Privacy policy
Last updated 17 September 2026
1. Who we are
Verdigris Garden is a trading name of Xiamen Changying Environmental Technology Co., Ltd. （厦门长楹环境科技有限公司）, a company registered in Xiamen, Fujian Province, People’s Republic of China. We are the data controller for the personal data described in this policy.
For any question about this policy or your personal data, write to privacy@verdigrisgarden.com.
2. What we collect
| When | What |
|---|---|
| You apply for a trade account | Company name, country of registration, VAT / EORI / tax number, company website, contact name and role, email address, categories you buy, estimated annual volume |
| You submit an enquiry | Company name, country, contact name, email, phone, destination port, incoterm, required date, the products and quantities you selected, and any notes you write |
| Any form submission | IP address, browser user-agent, and the time you gave consent — kept as proof of consent and to detect automated abuse |
| You accept analytics cookies | Pages visited, approximate location derived from a truncated IP, device type |
We do not collect payment card details on this website, and we do not knowingly collect data from children.
3. Why we use it, and on what legal basis
- To assess and manage trade accounts — legitimate interests
- We need to verify that an applicant is a genuine trade buyer before showing wholesale pricing. Our legitimate interest is protecting commercially sensitive pricing.
- To respond to your enquiry and quote — steps prior to a contract
- Processing is necessary to take steps at your request before entering into a contract.
- To prevent abuse of our forms — legitimate interests
- Keeping our enquiry channel usable, and protecting pricing from competitors harvesting it.
- Analytics cookies — consent
- Only if you accept. You can decline and the site works exactly the same. You may change your mind at any time by clearing this site’s data in your browser.
4. Who sees it
Your data is seen by our own staff who handle sales and account approval, and by the service providers who run our infrastructure — our website host, our database host, our transactional email provider, and Cloudflare for bot protection. These providers act on our instructions under contract.
We do not sell personal data, and we do not share it for advertising.
5. How long we keep it
| Data | Retention |
|---|---|
| Approved trade accounts | For as long as the account is active, then 24 months |
| Rejected or withdrawn applications | 12 months, so we can explain a decision if you ask |
| Enquiries that did not lead to an order | 24 months |
| Enquiries that led to an order | As required by accounting and customs law in the relevant jurisdictions |
| Consent records (IP, user-agent, timestamp) | Same period as the record they relate to |
6. International transfers
We are based in China, and your data will be accessed and stored there. China has not received an adequacy decision from the European Commission or the UK government. Where we transfer personal data of individuals in the EEA or the UK to China, we rely on the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum where the UK GDPR applies), supported by a transfer impact assessment.
You may request a copy of the safeguards we have in place by writing to the address in section 1.
7. Your rights
If you are in the EEA or the UK, you have the right to access your data, to have it corrected, to have it erased, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you can withdraw that consent at any time — withdrawing it does not affect processing that already happened.
Write to privacy@verdigrisgarden.com and we will respond within one month.
You also have the right to complain to a supervisory authority — in the UK the Information Commissioner’s Office, and in the EEA the authority in your country of residence.
8. Cookies
We set a small number of strictly necessary cookies to keep you signed in and to remember your cookie choice. These do not require consent. Analytics cookies are set only after you accept them, and are off by default.
9. Changes
If we change this policy we will update the date at the top. For material changes affecting how we use data you have already given us, we will tell you directly.