Privacy & Cookie Policy
Effective 2026-09-28 (updated: inquiry-form technical data, optional email updates, Cloudflare Turnstile). This policy explains what YANSE COS collects when you use www.yansecos.com, why, and the choices you have.
1 · Who we are
YANSE COS — Guangzhou Yanse Cosmetics Co., Ltd. and Fujian Yanse Cosmetics Co., Ltd. (the "data controllers"). Contact: alex@yansecos.com.
2 · What we collect
Inquiry data you submit via our forms — name, company, work email, country, product of interest, your message and any files you attach. With each inquiry our form also sends technical context so we know how you found us: the page you inquired from and the page you entered on, the referring site, campaign tags and ad-click identifiers in the link you followed, device type, browser language and time zone. Only if you accept cookies, your browser also remembers (for up to 90 days) the date and source of your first visit, how many visits you made and the ad click that brought you, and the inquiry includes your Google Analytics visitor ID. Usage data — anonymous analytics (pages viewed, device, referrer) collected via cookies only after you accept. Spam protection may use Cloudflare Turnstile.
3 · How we use it
To respond to your inquiry, prepare quotes and samples, measure which channels bring genuine inquiries, and improve this site. If — and only if — you tick the optional box on the form, we also send occasional product-launch and trend emails; every email has an unsubscribe link. Legal basis: your consent and our legitimate interest in responding to B2B sourcing requests. We do not use your data for automated decision-making.
4 · Cookies & analytics
Necessary cookies keep the site working. We use Google Consent Mode v2 with all analytics and advertising consent denied by default. The Google tag (Google Analytics 4 and Google Ads measurement) is loaded on page load, but while consent is denied it does not set analytics or advertising cookies; Google may receive cookieless signals that it uses for aggregated, modelled measurement. When an inquiry is accepted by our form provider, the inquiry event sent to Google can include: the form name, product of interest, whether you visited before, the country you typed, campaign tags (source, medium, campaign, content), the landing page, and a random inquiry reference number (used to avoid counting the same inquiry twice). It does not include your name, company, email or message text. Analytics and advertising cookies are used only after you click "Accept". If you decline, consent stays denied. When you submit an inquiry and have accepted cookies, a one-way hash (SHA-256) of your email may be shared with Google Ads to measure the conversion; the inquiry itself, including your email, is sent to our form provider and to us so we can reply. You can decline with no loss of functionality.
5 · Sharing
We never sell your data. We share it only with processors that help us operate — our form/email provider, analytics provider and CRM — under data-processing terms, and where legally required. New records in our own attribution log (hosted on Cloudflare) store only the random inquiry reference, channel and campaign tags, product category, pages, device type, approximate country and any ad-click identifier — not your name, company, email or message — and expire after 400 days. Expired records are removed on subsequent log access. Older attribution records remain private and follow our existing retention policy.
6 · International transfers
Your inquiry is processed in China and by our service providers. Where required, transfers rely on appropriate safeguards (e.g. standard contractual clauses).
7 · Retention
We keep inquiry data only as long as needed to handle your request and our ongoing business relationship, then delete or anonymize it.
8 · Your rights
Subject to your local law (incl. GDPR / UK GDPR / CCPA), you may request access, correction, deletion, restriction or portability of your data, object to processing, or withdraw consent. CCPA: we do not sell or "share" personal information. To exercise any right, email alex@yansecos.com.
9 · Security
We use reasonable technical and organizational measures to protect your data. No method of transmission is 100% secure.
10 · Updates
We may update this policy; the effective date above will change. Material changes will be highlighted on this page.
This page is a general template and not legal advice. Have it reviewed by qualified counsel before relying on it for EU/US compliance.