Privacy Policy
Website: http://hndcarbonwheels.com/
Introduction
Welcome to the HND Carbon Wheels website. This Privacy Policy outlines how Hengningda (Xiamen Hengningda) (“we,” “us,” or “our”) collects, uses, stores, and protects your personal information when you visit our website at http://hndcarbonwheels.com/, use our online store, or interact with our services. We are committed to safeguarding the privacy of our global cycling enthusiasts and professional racers who rely on our high-end carbon fiber wheelsets.
This policy applies to all users of our website, including those who browse our products, create accounts, make purchases, subscribe to our newsletter, or contact us through our inquiry forms. By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services.
We operate in compliance with major international data protection regulations, including the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA) and the California Consumer Privacy Act (CCPA) for residents of California. This document explains your rights under these laws and how we fulfill our obligations as a data controller.
Our business involves the research, development, and hand-built manufacturing of premium carbon fiber bicycle wheelsets. As a global e-commerce platform, we handle sensitive transactional and personal data to deliver our products to cycling communities worldwide. We believe in transparency and want you to feel confident about how your information is managed.
This Privacy Policy was last updated in October 2026. We may revise this policy periodically to reflect changes in our practices or applicable laws. We encourage you to review this page regularly to stay informed about our privacy practices.
Information We Collect
Personal Information
When you interact with HND Carbon Wheels, we may collect personally identifiable information that you voluntarily provide. This includes your full name, email address, phone number, and shipping/billing addresses when you create an account, place an order, or submit a contact form. We also collect this information when you subscribe to our newsletter to receive promotional offers and product updates.
Transaction and Payment Information
To process your orders through our WooCommerce-powered online store, we collect transaction details such as order history, product preferences, and purchase amounts. Payment processing is handled entirely by PayPal, including their sandbox testing environment. We do not store your full credit card numbers or banking details on our servers; instead, we receive tokenized payment confirmation and transaction records necessary to fulfill your orders.
Non-Personal and Technical Information
We automatically collect certain technical information when you visit our website, including your IP address, browser type, operating system, referring URLs, pages viewed, and time spent on our site. This data is collected through cookies and similar tracking technologies to understand user behavior, improve website performance, and deliver relevant content about carbon wheel technology and purchasing guides.
Communications and Preferences
When you use our contact form, we collect the name, email, phone number, and message content you provide. For newsletter subscribers, we track open rates, click-through rates, and engagement metrics to improve our marketing communications. You may also provide preferences regarding product categories or cycling disciplines when interacting with our blog content or promotional materials.
How We Use Your Information
Order Fulfillment and Customer Service
We use your personal and transaction information to process payments, fulfill orders, arrange shipping, and provide order confirmations and tracking updates. This is essential for delivering our hand-built carbon wheelsets to customers worldwide. We also use this information to respond to customer inquiries, handle returns or warranty claims, and provide technical support for our products.
Marketing and Communications
With your consent, we use your email address and preferences to send newsletters, promotional offers, new product announcements, and cycling-related content. You can unsubscribe from these communications at any time using the link provided in each email. We also use aggregated data to analyze marketing campaign effectiveness and improve our outreach to the global cycling community.
Website Improvement and Analytics
We analyze non-personal and aggregated data to understand how users navigate our website, which products generate the most interest, and how we can improve the user experience. This includes optimizing our blog content about carbon wheel technology, streamlining the checkout process, and ensuring our website functions properly across different devices and browsers.
Legal Compliance and Security
We process your information as necessary to comply with applicable legal obligations, resolve disputes, enforce our terms of service, and protect against fraudulent or unauthorized activity. This includes verifying transactions, preventing chargebacks, and maintaining records required by tax and customs regulations for international shipments.
Legal Basis for Processing (GDPR)
Contractual Necessity
For users in the EEA, we process your personal information when it is necessary to perform our contract with you, such as fulfilling your order, processing payments, and providing customer support. Without this information, we would be unable to complete your purchase or deliver our carbon wheelsets.
Consent
We rely on your explicit consent for processing activities such as sending marketing emails, placing non-essential cookies on your device, and using certain analytics tools. You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before withdrawal.
Legitimate Interests
We process certain data based on our legitimate business interests, such as improving our website, preventing fraud, analyzing purchasing trends, and enhancing our product offerings. These interests are balanced against your privacy rights, and we implement appropriate safeguards to protect your information.
Legal Obligations
We process personal information when required to comply with legal obligations, including tax reporting, customs documentation for international shipping, and responding to lawful requests from public authorities. This processing is necessary for compliance with applicable laws in the jurisdictions where we operate.
Cookies and Tracking Technologies
Essential Cookies
We use strictly necessary cookies that are required for the basic functioning of our WooCommerce store, including maintaining your shopping cart session, remembering your login status, and ensuring security features work properly. These cookies cannot be disabled without affecting website functionality.
Analytics Cookies
We use Google Analytics (GA4) to collect anonymized data about how visitors use our website, including page views, session duration, and traffic sources. This helps us understand user behavior and improve our content about carbon wheel technology and purchasing guides. You can opt out of Google Analytics by installing the browser add-on or adjusting your cookie preferences.
Advertising and Marketing Cookies
We use Google Ads and related technologies to deliver relevant advertisements to users who have previously visited our website or shown interest in carbon fiber wheelsets. These cookies track your browsing behavior across websites to build interest profiles and measure campaign effectiveness. You can manage your advertising preferences through Google’s Ads Settings or our cookie consent banner.
Managing Your Cookie Preferences
You can control cookies through your browser settings or our cookie consent management tool. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications when cookies are being placed. Please note that disabling certain cookies may limit your ability to use our online store or access personalized features.
Third-Party Services
WooCommerce and WordPress
Our online store is built on the WooCommerce platform, which handles product catalogs, shopping cart functionality, user accounts, and order management. WooCommerce may collect and process data necessary for e-commerce operations in accordance with their privacy policies. We ensure that our WooCommerce configuration minimizes data collection to only what is necessary for store operations.
PayPal Payment Processing
All payment transactions are processed through PayPal, including their sandbox environment for testing purposes. PayPal acts as an independent data controller for payment processing and collects information necessary to complete transactions, prevent fraud, and comply with financial regulations. We do not have access to your full payment credentials.
Google Services
We utilize Google Analytics (GA4), Google Search Console, and Google Ads to monitor website performance, understand search traffic, and deliver targeted advertising. These services may collect IP addresses, device identifiers, and browsing behavior data. Data may be transferred to and processed in the United States and other countries where Google operates servers.
Social Media Platforms
Our website contains links to Facebook, Twitter, and YouTube. When you click these links or interact with embedded social media content, these platforms may collect information about your visit. We encourage you to review the privacy policies of these third-party platforms to understand their data practices.
Data Sharing and Disclosure
Service Providers
We share your information with trusted third-party service providers who assist us in operating our website, processing payments, fulfilling orders, and delivering marketing communications. These providers include hosting companies, payment processors, email marketing platforms, and shipping carriers. All service providers are contractually obligated to protect your data and use it only for specified purposes.
Legal Requirements
We may disclose your personal information if required by law, regulation, or legal process, or if we believe in good faith that disclosure is necessary to protect our rights, privacy, safety, or property, or to respond to requests from public authorities. This includes compliance with customs regulations for international shipments and tax reporting obligations.
Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information and provide choices regarding your data.
With Your Consent
We may share your information with third parties when you have given us explicit consent to do so. You can withdraw your consent at any time, and we will cease sharing your information for the specified purpose.
Data Security
Technical Safeguards
We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These include SSL/TLS encryption for data in transit, secure server infrastructure, regular security audits, and access controls that limit employee access to personal data on a need-to-know basis.
Organizational Measures
We maintain internal policies and procedures governing data handling, employee training, and incident response. Our staff receives regular training on data protection principles and confidentiality obligations. We conduct periodic reviews of our security practices to identify and address potential vulnerabilities.
Payment Security
All payment transactions are processed through PCI-DSS compliant payment processors (PayPal). We do not store sensitive payment information on our servers. Tokenization and encryption technologies ensure that financial data remains secure throughout the transaction process.
Limitations
Despite our best efforts, no method of transmission over the Internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. We encourage you to use strong passwords and exercise caution when sharing personal information online.
Data Retention
Account and Transaction Data
We retain your account information and transaction records for as long as your account remains active or as needed to provide you with services, fulfill orders, and comply with legal obligations. This typically includes a minimum of seven years for tax and accounting purposes following the completion of a transaction.
Marketing and Communication Data
If you subscribe to our newsletter, we retain your email address and engagement data until you unsubscribe or request deletion. We may retain anonymized or aggregated marketing analytics data indefinitely for business intelligence purposes, provided this data cannot be used to identify you.
Technical and Log Data
Server logs, analytics data, and cookie information are retained for periods appropriate to their purpose, typically ranging from a few months to two years. After these periods, data is either deleted or anonymized to prevent identification.
Deletion Requests
You may request deletion of your personal information at any time, subject to legal retention requirements. We will honor such requests unless we have a legitimate legal basis to retain the data, such as ongoing orders, warranty claims, or regulatory obligations.
Your Rights
Right of Access
You have the right to request confirmation of whether we process your personal information and to obtain a copy of that information. We will provide this information in a commonly used electronic format within one month of receiving your request.
Right to Rectification
You have the right to request correction of inaccurate or incomplete personal information. You can update much of this information directly through your account settings, or you may contact us to request corrections.
Right to Erasure
Under certain circumstances, you have the right to request deletion of your personal information. This includes situations where the data is no longer necessary for the original purpose, you withdraw consent, or you object to processing. We will comply unless we have a legitimate legal basis to retain the data.
Right to Restrict Processing
You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of your data or object to processing. When processing is restricted, we may only store your data and will inform you before lifting the restriction.
Right to Data Portability
You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller. This applies to data you have provided to us and that we process based on consent or contract.
Right to Object
You have the right to object to processing based on legitimate interests or public task, including profiling. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Children’s Privacy
Age Restrictions
Our website and services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete the information.
Verification and Deletion
If we become aware that we have collected personal information from a child under 16 without verified parental consent, we will take steps to delete that information promptly. We encourage parents and guardians to monitor their children’s internet usage and educate them about online privacy.
Parental Guidance
We recommend that parents and guardians supervise their children’s online activities and use parental control tools to manage access to e-commerce websites. Our products are designed for adult cyclists, and we do not market directly to children.
California Privacy Rights (CCPA)
Right to Know
California residents have the right to request disclosure of the categories and specific pieces of personal information we have collected, used, shared, or sold in the preceding 12 months. We will provide this information free of charge upon verified request.
Right to Delete
You have the right to request deletion of personal information we have collected from you, subject to certain exceptions. We will delete your information and direct service providers to do the same unless an exception applies, such as completing a transaction or complying with legal obligations.
Right to Opt-Out of Sale
We do not sell personal information in the traditional sense. However, certain advertising technologies we use may be considered “sales” under CCPA. You have the right to opt out of such sharing. You can exercise this right through our cookie consent banner or by contacting us directly.
Non-Discrimination
We will not discriminate against you for exercising your CCPA rights. This means we will not deny you goods or services, charge different prices, or provide a different level of quality because you exercise your privacy rights.
EU-US Data Transfers
Transfer Mechanisms
As a company based in China with global customers, we may transfer personal information from the EEA, UK, and other jurisdictions to countries that may not have equivalent data protection laws. We implement appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, to ensure adequate protection for transferred data.
Supplementary Measures
In addition to SCCs, we implement technical and organizational measures to protect transferred data, including encryption, access controls, and regular security assessments. We conduct transfer impact assessments to evaluate the legal environment in destination countries and implement additional protections as needed.
Your Rights Regarding Transfers
You have the right to be informed about transfers of your personal information to third countries and the safeguards implemented. You may request a copy of the SCCs or other transfer mechanisms by contacting us. If you believe a transfer violates applicable law, you may lodge a complaint with your supervisory authority.
Ongoing Monitoring
We regularly review our transfer mechanisms and supplementary measures to ensure continued compliance with evolving legal requirements. We will notify you of any material changes to our transfer practices and provide updated information about safeguards.
Do Not Track Signals
Current Practice
Some browsers incorporate “Do Not Track” (DNT) features that signal to websites that you do not wish to be tracked. Currently, there is no uniform standard for recognizing or responding to DNT signals, and regulatory guidance on this topic continues to evolve.
Our Response
At this time, HND Carbon Wheels does not alter its data collection and tracking practices in response to DNT signals. We continue to collect data as described in this Privacy Policy to provide our services, analyze website performance, and deliver relevant content.
Alternative Controls
We encourage you to use the cookie consent management tools available on our website, browser settings, or third-party opt-out tools to control tracking and data collection. These mechanisms provide more granular control over your privacy preferences than DNT signals.
Future Updates
We monitor developments in DNT standards and regulatory guidance. If a universally accepted standard emerges or if applicable law requires us to respond to DNT signals, we will update this Privacy Policy and adjust our practices accordingly.
Changes to This Policy
Update Process
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last Updated” date at the top of this page and, where appropriate, notify you through our website or email.
Material Changes
Material changes include modifications to the types of information we collect, how we use or share information, your rights, or our data retention practices. Non-material changes, such as clarifications or grammatical corrections, may be made without prior notice.
Continued Use
Your continued use of our website after we post changes to this Privacy Policy constitutes your acceptance of those changes. If you do not agree with the updated policy, you should discontinue use of our website and may request deletion of your personal information.
Historical Versions
We may retain previous versions of this Privacy Policy for reference. Upon request, we can provide information about the policy terms that were in effect during specific periods of your interaction with our website.
Contact Us
General Inquiries
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the information below. We aim to respond to all inquiries within 30 days.
- Company Name: Hengningda (Xiamen Hengningda)
- Address:15, Qinxe Road, Maluan Village, Xingbin Street, Jimei District, Xiamen City, Fujian Province, China
- Phone: +86-18259286879
- Email: 18259286879@163.com
Privacy-Specific Requests
For GDPR or CCPA requests, including access, deletion, or opt-out requests, please include “Privacy Request” in your email subject line and provide sufficient information to verify your identity. We may request additional verification to protect against unauthorized access to personal information.
Supervisory Authorities
If you are located in the EEA and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection supervisory authority. Contact information for supervisory authorities is available on the European Data Protection Board website.
Response Timeline
We commit to responding to verified privacy requests within one month of receipt. If your request is complex or voluminous, we may extend this period by an additional two months and will inform you of the extension and reasons within the initial one-month period.