1. Who we are
Yiwu Bespokey Stationery Company, trading as Bespokey Stationery ("Bespokey", "we", "us", or "our"), is responsible for the personal information described in this policy.
Address: Liuqing Street, Liuqing Seventh District, Unit 1, Room 408
Yiwu City, Zhejiang Province 322000
China
Email: info@bespokeystationery.com
Tel: +86 177 0579 4753
2. Information collected through the inquiry form
When you submit an inquiry, we collect the following information that you enter:
- Required: name, company name, email address, product type, estimated quantity, and custom requirements.
- Optional: phone or WhatsApp number.
Our form also uses a hidden anti-spam field and the time taken to complete the form. The application uses your IP address or proxy-provided client address, and the request origin when available, to protect the form from abuse.
Please do not submit passwords, payment-card details, government identification numbers, health information, or other sensitive personal information through the inquiry form.
3. How the inquiry form is processed
When you select “Send Inquiry”, your entries are sent to our website application hosted on Hostinger's Node.js Web App service. The application validates the submission and applies anti-spam controls. When the production mail service is configured and available, the application sends the inquiry by SMTP through Zoho to info@bespokeystationery.com.
The application does not persist inquiry contents, access logs, or API logs in a separate website database, file store, or CRM. Its form rate-limit records are held only in application-process memory, and it does not log successful inquiry contents. When successfully delivered, an inquiry is available in our receiving Zoho Mail user mailbox, where our ordinary website-inquiry retention policy applies.
4. Why we use this information
| Purpose | Information used | Basis where applicable |
|---|---|---|
| Respond to your inquiry and prepare a quotation, sample, or requested next steps | Inquiry form information and any later correspondence you choose to provide | Steps requested before a contract and our legitimate interests in responding to genuine business inquiries |
| Protect the inquiry form, prevent spam, and diagnose service issues | Technical submission information, including IP-related information, origin when available, hidden anti-spam field, and submit timing | Our legitimate interests in operating a secure and reliable website |
| Manage an order or business relationship, if one is established | Information needed for the relevant order, delivery, payment, or correspondence | Performance of a contract, compliance with legal obligations, and legitimate interests where applicable |
We do not provide a newsletter subscription and do not proactively send marketing emails through this website. We do not make solely automated decisions that produce legal or similarly significant effects.
5. Hosting, email, cookies, and analytics
We use Hostinger's Node.js Web App service to host and operate the website. The current hosting server location shown in Hostinger is Asia (Singapore), and the backup location shown is India (Mumbai). Zoho SMTP transmits inquiry emails to us. These providers process information only as needed to provide their hosting or email services to us.
Hostinger CDN is currently not enabled, and the website project does not configure its own CDN. The website code does not use cookies, local storage, session storage, or IndexedDB. It does not enable Google Analytics, Google Tag Manager, Meta Pixel, advertising or remarketing tracking, session replay, chat widgets, third-party iframes or embedded media, or third-party CAPTCHA services.
In a Chrome Incognito first-visit test of the current production website, the cookie list for this website was empty and the homepage response did not include a Set-Cookie header. Together with the code review, this means no cookies or browser storage were found in the current production configuration or this homepage test. This is not a guarantee that Hostinger will never set cookies in other circumstances. We will repeat this check if we enable a CDN, WAF, analytics, third-party component, or another feature that may use cookies.
The current website does not use a configurable site-level web application firewall (WAF). Hostinger continues to provide its standard infrastructure security protections, such as platform-level firewall, malware scanning, and server-security modules.
Hostinger's platform may process necessary request metadata, such as IP address, request, user-agent or device information, country, response size, and response time. Hostinger's current public information and hPanel do not provide or confirm a formal underlying retention period for platform, access or request, analytics, runtime, or error logs. The time ranges visible in hPanel are query and display ranges only, not a retention commitment.
6. When we share information
We do not sell personal information. We do not share personal information with third parties for cross-context behavioural advertising or other advertising purposes.
We share inquiry information with Hostinger to host and operate the website. If the inquiry mail service is configured and an inquiry is sent, Zoho processes that inquiry to transmit the email. If you ask us to prepare a quotation, sample, or order, we may also share only the information needed with relevant production, material, sampling, inspection, logistics, payment, or professional-service providers. We may also disclose information where required by law or needed to protect legal rights or safety.
No BCC recipient is configured in the current production website application, and the application has no code-level automatic-forwarding mechanism. Our receiving mailbox is a Zoho Mail user mailbox. The reviewed production settings show no account-level automatic forwarding, no forwarding action in the visible inbound filters, no Zoho Mail groups, no organisation-level custom email routing, no incoming or outgoing gateway, and no Zoho Mail journaling. No automatic copying, forwarding, or routing of inquiry emails to another mailbox or third-party archive was found through those mechanisms.
7. International processing
We are a China-based B2B manufacturer. This English-language website presents our products and manufacturing capabilities and enables commercial inquiries from international business customers, including customers and prospective customers in Europe, the United Kingdom, North America, and other markets. The website does not offer online ordering, payment, or a shopping cart, and does not currently provide country-specific pages, local pricing, local tax terms, local delivery commitments, local warehouses, or local contact details. We currently have no office, branch, employee, warehouse, registered company, fixed place of business, agent, or representative organisation in the EU/EEA or the United Kingdom.
Information submitted through the website may be processed in China and by the service providers identified in this policy. Hostinger currently shows the website application server location as Asia (Singapore) and its backup location as India (Mumbai); this does not by itself establish that inquiry contents are backed up in Mumbai or determine every location used by Hostinger. Zoho SMTP and Zoho Mail process inquiry emails, but Zoho's current account data-centre and processing locations have not yet been confirmed. Where applicable law requires it, we will use an available lawful transfer mechanism and appropriate safeguards.
The applicability of particular privacy laws to a specific business activity depends on the relevant facts and applicable law. We will review this policy if we introduce country-specific pages, advertising, local payment, local delivery, or other market-specific features that may change our data-processing activities.
8. Retention and security
We generally retain ordinary website inquiry information and related correspondence for up to 24 months from the date of the inquiry where it does not develop into an ongoing business relationship. This supports responding to inquiries, B2B quotations and project follow-up, samples and custom requirements, potential cooperation, necessary follow-up communications, and a reasonable record of customer communications. After that period, we generally delete or appropriately clear ordinary inquiries that have not developed into an ongoing business relationship, order, contract, or other record that needs to be retained.
If an inquiry results in a quotation project, sample project, customer relationship, purchase order, contract, transaction, payment or financial record, after-sales matter, complaint, dispute, or other ongoing business matter, relevant information may be retained for longer where reasonably necessary for business, contractual, accounting, tax, audit, legal, or compliance purposes. The website application itself does not persist inquiry contents or successful-inquiry logs; this retention policy applies principally to inquiry emails and related business records after delivery to our receiving mailbox.
Zoho Mail provides limited recovery mechanisms for deleted emails. The available recovery range and period depend on the deletion method, account settings, and Zoho's current service policies. This technical recovery capability is separate from our 24-month ordinary website-inquiry business retention policy. Hostinger does not currently publish or confirm the formal underlying retention period for its platform logs.
We use reasonable administrative, technical, and organisational measures designed to protect personal information. No internet transmission or email system is completely secure.
9. Your privacy rights and contact
Depending on where you live and subject to applicable law, you may have rights to request access to, correction of, deletion of, restriction of, or information about our use of your personal information. You may also object to certain processing or withdraw consent where processing relies on consent.
To make a privacy request, email info@bespokeystationery.com with the subject “Privacy request”. We may request proportionate information to verify your identity and authority.
10. External links and updates
The website links to third-party services such as email, WhatsApp, and social media. Their own privacy terms apply after you use those links. We may update this policy when our services, providers, or privacy practices change. The current version and effective date will be posted on this page.