells Google Ads that a conversion occurred; the one-time confirmation code used for this contains no personal data.
f) Technical and security data. To limit spam, the inquiry form uses a hidden honeypot field and a limit on submissions per hour. For the rate limit the server temporarily keeps a one-way hash of your IP address (not the IP address itself) for up to one hour. After you send an inquiry, the site issues a random one-time confirmation code (no personal data) that is valid for 10 minutes and can be used once, so that advertising and analytics conversions are only recorded for a genuinely saved inquiry. Our hosting provider keeps standard server logs (such as IP address, browser type and requested URL) for the period set by the provider. Our hosting provider’s website tools also load a small script from Hostinger’s domain cdn-reach.hostinger.com on our pages, so your browser connects to Hostinger when a page loads and Hostinger receives your IP address and browser information.
g) Your cookie choice. We store your cookie preferences in a cookie named bm_consent (see the Cookie Policy).
h) Email log. The site keeps a log of the notification emails it sends (including the inquiry text they contain) and deletes it automatically after 14 days.
We do not knowingly collect special-category personal data. Please do not include sensitive information in your message.
4. Why we use your data and our legal basis
Where the EU or UK General Data Protection Regulation applies to our processing, we rely on the following legal bases.
| Purpose | Data | Legal basis |
|---|---|---|
| Reply to your inquiry, prepare quotations, handle samples and orders, ongoing business communication | Inquiry data, email/WhatsApp content | Where you contact us as an individual, taking steps at your request before entering into a contract. Where you contact us on behalf of a business, our legitimate interest in answering business enquiries and running our business. |
| Keeping the site secure and limiting spam | Technical and security data | Our legitimate interest in keeping the website and inquiry form secure and free of spam. |
| Keeping records and handling legal claims | Inquiry data and correspondence | Our legitimate interest in establishing, exercising or defending legal claims, and compliance with legal obligations where they apply. |
| Understanding how the site is used and improving it | Analytics data | Your consent (cookie choice) |
| Measuring and improving our advertising | Advertising measurement data | Your consent (cookie choice) |
| Recording where an inquiry came from | Source information | Your consent (cookie choice) |
| Remembering your cookie choice | bm_consent cookie | This cookie is strictly necessary to remember your choice; our legitimate interest in respecting your cookie preferences. |
You can withdraw consent at any time through Cookie Preferences in the footer. As a business practice we do not sell our customers’ personal data, customer lists or inquiry records.
5. Who we share data with (service providers)
- Hostinger – website hosting, database, server infrastructure and automated website backups. Inquiries are stored in the site’s database, so backups of the website can contain them.
- Enterprise email service (Alibaba Cloud / Aliyun) – inquiry notifications are sent to info@bomaterial.com through the SMTP server smtp.qiye.aliyun.com.
- Google – Google Analytics 4 and Google Ads, only after you allow the relevant cookie category.
- WhatsApp (Meta) – only if you choose to message us on WhatsApp.
- Professional advisers and authorities where we are legally required to disclose data.
Site fonts are served from our own domain.
6. International transfers
BOMATERIAL is based in China, so information you send us is received and processed in China. Our website is hosted by Hostinger on servers in Indonesia, and Hostinger stores automated website backups in Singapore. Inquiry notifications are delivered to our mailbox through an enterprise email service provided by Alibaba Cloud. If you allow Analytics or Advertising cookies, Google may process data in the United States and other countries where Google or its service providers operate. If you would like more information about how your data is transferred, contact us at info@bomaterial.com.
7. How long we keep data
- Inquiries and related correspondence: our target is to keep them for no longer than 24 months after we receive them. We intend to review inquiries four times a year, in the first working week of January, April, July and October. Deletion is carried out by us after each review; nothing is deleted automatically. We may keep an inquiry longer where there is a justified reason, such as an ongoing business relationship, an open quotation or order, a legal claim, or a legal obligation.
- Website backups: Hostinger takes automated weekly backups of the website and its database and stores them in Singapore. These backups can contain inquiries. The provider replaces backups on its own schedule, so an inquiry we have deleted may remain in a backup copy for a limited period. We have not set our own backup retention period.
- Notification email log: 14 days.
- Rate-limit hash: up to 1 hour.
- One-time confirmation code: 10 minutes, or until used.
- Cookie preference (bm_consent): about 6 months (182 days), then we ask again.
- Attribution cookies (bm_ft, bm_lt): up to 90 days, only if you allow them.
- Google Analytics 4: event-level data is kept for 2 months and user-level data for 14 months.
- Google Ads data: according to Google’s retention rules for Google Ads.
- Server logs: for the period set by our hosting provider.
8. Your rights
Depending on where you live (including the European Economic Area and the United Kingdom), you may have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected and, in some cases, have your data deleted;
- restrict our processing or object to processing based on our legitimate interests;
- receive your data in a portable format where the law provides for it;
- withdraw consent at any time, without affecting processing that took place before withdrawal;
- complain to a data protection authority, for example the authority in the country where you live or work (in Spain, the Agencia Española de Protección de Datos).
To exercise a right, email info@bomaterial.com. We may ask you to confirm your identity. We will reply within one month of receiving your request; if a request is complex or we receive many requests, we may extend this by up to two further months and will tell you.
9. Cookies and withdrawing consent
We use cookies as described in the Cookie Policy. You can change or withdraw your choice at any time via Cookie Preferences in the footer of every page. Withdrawing consent stops the related tracking on later pages and removes the related cookies we control; it does not affect inquiries you have already sent.
10. Security
The site is served over HTTPS, administration requires a login, and the inquiry form has spam controls. No method of transmission over the internet is completely secure.
11. Changes to this policy
We will post changes on this page and update the date at the top.
12. Contact
Shenzhen Bomaterial Landscaping Co., Ltd. (深圳博美景观材料有限公司) – info@bomaterial.com – No. 2 Jucui Road, Jinsha Community, Kengzi Subdistrict, Pingshan District, Shenzhen, Guangdong, China.