CORPORATE COMPLIANCE & DATA PROTECTION

Corporate Privacy Policy & Data Safeguards

Shenzhen Sampson Technology Co., Ltd. is committed to protecting the corporate privacy, proprietary formulation data, and intellectual property of licensed extractors, brand partners, and wholesale purchasers. This policy details our data collection standards, bilateral non-disclosure safeguards, and international regulatory frameworks under GDPR and CCPA.

EFFECTIVE DATE: January 1, 2026
LAST REVISED: October 2026
JURISDICTION: International B2B Commerce
CLAUSE 01

Commercial Scope & Applicability

This Privacy Policy governs commercial business-to-business (B2B) communications, technical data exchange, sample provisioning, and wholesale hardware transactions between Shenzhen Sampson Technology Co., Ltd. ("Sampson," "we," "us," or "our") and licensed enterprises, corporate buyers, and extraction facilities ("Client," "Purchaser," or "You").

Our digital platforms, including https://sampsoncarts.com, are strictly engineered for commercial business entities operating in legal vape, hemp, and cannabis extraction sectors. We do not provide consumer retail services, nor do we intentionally solicit or process retail consumer profiles.

CLAUSE 02

Corporate Information We Collect

To provide accurate engineering recommendations, viscosity-matched aperture calibrations, and DDP shipping quotes, we collect relevant professional and technical metrics provided voluntarily through our RFQ forms, emails, and direct messaging channels:

  • Commercial Contact Details: Name, professional title, corporate business email, corporate telephone/WhatsApp number, and licensed business identity.
  • Delivery & Tax Identifiers: Physical facility address, state extraction license numbers (where required for compliance validation), and commercial customs clearance codes.
  • Formulation & Technical Specifications: Extract viscosity data (e.g., live rosin, distillate, high-terpene fractions), preferred aperture diameter requests, filling machinery types, and packaging CAD dielines.
  • Automated Digital Telemetry: Anonymized IP addresses, browser configurations, time zone coordinates, and referral traffic data gathered via secure diagnostic tracking.
CLAUSE 03

Lawful Basis & Purpose of Data Processing

We process corporate data under established legal standards, including contractual necessity, legal compliance, and legitimate commercial interest. Your information is strictly utilized to:

  • Review and calibrate prototype aperture sizing (0.9mm to 2.0mm) matching your specific formulation viscosity.
  • Coordinate air-priority sample fulfillment (via DHL/FedEx) and supply-chain logistics.
  • Transmit batch-traceable third-party Certificate of Analysis (COA) dossiers verifying California Phase 3 heavy-metal screening limits.
  • Fulfill customs documentation and DDP export declarations under legitimate international HS classification codes.
CLAUSE 04

Bilateral Non-Disclosure & IP Protection

🔒 INSTITUTIONAL TRADE SECRET PROTECTION

Sampson operates strictly as an OEM/ODM hardware manufacturing enabler. We do not market consumer end-products, nor do we compete with our clients. We maintain rigorous intellectual property and trade secret protections:

  • Proprietary Formulations: All viscosity metrics, terpene ratio sheets, and formulation profiles submitted for hardware calibration remain strictly confidential.
  • Closed-Mold Tooling & Artwork: Custom Pantone color formulations, silk-screen vector graphics, laser etching artwork, and proprietary mold tooling will never be disclosed, resold, or supplied to third parties.
  • Bilateral Non-Disclosure Agreements (NDAs): We routinely execute mutual, legally binding corporate NDAs prior to receiving engineering diagrams or CAD specifications.
CLAUSE 05

Cookies & Diagnostic Web Telemetry

Our website utilizes standard technical cookies to maintain catalog navigation, analyze aggregated site traffic, and protect inquiry forms against spam vectors:

  • Strictly Necessary Cookies: Essential session cookies required for responsive mobile viewing, hardware catalog filtration, and secure form submissions.
  • Analytical Telemetry: We utilize Google Analytics to assess anonymized metrics (such as geographic interest in full-ceramic hardware vs. pod systems) to guide cleanroom capacity planning.
  • Automated Spam Prevention: We employ Google reCAPTCHA v3 on technical RFQ forms to prevent automated brute-force attacks.
CLAUSE 06

Third-Party Data Disclosures & Zero-Resale Policy

Mandatory Disclosure: Shenzhen Sampson Technology Co., Ltd. does not sell, rent, monetize, or trade client commercial contact lists or formulation metrics to any advertising broker or competitor.

Corporate data is disclosed only to verified service entities strictly necessary for order completion:

  • Logistics Carriers: International courier partners (DHL Express, FedEx Priority, bonded DDP freight forwarders) for physical consignment delivery.
  • Accredited Analytical Testing Laboratories: ISO/IEC 17025 accredited labs performing sample batch ICP-MS screening.
  • Regulatory & Customs Authorities: Official export customs offices to fulfill statutory cross-border import/export declarations.
CLAUSE 07

Data Storage, Encryption & Security Safeguards

All digital interactions and RFQ transmissions across https://sampsoncarts.com are protected via 256-bit Secure Socket Layer (SSL/TLS) encryption.

Physical hardware tooling specifications, CAD drawings, and billing records are stored on isolated, access-restricted internal servers protected by enterprise-grade perimeter firewalls inside our Baoan, Shenzhen operational facility.

CLAUSE 08

International Corporate Rights (GDPR & CCPA)

Depending on your enterprise’s legal jurisdiction, corporate entities and authorized representatives retain statutory rights regarding commercial data:

  • Right of Access & Portability: The right to request copies of stored enterprise records, order histories, and testing certificates.
  • Right to Rectification: The right to update corporate addresses, billing contacts, or delivery authorizations.
  • Right to Erasure ("Right to be Forgotten"): The right to demand deletion of stored contact records, subject to international customs record-keeping mandates.
  • California CCPA/CPRA Rights: The right to non-discrimination for exercising statutory privacy protections.
CLAUSE 09

Age Verification & Commercial Qualification (21+)

Our hardware platforms and contract manufacturing services are intended exclusively for commercial entities represented by individuals of legal age (21 years or older in the United States and Canada, or the applicable legal age in your jurisdiction). We do not market to or collect information from minors.