Website operator and controller
Shaanxi Nanyang Dike Furniture Manufacturing Co., Ltd.Reference translation, not a registered English legal name · Unified Social Credit Code 91610000727343434HPRIVACY
Privacy Policy
This Policy follows the website and enquiry service as they are currently designed, from form submission through record keeping, notification and deletion.
This Policy explains how NEODIKO handles website browsing and enquiry information, and how you can contact us and exercise your rights.
Effective and last updated (UTC)
AT A GLANCE
Four points first
Current form
6 required fields + 1 optional fieldNo marketing subscription, file upload or advertising profileGeneral enquiry retention
6 months from submissionLonger only where required for law, disputes or securityPrivacy contact
privacy@neodikoglobal.comAnthony handles enquiries, privacy requests, scheduled deletion and reviewScope, controller and contact details
This Policy applies when you browse the public NEODIKO website or submit a product, spatial, visit, project or cooperation enquiry. Accounts, transactions, recruitment and other services that are not enabled are outside the current scope.
The operator of neodikoglobal.com and controller of enquiry personal information is 陕西南洋迪克家具制造有限公司 (Shaanxi Nanyang Dike Furniture Manufacturing Co., Ltd.), Unified Social Credit Code 91610000727343434H. The English and Arabic company names are reference translations, not registered foreign-language legal names.
Anthony receives enquiries and privacy or rights requests at privacy@neodikoglobal.com and coordinates necessary business and technical handling. Use this address to ask about this Policy, request an end to enquiry follow-up or exercise applicable data rights.
Data we process and its sources
| Category | Current data | Source |
|---|---|---|
| Required enquiry data | Name, telephone number or email, city, enquiry type, budget range and expected purchase or start time | Entered by you |
| Optional data | Additional notes | Provided voluntarily by you |
| Entry and page context | Entry code, selected brand or product, page language and current enquiry-page URL | Attached automatically from the website entry point |
| Security and submission data | Idempotency key, form start time, honeypot field and a hashed request fingerprint derived from IP and User-Agent | Generated by the browser and API runtime |
| Record and notification status | Internal ID, enquiry reference, created/updated times, notification and confirmation status, and restricted email error codes | Generated by the enquiry API chain |
| Consent records | Privacy Policy version, confirmation of the Privacy Policy, separate consent to international service processing, and the server-recorded consent time | Your active choices, recorded with the submission |
The enquiry business database stores a fingerprint hashed from IP, User-Agent and a protected salt, with no business columns for raw IP, raw User-Agent, form start time or honeypot values. The fingerprint remains subject to personal information protection and is not anonymous data. Cloudflare website and security services process raw technical request information and may create separate operational and security logs.
The current public form does not upload files or collect country, floor area, space lists or design status. After submission, the enquiry reference is placed in the success-page ref URL parameter and may appear in browser history or infrastructure access logs.
Purposes and applicable bases
| Purpose | Data used | Applicable-basis boundary |
|---|---|---|
| Receive and respond to an enquiry | Contact details, city, enquiry direction, budget, timing, notes and page context | Responding to your requested enquiry and any pre-service or pre-contract processing permitted by applicable law |
| Create a traceable record | Reference, idempotency key, status and timestamps | Maintaining record integrity and preventing duplicate submissions |
| Send necessary notifications | Enquiry content and internal recipients; an email contact may receive an attempted confirmation | Necessary notices directly related to this enquiry, with no default marketing |
| Protect the website and API | Request information, honeypot, timing and hashed fingerprint | Preventing abuse, protecting the service and meeting applicable obligations |
The current form contains no marketing subscription or marketing-consent field. Submitting an enquiry does not mean that you agree to receive marketing communications. Any future marketing must use a separate, unchecked choice and a clear unsubscribe route.
Required and optional data and consequences of not providing it
Name, telephone number or email, city, enquiry type, budget range and expected timing are required by the current form; the front end prevents submission if they are missing. Additional notes are optional.
Budget range and expected timing help us understand your enquiry and arrange a response. Before submitting online, read this Policy and separately confirm the Privacy Policy and international service processing; both choices are unchecked by default. You may decline and leave the form unsubmitted, or contact privacy@neodikoglobal.com about other contact arrangements. Marketing consent is not bundled with enquiry consent.
Recipients and processors
Anthony receives enquiry and privacy requests. Other sales and operations personnel and system administrators access information only when authorised by the company and necessary for the matter. Several email aliases may be handled by the same person and do not imply separate teams. No CRM, marketing list or advertising platform currently receives enquiry data.
| Recipient or service | Current status | Purpose |
|---|---|---|
| Authorised sales, operations and system administrators | Access is restricted by role and need to know | Read and respond to enquiries, maintain the system, and handle access, copy, correction, deletion or other rights requests |
| Cloudflare | Provides hosting, security, database and enquiry email delivery services | Site hosting, traffic and security, server-side Turnstile verification, Worker runtime, D1 storage and outbox, and Email Sending notifications |
| Google Workspace | Provides official-domain business mailboxes and correspondence services | info handles general contact, inquiries handles enquiries, privacy handles privacy requests, and sales is used only for an explicit sales exchange |
| Cloudflare Web Analytics | Provides website visit and page-load performance metrics | Collects visits and page-load performance metrics to understand page performance; does not receive enquiry text or marketing lists |
If you provide an email address, we attempt to send an enquiry confirmation, but delivery is not guaranteed. Cloudflare Email Sending processes enquiry notifications and confirmations; Google Workspace receives and stores business correspondence.
Turnstile processes necessary security signals including IP, TLS fingerprint, User-Agent, site identifier and origin. Cloudflare acts as a processor when protecting this website and, under its notice, as an independent controller when improving Turnstile bot detection. The component does not read, store or transmit form inputs; other service stages described above process enquiry content. Notice and rights contacts: https://www.cloudflare.com/turnstile-privacy-policy/ ; questions about independent-controller processing can also be sent to dpo@cloudflare.com.
International transfers
We use international infrastructure provided by Cloudflare and Google. Processing may take place outside China, including in the United States. The recorded location of the D1 database is western North America; requests, security signals, logs, messages and provider backup copies are not guaranteed to remain in one region. Data protection rules abroad may differ from those where you live.
The online form loads Turnstile and allows submission only after you separately confirm the Privacy Policy and consent to international service processing. These choices cover the enquiry information, consent records and necessary security signals in P02 processed through the international services in P05. We retain the policy version, both confirmations and the server-recorded consent time as evidence of that choice. You may withdraw consent at privacy@neodikoglobal.com; withdrawal does not affect earlier lawful processing and may prevent us from continuing the online enquiry. This choice does not retrospectively authorize older records or replace other obligations imposed by applicable law.
Opening a page itself requires network requests. Cloudflare processes IP, browser and request information to deliver pages and provide security and traffic services. This basic website processing may occur before you make form choices. Those choices do not mean that no international processing occurs when you first visit.
Retention
| Record | Retention rule | Exception |
|---|---|---|
| Enquiry business records and linked email queue | 6 months from submission, calculated as UTC calendar months | A legal obligation, dispute or security need requires a documented hold reason; delivery retries do not restart the period |
| Hashed request fingerprint and notification status | 6 months from submission with the associated enquiry | A retention hold may extend this only for abuse, a security event or a dispute |
| Separate rate-limit counters | Cleared by maintenance about 24 hours after their latest update | Not long-term customer records; separate from the fingerprint linked to an enquiry |
| Cloudflare Worker operational logs | The current paid-service retention window is 7 days | This does not mean every hosting, CDN/WAF or other platform log has a 7-day period |
| Cloudflare Email Sending events | The documented query and retention window is 31 days | May contain addresses, subject, message ID and errors; full Email Preview is disabled |
| D1 recovery history | The current paid-service Time Travel window is 30 days | Earlier versions may remain temporarily after deletion of a business row |
| Google Workspace mail and copies | Related business email under our control is retained for 6 months from the corresponding enquiry submission; standalone business correspondence for 6 months from sending or receipt | Anthony performs expiry deletion and review. Provider trash, recovery and backend deletion windows are separate from ordinary business retention; applicable legal holds remain exceptions |
| Exported backups under our control | Retained for 30 days from export | Anthony performs rotation, deletion and review; an extension for law, a dispute or security requires a recorded reason |
General enquiries and their notification queues expire after six UTC calendar months from submission and are cleared by scheduled maintenance. A documented legal, dispute or security need may justify a retention hold. Separate rate-limit counters are cleared under the approximately 24-hour rule. Anthony separately implements and reviews the six-month email and thirty-day export-backup deletion rules; D1 cleanup does not perform those actions. Provider recovery history and backend copies may persist within their own windows, so all copies may not disappear together.
Security measures
We use field and request-size validation, origin checks, server-side Turnstile verification, a honeypot and minimum completion time, duplicate-submission controls, hashed-fingerprint rate limiting, database constraints, atomic enquiry and notification-queue writes, and non-cacheable API responses to reduce abuse and processing errors.
Secrets are protected by access controls and system access is limited to what duties require. Anthony coordinates deletion, review and handling of security concerns. No transmission or storage method guarantees absolute security. Contact privacy@neodikoglobal.com if you identify a concern.
Your rights and how to exercise them
Depending on applicable law, you may have rights to access and copy your data, ask us to correct or delete it, restrict or object to processing, and withdraw consent where processing relies on it. The exact rights, exceptions and response periods depend on the relevant jurisdiction.
- Submit a request to privacy@neodikoglobal.com and include the enquiry reference if available.
- We should request only the information needed to verify identity and not unrelated materials.
- Stopping follow-up about an enquiry and withdrawing marketing consent are different actions; the current site has no marketing subscription.
Complaints
If you believe there is a problem with our handling of data, contact privacy@neodikoglobal.com so that it can be investigated and answered.
Where applicable law provides it, you may also complain to a competent data-protection or supervisory authority or seek the relevant legal remedy.
Cookies and similar technologies
The site does not use first-party advertising or marketing tracking. Cloudflare Web Analytics provides visit and page-load performance metrics and does not receive enquiry text or marketing lists. Cloudflare states that it does not use cookies or local storage to track individuals across websites. This does not mean no data is processed or establish an automatic legal exemption in any jurisdiction.
| Service or technology | Purpose | Scope |
|---|---|---|
| Basic network and security technologies | Deliver pages, prevent malicious requests and maintain service | Necessary request information may be processed when you open a page |
| Cloudflare Web Analytics | Aggregate website visits and loading performance | Not used for enquiry text, marketing subscriptions or advertising profiles |
| Cloudflare Turnstile | Bot verification before online enquiry submission | Loads after both form confirmations; current no_clearance settings do not issue a pre-clearance cookie |
Turnstile uses managed / no_clearance settings, does not issue a pre-clearance cookie through that component, and loads after both form confirmations. Other necessary security technologies depend on actual visits and platform security measures. There is currently no cookie preference centre. If we add non-essential technologies requiring consent, we will provide the applicable choices before enabling them. Technical information: https://developers.cloudflare.com/web-analytics/data-metrics/data-origin-and-collection/
Minors, updates and dates
The website is for the general public seeking furniture, spatial or cooperation information and does not ask minors to provide data. If you are below the age at which applicable law allows you to provide information independently, ask a guardian to contact us. If data is collected in error, we will take deletion or other measures required by applicable law.
This Policy takes effect and was last updated on 11 September 2026 (UTC). We will update it when information categories, purposes, providers, retention, technologies or legal requirements change, and provide further notice or obtain consent where applicable law requires.