Privacy Policy

Effective date: 9 October 2026. Last updated: 9 October 2026.

1. Website operator

HC PACKAGING VIETNAM COMPANY LIMITED operates https://www.gxhcpackaging.com/ under the HC Packaging brand. In this policy, “we”, “us” and “our” refer to that company. For privacy questions or requests, contact hc@hcpackagingasia.com.

2. Information we collect

When you request a quote or contact us, we collect the details you provide, such as your name, business email, telephone number, company, website, packaging requirements, artwork links and message. Some fields are optional. We also process related business correspondence.

Access and error logs can contain IP addresses, requested URLs, timestamps, response status and browser information. Security tokens, hashed identifiers and submission records help protect inquiry forms. Where optional advertising measurement is permitted, we process the click and campaign information described below. Please do not submit passwords, payment card details or sensitive personal information in an inquiry.

3. Why we use information

We use inquiry details to assess packaging requirements, respond, prepare quotations and follow up on your request and related business communications. Technical information supports website operation, error investigation and protection against spam and duplicate submissions. Permitted advertising measurement helps us assess whether advertisements lead to new inquiries.

You can submit an inquiry without enabling optional advertising measurement. Turning off measurement does not prevent us from saving and responding to your inquiry.

4. Google Ads measurement

Where permitted and enabled, Google Ads measures newly saved inquiries that pass our website’s screening. This screening is not a salesperson’s assessment of a qualified buyer. Our inquiry conversion code excludes page views, merely opening a form, failed or duplicate submissions and test records.

Google may receive an opaque transaction identifier, advertising click identifiers and technical request information. GCLID, GBRAID, WBRAID and campaign parameters such as UTM source, medium and campaign may be associated with an inquiry. DCLID is disabled in the current configuration.

Our custom conversion payload does not include your name, email, telephone number or inquiry message. This implementation does not enable enhanced conversions, remarketing, advertising personalization or Google Analytics. Automatic form-interaction and user-provided-data collection are configured off for the intended Google tag. Restricted Data Processing applies when measurement is enabled; it does not replace applicable privacy rights or disclosures.

5. Cookies and browser storage

Permitted measurement can use Google cookies _gcl_aw and _gcl_au, normally lasting approximately 90 days, and _gcl_ls local storage containing click information with expiry managed by Google. Our hc_ads_attribution_v1 attribution record is used for up to 90 days; expired data is cleared when the website next checks it. An opaque transaction marker lasts for the browser tab’s session to prevent replay.

The hc_privacy_opt_out cookie lasts up to one year. The local hc_privacy_opt_out_v1 preference remains until removed or site storage is cleared. Necessary website or administrative functions may use additional storage. Your browser settings also let you manage cookies and site storage.

6. Regional restrictions and privacy choices

Optional advertising measurement requires an approved regional policy and the applicable disclosure and choice conditions. Location is not treated as consent. Where required prior consent is absent, or the necessary region cannot be reliably determined, the advertising tag is not loaded.

Use the ordinary Privacy choices link in the footer to turn off optional measurement for this browser. It does not open automatically. We honor Global Privacy Control by disabling this measurement. Opting out clears our attribution record, _gcl_ls and accessible first-party Google advertising measurement cookies.

Removing an opt-out does not grant consent, override Global Privacy Control or remove regional restrictions. The choice applies to this browser and does not erase inquiries or measurements already sent. Clearing storage can remove a remembered choice. Already loaded third-party code in other tabs may still make restricted technical requests; our inquiry conversion code stops sending new conversions when it detects an opt-out.

7. Storage, service providers and processing locations

Alibaba Cloud infrastructure in the United States (Virginia) hosts the website and its WordPress inquiry database. Your inquiry is saved in the website’s Inquiry Reader and forwarded to our business email. Authorized business personnel based in China or Vietnam may access your inquiry details through Inquiry Reader and business email to communicate with you, prepare quotations and follow up on your request.

Where regional checks use DB-IP Lite, we perform IP lookups on our own server to obtain country and U.S. state information. We do not send visitor IP addresses to an online geolocation lookup service or retain city names or coordinates from these checks with an inquiry. IP location is an estimate, not evidence of residence or consent. The unmodified database is provided by DB-IP under CC BY 4.0; our software normalizes recognized U.S. state names to state codes. Data attribution: https://db-ip.com/ and license: https://creativecommons.org/licenses/by/4.0/.

SMTP2GO delivers inquiry notifications and processes their contents and delivery information. Local delivery logs may retain metadata; historical email logs, where present, may contain message content. Google processes information when permitted measurement is enabled.

The storage and access described above may involve processing information outside your country, including in the United States, China and Vietnam. Providers have their own service and privacy terms; they do not necessarily use the website’s hosting region. Contact us for information about applicable processing arrangements and safeguards.

8. Retention and deletion

Saved inquiries and server access/error logs currently have no fixed time-based automatic expiry in the website configuration. Inquiries remain unless deleted through authorized administration. The SMTP2GO plugin prunes local API logs by a volume threshold, not a fixed number of days. Mailbox, provider and backup copies, where present, have separate controls.

The 90-day attribution period does not mean inquiries, emails or server logs expire after 90 days. Contact hc@hcpackagingasia.com to request deletion or ask about retention. Applicable record-keeping duties, ongoing business communications, security investigations or legal claims may affect deletion.

9. Your rights

Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of information, restrict or object to processing, withdraw consent where applicable, or opt out of advertising-related processing. Email hc@hcpackagingasia.com with your request. We may need reasonable information to verify identity and locate records; please do not send sensitive identity documents unless a necessary method is agreed. Requests are handled under applicable rights, exceptions and time limits. Browser opt-out is separate from deleting inquiry records.

10. Security and external links

We restrict inquiry administration access and use controls to protect inquiry processing, but no internet transmission or storage method is completely secure. Links to third-party websites or communication services are subject to those providers’ privacy practices.

11. Policy updates

The published policy will show its effective and last-updated dates. We may update it when practices or requirements change and provide additional notice where required.

Google privacy policy: https://policies.google.com/privacy
Google partner-site technologies: https://policies.google.com/technologies/partner-sites
SMTP2GO privacy policy: https://www.smtp2go.com/privacy/